Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e203133333437.roa
File:                     36322e3134342e36302e302f32342d3234203d3e203133333437.roa (raw, json)
Hash identifier:          PODWyianF/vYnl/X9anc2sxCKJ4ecvX+tRITu0N+frM=
Subject key identifier:   94:0F:9D:6E:E8:90:5A:90:DD:E4:5E:C9:52:2F:13:26:D6:24:8E:B3
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       44E411F1E3BE330BBA9FBE546EC8DEADC8C2B1B6
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e203133333437.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     13347
IP address blocks:        62.144.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e4:11:f1:e3:be:33:0b:ba:9f:be:54:6e:c8:de:ad:c8:c2:b1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=940F9D6EE8905A90DDE45EC9522F1326D6248EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:7b:bc:56:6a:af:c8:c7:29:96:46:23:ce:
                    35:53:d2:7e:4c:f7:be:fd:59:8c:67:78:2f:ba:83:
                    60:ef:e3:cc:12:ff:5f:27:d9:30:1e:9f:6e:ca:85:
                    80:75:1d:b0:2c:0a:cb:19:70:f4:3f:42:b3:60:c3:
                    5c:b4:48:2d:cb:e6:45:a0:a1:e2:db:f8:45:07:e1:
                    f8:35:20:ee:5f:e6:b5:5b:5b:aa:92:39:d1:0c:09:
                    04:b0:7b:49:60:2f:13:79:1c:4e:a2:ff:f6:41:21:
                    61:5f:9e:88:03:33:23:cc:8a:52:b4:52:d7:c9:27:
                    e4:45:75:0e:80:0b:b5:fe:7c:3c:7d:a6:d2:63:a0:
                    c0:73:ee:ad:22:44:2f:c4:9d:2b:d9:17:bc:69:cc:
                    57:38:86:a4:0f:6f:b0:80:08:95:83:b9:a4:24:09:
                    c4:f9:0c:40:b9:c0:a0:bd:73:58:c8:5e:bc:6c:c2:
                    04:bc:d7:d4:2f:d1:ff:e9:44:2c:b4:5e:1f:75:59:
                    4c:2f:9a:1c:3e:0b:9a:1a:d1:10:d4:e2:51:ab:5a:
                    4f:a5:f2:7d:8f:a2:fb:4e:ed:16:14:f4:9f:af:ca:
                    b6:b1:18:2d:11:cc:ce:42:c4:cb:ed:d7:23:f4:98:
                    14:6c:b7:90:b5:5a:c2:c5:5d:28:b1:15:88:d6:37:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:9D:6E:E8:90:5A:90:DD:E4:5E:C9:52:2F:13:26:D6:24:8E:B3
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e203133333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:0c:26:7e:58:3c:77:96:e4:39:88:c7:d5:4d:ae:bc:dc:3c:
         32:af:1b:5c:c1:1a:86:2d:c2:b3:65:d1:74:2f:5d:4e:84:60:
         25:c4:d1:a4:28:ac:1a:1a:f1:53:0a:18:08:30:15:38:15:85:
         e3:7b:fc:78:21:0b:60:a8:a5:8f:f1:bd:40:47:3e:bd:7a:9d:
         db:62:ba:9f:1c:c8:fc:b3:ad:a3:c8:67:77:b3:ff:76:ea:c5:
         0a:20:1a:f2:f3:34:13:f7:95:3f:33:44:b4:71:ad:14:c8:00:
         42:82:c9:98:cd:b3:9a:e7:13:94:28:7d:0a:11:c2:93:97:cf:
         23:cd:b4:c4:4c:91:20:8f:bc:40:8a:0b:0a:03:51:27:00:ec:
         c6:6b:d8:77:9b:44:7e:f5:bd:97:60:e4:47:d2:26:91:a4:f5:
         97:79:b4:ab:1c:34:cb:f4:d9:89:28:a6:11:cd:83:82:31:34:
         8b:07:df:a0:04:1d:4d:de:2b:9d:e2:04:0e:e0:f2:2d:47:aa:
         eb:3f:b6:6b:12:81:72:94:08:35:2f:49:85:52:4f:5c:01:33:
         58:46:19:1a:22:d9:ec:b3:ec:db:f5:d4:32:5e:9a:05:59:6d:
         68:9f:e9:b7:cf:2e:1e:77:fd:c1:6a:90:cf:d8:a3:f5:69:92:
         c7:6e:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:08 2026 by rpki-client