Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35362e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          vdlGdZfCqFfdu86m65qcmA6jQjojWkQpaYE2U5aYPD8=
Subject key identifier:   CF:CF:F4:7E:4B:66:A1:FE:07:4E:C5:D5:7E:7E:98:59:71:F4:26:3A
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       54C9594FA1FDA95699D319BBA398132B7C629219
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     5650
IP address blocks:        62.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c9:59:4f:a1:fd:a9:56:99:d3:19:bb:a3:98:13:2b:7c:62:92:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=CFCFF47E4B66A1FE074EC5D57E7E985971F4263A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:be:9d:74:46:43:43:e1:d4:17:4c:41:9a:
                    bd:77:c0:d8:03:b4:84:5c:b7:9c:78:85:c5:fb:7c:
                    1e:17:ed:2e:cc:55:c8:7a:2a:f3:fa:38:27:b7:90:
                    fb:5c:54:0a:28:a7:19:63:20:f9:77:aa:2a:85:54:
                    e7:bb:ba:6e:85:40:19:96:3e:16:9f:85:51:21:cd:
                    75:f7:48:3c:4a:c5:24:2c:29:4b:62:ff:ed:43:92:
                    18:20:69:a3:e5:cd:f6:dc:36:f0:7e:ed:2b:dc:f5:
                    73:9f:2d:61:40:80:1d:58:7c:6e:99:97:76:e4:16:
                    93:ad:28:70:cb:80:6a:e0:05:60:24:3d:98:82:6a:
                    20:8f:cb:d8:5e:a7:8c:f9:7d:5b:d2:31:ff:d4:49:
                    1f:76:88:1d:27:9e:ae:7b:f1:e8:a7:ff:a7:24:85:
                    4d:3a:a7:68:fc:10:72:93:a6:5e:43:16:06:4f:c7:
                    4c:d5:89:89:4e:c6:4c:c2:d2:94:17:3f:8e:e1:99:
                    45:e6:1d:85:d5:f1:91:62:9b:55:71:15:9f:ab:01:
                    4d:bd:e4:4a:59:c7:cd:d9:04:0c:c1:e2:19:bf:f6:
                    8c:78:82:25:32:c5:c8:36:1c:e8:72:cc:54:e1:16:
                    72:2e:ac:ed:c5:ce:ae:ef:f0:f9:62:7d:18:20:8f:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CF:F4:7E:4B:66:A1:FE:07:4E:C5:D5:7E:7E:98:59:71:F4:26:3A
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:b9:bc:a1:e8:e9:87:73:b3:04:4f:32:65:55:e8:9c:2e:
         ee:a1:bf:2e:c1:de:07:eb:7c:df:36:3a:14:a5:12:4a:c6:fc:
         f9:fe:bc:fd:38:f0:31:37:cc:30:5b:82:dc:7c:99:49:ba:ba:
         50:34:06:48:04:7e:af:95:8f:bc:f9:cf:57:3f:f8:f5:1d:a3:
         61:03:37:38:ac:45:4d:f3:62:18:e9:47:82:db:09:99:49:4b:
         fe:d1:b6:6b:5d:9f:cd:44:54:b8:1c:86:f5:bc:25:34:85:82:
         66:17:46:97:64:eb:f1:fa:73:fa:56:0d:1a:2e:f9:93:4d:a2:
         ae:db:6d:25:db:6f:fd:d5:db:ae:c0:9c:ed:39:50:98:9c:4e:
         0a:08:91:d7:2a:eb:5c:96:25:11:7c:48:16:15:96:4d:49:66:
         c1:be:00:30:26:c8:0f:38:0a:ab:ff:c7:dd:30:68:09:e0:c3:
         79:4a:4b:0f:f7:47:98:5e:cc:ba:4a:0f:65:15:37:64:54:f0:
         4d:bc:ca:56:bd:4d:61:32:2d:2f:6e:22:5c:7f:1d:5f:3c:82:
         c1:a2:0a:62:3b:d8:39:96:2a:67:83:ac:f1:64:52:30:d2:87:
         c9:75:e6:0a:24:41:f7:4f:79:8e:c4:3d:50:b0:e6:db:7e:ab:
         95:b7:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:41:21 2026 by rpki-client