Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35392e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          KWx3sJJto758OATA3LwuqaQW31jig2uWqaXtBcoJ36s=
Subject key identifier:   BC:43:EF:3D:12:E1:28:55:01:07:6A:1B:02:EC:00:C5:9C:E6:DB:43
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       5583669034F1EB142D46B56B126D69FD21729430
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     7029
IP address blocks:        62.144.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:83:66:90:34:f1:eb:14:2d:46:b5:6b:12:6d:69:fd:21:72:94:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=BC43EF3D12E1285501076A1B02EC00C59CE6DB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:ae:0d:21:e7:01:5a:05:e5:2a:31:c8:24:
                    f9:a0:2b:90:b6:fd:7a:0d:72:be:b6:69:ab:09:44:
                    fe:c3:9a:69:76:d2:f5:a2:21:c9:29:32:73:6a:1e:
                    27:7d:87:f2:cf:f4:ad:6f:b4:4b:14:16:04:ad:8b:
                    b6:f2:b9:a9:4f:ce:cc:5e:0f:53:38:fc:12:c7:e6:
                    34:ab:fe:9e:8f:f4:c7:32:e3:7e:71:c0:13:88:8e:
                    69:59:12:b9:8b:f7:89:8a:a5:4b:ac:59:4c:6b:8a:
                    ec:75:20:ad:99:2d:8d:b7:99:fb:23:0a:df:94:4b:
                    4b:ae:da:c2:ca:93:3e:21:5a:3e:80:31:e5:ea:e8:
                    63:72:7f:d2:50:7a:39:21:ae:3f:57:3b:54:3b:96:
                    45:89:1a:58:f9:23:37:e9:e7:27:47:44:72:58:12:
                    18:0f:54:1f:5d:bc:d3:fd:64:d4:3b:32:6c:e7:1e:
                    de:8d:6a:5d:9c:6d:f8:79:6d:6a:aa:86:56:90:df:
                    43:3c:2e:94:38:19:ef:3a:bc:68:65:5b:d8:54:c5:
                    c6:71:74:a0:92:ff:f9:da:5f:09:9a:46:f8:b5:9f:
                    51:ae:2a:05:2a:7c:40:ce:e3:bc:0e:17:c4:e1:05:
                    c4:44:9b:38:d1:9a:cf:72:ed:fd:b4:e0:c3:02:fe:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:EF:3D:12:E1:28:55:01:07:6A:1B:02:EC:00:C5:9C:E6:DB:43
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35392e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:9d:a7:c0:70:96:1c:38:d0:f0:30:5f:cf:ae:19:f2:00:53:
         d5:1d:57:d2:c8:07:03:11:ab:10:30:f0:23:c4:3e:04:bd:ed:
         72:b2:57:10:74:74:f1:a3:90:83:24:0f:47:6f:f7:41:1f:8b:
         99:67:e9:5f:3c:8c:a0:cc:68:1a:6b:7a:c6:86:56:28:8c:20:
         3a:13:8d:f2:34:95:22:56:2a:1b:87:14:fa:24:6e:b7:83:a3:
         bd:83:a0:81:20:d8:07:cd:85:c1:99:ca:31:e9:7b:5c:5f:6f:
         05:64:25:3c:c6:9d:78:ba:21:86:6e:0f:58:8c:07:f1:1d:fa:
         98:89:1c:3a:15:3d:ac:a3:3c:53:fc:2e:87:1e:b2:04:16:f6:
         c0:3f:8b:ef:1d:f3:39:e2:d8:fc:35:cd:c5:fe:f1:f1:3e:86:
         be:1a:76:98:8e:cf:a5:06:86:6d:9f:8b:a7:de:74:4c:f6:c6:
         38:c4:1a:21:6f:e3:57:92:4f:15:54:39:61:21:79:84:83:a4:
         d9:c0:34:19:f0:44:45:fa:b3:6e:38:01:29:85:4e:2b:60:73:
         d9:a5:27:7b:3f:a4:a0:45:04:2f:56:b5:29:1b:7c:e8:d4:ef:
         76:72:db:57:2b:ff:f1:d8:0a:02:8e:1f:e0:b7:7f:5a:2d:b2:
         46:ef:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:12 2026 by rpki-client