Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e35392e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          JBRivYLbHkDyhzEJlyQ8KKLRS25C7/ALSjImtWU+SPM=
Subject key identifier:   B1:EF:24:4A:28:0D:FC:12:D4:EA:20:8B:81:F6:0B:42:B0:A5:45:55
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       54A63143E78A0E32A9ABFAEC901C96A1A0FBEF0A
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     13347
IP address blocks:        62.144.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a6:31:43:e7:8a:0e:32:a9:ab:fa:ec:90:1c:96:a1:a0:fb:ef:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=B1EF244A280DFC12D4EA208B81F60B42B0A54555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:c8:6c:15:56:f2:66:c4:c7:92:99:08:03:
                    7d:18:a6:55:c6:c9:a1:4b:6b:d9:c0:88:eb:ac:ca:
                    d0:2f:b0:11:9c:9f:8a:fa:a7:1b:62:c7:73:7c:03:
                    cd:ad:73:1a:91:de:57:3e:00:63:ce:af:92:58:44:
                    b5:2c:98:58:0d:a7:1d:30:ff:61:3c:fe:5d:cf:ed:
                    4c:43:20:69:1d:01:d1:76:e3:d6:74:a6:a8:cb:6b:
                    9d:58:38:2a:a6:ce:00:74:7a:59:46:a4:e2:bd:49:
                    fe:ae:22:57:64:e9:81:8f:65:a6:24:50:e2:f0:d3:
                    b1:0e:e7:38:db:17:da:86:3a:2b:25:da:14:34:35:
                    9a:f1:e0:70:01:db:e1:f9:94:5d:18:01:9d:44:f9:
                    0e:c8:ca:4d:ac:03:f3:b3:32:c3:2b:e9:9f:2c:80:
                    f3:b3:77:ac:d9:42:58:7c:43:34:bf:82:02:a5:f8:
                    1d:99:6b:af:d9:f0:8d:17:ea:f5:b1:88:87:63:25:
                    06:51:7d:36:6f:d0:f0:d6:4a:48:07:15:e8:63:3f:
                    79:ac:fb:31:cf:9a:9e:0f:10:0d:20:bf:ff:8d:59:
                    62:91:0a:b9:df:34:11:b4:86:9b:93:00:45:03:ef:
                    a0:81:c4:d6:a5:ce:d8:a6:bd:12:94:b2:1c:17:85:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:24:4A:28:0D:FC:12:D4:EA:20:8B:81:F6:0B:42:B0:A5:45:55
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:66:bf:04:74:a7:be:6c:c7:d8:48:78:70:0f:74:69:0a:
         3a:36:4b:da:98:75:eb:b7:e3:45:c7:a2:e4:3a:6f:55:9d:dc:
         2e:dc:27:33:3c:d2:80:79:e4:5a:36:9f:bc:b4:0d:e6:91:2a:
         3f:87:33:5d:55:bc:88:ff:f2:67:31:86:c0:1a:6f:b1:c5:c4:
         cb:a6:e3:b9:e8:98:7a:e7:2d:69:9e:e6:2a:59:bc:b3:bc:c9:
         cc:00:a0:8c:90:1d:0d:01:1a:ff:90:7a:01:27:cc:fa:c8:52:
         b3:be:3e:6c:29:f3:87:bd:6f:c4:06:99:98:e2:44:9e:7f:83:
         58:5c:c1:47:fb:4e:97:d9:8f:15:d4:4e:82:11:7a:14:70:3c:
         1c:42:fb:d4:30:18:86:6d:16:6d:b5:b0:85:c3:73:d0:ac:08:
         57:10:db:a4:6a:59:9f:1f:3d:63:07:89:d6:73:9a:3f:8d:9a:
         4a:25:64:fb:8a:58:95:33:34:64:49:f0:43:5c:57:1d:4b:8f:
         59:54:2b:af:0b:fc:4c:e0:5b:4e:6a:6c:b9:ec:37:29:ff:0c:
         37:7c:e2:f8:1f:d1:34:e5:21:b9:d4:0e:6c:a4:25:13:ba:11:
         e8:4e:63:16:a3:1b:2d:49:22:b1:b7:ec:af:34:e2:4e:ef:c3:
         85:81:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:15:46 2026 by rpki-client