Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          NIOLDIn2J16xw7VOWedpFSMR5/i0bEWXBfoB/OkIEvU=
Subject key identifier:   0B:B5:EC:29:92:E7:D6:D7:9D:F6:8F:69:4E:3F:9F:41:F3:02:23:D8
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       750B92172BA1D9CB8CA92F246F320A6E019036D2
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     5650
IP address blocks:        62.144.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0b:92:17:2b:a1:d9:cb:8c:a9:2f:24:6f:32:0a:6e:01:90:36:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=0BB5EC2992E7D6D79DF68F694E3F9F41F30223D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:88:2b:cf:f7:dc:0b:f9:1d:bb:e6:47:6c:79:
                    5f:56:2e:df:9a:cf:c8:a1:ca:ef:6a:f3:b9:d1:6b:
                    47:1d:74:30:95:3f:1f:ea:34:61:77:e8:ba:56:e4:
                    66:06:c8:34:5f:2f:11:6b:47:7b:cb:61:53:ce:e0:
                    87:42:77:7f:1b:7d:09:b0:77:ae:4d:dd:9a:6f:31:
                    7d:11:9e:0a:93:50:3c:11:37:83:33:b7:0e:40:6d:
                    7e:5c:24:0d:27:21:a5:cd:08:7e:84:ab:89:89:58:
                    52:83:3e:1d:99:0a:8c:58:10:c9:3b:2e:ce:ab:87:
                    8a:16:42:6a:8b:15:2d:3d:b0:04:b2:b4:0a:d2:91:
                    b9:92:5e:59:5c:93:24:2d:30:ed:1e:6a:88:92:3c:
                    8e:e3:bd:bb:b2:45:20:e6:6b:df:bf:06:c0:52:8c:
                    1d:96:7b:5b:38:84:ce:30:fc:0e:ff:2e:af:8d:e2:
                    4a:69:98:2d:25:14:60:19:02:45:54:af:5b:12:86:
                    0e:3b:5a:34:f8:2f:c5:86:25:e3:97:23:3a:5b:3e:
                    39:b4:0e:1d:26:ed:18:8a:66:52:c2:c5:c5:2a:7c:
                    07:57:f6:b7:8a:94:ef:c4:15:12:f5:3c:a6:40:36:
                    81:b1:bb:3a:cc:38:b5:0c:24:d4:c6:85:d3:4d:1b:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B5:EC:29:92:E7:D6:D7:9D:F6:8F:69:4E:3F:9F:41:F3:02:23:D8
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:3a:50:fa:18:a4:b2:c1:88:7a:a7:c3:3c:d2:7a:ae:e0:
         3e:aa:c7:a0:f6:fa:ff:08:d4:26:4b:42:94:db:1d:87:a2:de:
         71:dc:96:f2:32:cd:f3:35:08:50:7f:fd:ed:a2:75:ec:4b:7f:
         8a:f2:d7:36:ea:2e:8e:02:61:b6:2f:7f:5a:a2:3e:06:a5:68:
         8e:69:49:73:2c:81:e3:b7:d4:d2:b3:b0:71:9a:8a:68:32:7e:
         36:00:f7:4e:0d:bc:e4:bc:2b:e5:e9:bf:e6:ea:fd:76:09:99:
         88:dd:ca:7c:3d:2d:d3:6f:7e:dd:21:79:b1:76:0c:ef:49:b7:
         f0:99:26:35:e2:38:69:b0:7c:8d:da:d1:f5:40:f5:c9:dc:ae:
         87:8f:7e:5f:4c:7d:59:2f:3f:6b:13:ac:50:8c:1b:d2:f8:22:
         e6:a8:08:95:cb:b1:70:aa:fe:4f:2b:05:1a:2a:04:a7:8e:f7:
         c5:a0:e7:b7:1d:c7:2d:41:e6:ab:de:e3:51:da:22:99:23:4e:
         54:8a:2e:f7:ff:9e:26:10:63:b4:62:21:2f:de:e1:b1:e9:73:
         0b:1f:54:1a:e6:d5:9b:0a:4b:01:70:f7:d6:52:cf:d2:3e:70:
         40:f2:c0:2d:8f:ab:bb:ae:e5:e1:1c:34:ee:b5:5e:06:90:73:
         39:47:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:01 2026 by rpki-client