Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35372e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          6Xp5H5VI+9QiOJjHy2PlSKbj3Vu5wHjtfvfSiSxsou0=
Subject key identifier:   00:08:04:AD:B0:73:BE:59:8F:E9:E3:67:5A:F2:99:BC:21:E4:CD:68
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       42A99618AED4D305EF38D8ABB8D7EA17F199190E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:49 +0000
ROA not before:           Wed 25 Feb 2026 12:35:49 +0000
ROA not after:            Wed 24 Feb 2027 12:40:49 +0000
asID:                     7029
IP address blocks:        62.144.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a9:96:18:ae:d4:d3:05:ef:38:d8:ab:b8:d7:ea:17:f1:99:19:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:49 2026 GMT
            Not After : Feb 24 12:40:49 2027 GMT
        Subject: CN=000804ADB073BE598FE9E3675AF299BC21E4CD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:97:76:ae:46:1f:1d:96:b8:4b:b9:8a:f6:
                    fd:35:00:06:46:d3:f0:8f:59:4c:e4:fd:15:8d:14:
                    da:06:f4:12:75:d2:f5:62:3c:bc:95:5e:ce:93:fb:
                    cf:b9:a4:2f:7a:0c:e6:4d:8c:d6:de:1c:ec:76:0f:
                    e7:f8:bb:78:ea:fb:3b:cd:d3:4f:98:ad:96:d3:dc:
                    48:f1:5c:e5:4e:6b:9c:46:2b:9b:57:79:ae:41:4e:
                    5a:fa:a9:fe:72:33:54:81:4a:a3:90:09:39:4a:bd:
                    5e:41:d5:9a:e3:ce:7e:55:41:d3:d1:80:f6:e8:a6:
                    d3:1e:0c:c2:59:96:ec:3c:c8:62:1e:a6:b9:76:e9:
                    fd:84:63:a3:5b:3f:ce:8c:e1:13:44:e6:37:ba:c9:
                    cc:06:1a:88:74:58:1c:45:72:d2:6f:bd:ff:38:5f:
                    28:2d:1f:b8:83:7a:7b:8b:78:d8:ec:1c:c8:32:a0:
                    ca:c6:7a:f3:df:60:4e:f0:b6:3d:3e:de:a1:1c:42:
                    81:37:21:d0:32:85:55:5a:b5:d1:24:84:55:be:44:
                    85:e5:73:18:2f:3f:a9:db:65:1a:11:62:75:1c:33:
                    da:bb:d1:29:a6:9a:51:da:1b:d1:4f:e7:1e:d7:34:
                    48:5e:a4:6b:b6:01:b5:74:eb:83:39:d2:d7:31:24:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:08:04:AD:B0:73:BE:59:8F:E9:E3:67:5A:F2:99:BC:21:E4:CD:68
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:76:36:b3:65:04:01:46:06:b7:b3:0a:0d:22:c7:63:9f:f8:
         4a:45:3f:e1:03:56:d2:c0:8c:56:4f:7a:94:3f:ae:1f:13:7f:
         4a:da:e3:a9:4b:99:92:b7:84:eb:bf:87:c5:fd:d6:a8:74:78:
         f7:e0:61:8c:8c:8e:f4:50:93:18:dd:1d:a4:9a:09:6e:17:86:
         b6:cd:eb:e7:94:d8:20:dd:19:d0:b8:fa:00:d0:89:d4:cd:1f:
         18:44:0c:5e:2a:41:27:22:3c:39:87:06:9b:9b:a9:fb:9c:bc:
         08:4a:4d:ac:29:68:6d:21:42:15:57:45:7b:f5:6b:b6:f9:5d:
         a6:56:47:c9:db:94:c6:d8:75:c5:93:ad:80:1e:4a:86:82:78:
         11:10:24:35:64:3d:ad:10:e7:db:c0:1f:43:eb:41:6d:6f:32:
         8a:48:85:4d:33:64:f2:4f:09:25:b4:7e:e9:43:d3:74:03:a8:
         a6:2a:d5:c2:4f:6d:6f:55:8b:60:b0:ba:0d:62:58:2f:70:9e:
         af:b2:a0:fe:14:3d:bb:24:8f:22:31:da:02:91:8d:d3:fe:31:
         2d:10:13:ee:2a:4e:ec:a7:33:1f:71:3a:43:b7:45:05:08:9e:
         21:d7:a2:37:3d:73:3c:d4:63:48:13:ec:9d:54:5d:e5:72:40:
         61:ad:bb:82
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUQqmWGK7U0wXvONiruNfqF/GZGQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjAyMjUxMjM1NDlaFw0yNzAyMjQxMjQwNDlaMDMxMTAvBgNV
BAMTKDAwMDgwNEFEQjA3M0JFNTk4RkU5RTM2NzVBRjI5OUJDMjFFNENENjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAI5d2rkYfHZa4S7mK9v01AAZG
0/CPWUzk/RWNFNoG9BJ10vViPLyVXs6T+8+5pC96DOZNjNbeHOx2D+f4u3jq+zvN
00+YrZbT3EjxXOVOa5xGK5tXea5BTlr6qf5yM1SBSqOQCTlKvV5B1Zrjzn5VQdPR
gPboptMeDMJZluw8yGIeprl26f2EY6NbP86M4RNE5je6ycwGGoh0WBxFctJvvf84
XygtH7iDenuLeNjsHMgyoMrGevPfYE7wtj0+3qEcQoE3IdAyhVVatdEkhFW+RIXl
cxgvP6nbZRoRYnUcM9q70SmmmlHaG9FP5x7XNEhepGu2AbV064M50tcxJP1nAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUAAgErbBzvlmP6eNnWvKZvCHkzWgwHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hMDM3NWIzOS1mOTQ5LTRjYjUtYjUx
OS1mOTQwMDhiMTY1NGMtMC8wLzM2MzIyZTMxMzQzNDJlMzUzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPpA5MA0GCSqGSIb3DQEB
CwUAA4IBAQAddjazZQQBRga3swoNIsdjn/hKRT/hA1bSwIxWT3qUP64fE39K2uOp
S5mSt4Trv4fF/daodHj34GGMjI70UJMY3R2kmgluF4a2zevnlNgg3RnQuPoA0InU
zR8YRAxeKkEnIjw5hwabm6n7nLwISk2sKWhtIUIVV0V79Wu2+V2mVkfJ25TG2HXF
k62AHkqGgngRECQ1ZD2tEOfbwB9D60FtbzKKSIVNM2TyTwkltH7pQ9N0A6imKtXC
T21vVYtgsLoNYlgvcJ6vsqD+FD27JI8iMdoCkY3T/jEtEBPuKk7spzMfcTpDt0UF
CJ4h16I3PXM81GNIE+ydVF3lckBhrbuC
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:32 2026 by rpki-client