Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e35382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          jc2Zku2yBWDqWYH/8KmXRxkYBWsjO0SynSPDlGY3peY=
Subject key identifier:   30:08:70:C0:49:A3:08:FE:CB:74:D4:A8:BD:2A:87:ED:2A:30:67:F6
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       7A15DAC5F3342297DA19DB6E649A7DAB99DF4F5A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     5650
IP address blocks:        62.144.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:15:da:c5:f3:34:22:97:da:19:db:6e:64:9a:7d:ab:99:df:4f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=300870C049A308FECB74D4A8BD2A87ED2A3067F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:f6:bc:50:12:c9:ec:b5:fc:56:98:6a:5b:
                    fc:61:d0:18:6b:2b:bd:d0:ba:4f:14:2b:61:eb:f4:
                    43:2a:00:44:ca:23:f3:73:53:c9:76:b2:b1:5d:8d:
                    8c:97:ca:e2:29:6b:36:28:db:25:bb:a5:52:41:70:
                    05:6f:c0:85:93:bb:7f:83:f4:a8:86:88:3b:88:8e:
                    a3:d9:0d:c1:66:10:8f:8e:96:58:ce:53:77:a2:30:
                    bc:41:05:64:e6:06:27:00:59:da:3a:d5:01:c6:34:
                    9d:f2:9c:50:e5:21:d4:ed:65:b3:cd:e4:5b:c1:39:
                    3a:04:4d:65:26:9e:07:57:5e:42:bd:fc:45:ca:48:
                    55:29:c6:c4:e4:db:7e:7a:2a:59:0f:22:60:27:1a:
                    32:43:2c:24:31:e1:63:d3:24:dc:4a:12:0f:4f:fb:
                    2f:a1:8a:49:b2:0c:90:fe:50:6f:e1:65:68:dd:06:
                    e4:48:7d:76:9b:a8:bf:4b:9e:e8:c9:3e:72:20:88:
                    1f:84:49:e8:44:66:75:c4:98:12:c6:a8:7e:9f:a3:
                    e7:ad:ab:6d:d3:1f:ef:da:ce:61:93:48:57:9a:f3:
                    16:22:a6:ec:9f:12:85:e4:c5:8b:36:93:fc:18:04:
                    30:ec:c8:39:da:c1:da:44:d0:5e:3b:8c:b8:b4:6c:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:08:70:C0:49:A3:08:FE:CB:74:D4:A8:BD:2A:87:ED:2A:30:67:F6
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:5b:c9:4d:f3:5a:a4:b0:38:7f:88:26:05:09:d2:6b:89:ca:
         c5:49:b0:f9:47:5c:60:1e:0e:92:8a:e6:5f:82:b6:7f:bf:0a:
         d7:3a:21:98:1d:b9:24:9d:da:30:00:2b:31:80:df:31:db:ca:
         d1:61:86:13:00:77:43:11:d8:c7:5b:72:ee:01:14:e0:44:20:
         c8:e2:8e:b8:22:f9:68:f9:c2:d2:f7:e1:39:27:24:2e:33:72:
         99:62:2e:5a:b1:15:00:da:eb:05:24:19:53:7f:b9:b0:27:dd:
         11:b1:10:a8:df:72:74:16:fc:8f:d9:1b:b9:71:55:a4:07:9d:
         f0:80:95:b7:20:3c:b4:09:23:6a:38:2d:d7:e0:4e:84:8d:2e:
         2f:2a:63:02:ba:91:6c:61:39:3b:95:40:46:72:29:bd:f7:20:
         29:77:74:ea:e8:75:d4:23:04:aa:3c:c7:94:f8:1c:f4:a2:1d:
         21:be:44:b3:41:ae:ed:29:ae:3e:ee:57:11:9f:81:22:dc:9f:
         fc:b7:dc:05:b7:7f:85:ca:71:17:bb:72:08:e0:8e:18:e7:7a:
         98:00:92:84:a6:0c:32:6b:c4:dc:a2:93:b3:18:65:64:36:b7:
         6f:ad:ee:07:3b:d7:39:e7:73:81:8a:cb:7c:bf:aa:bb:4b:da:
         de:4f:2d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:34 2026 by rpki-client