Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e36302e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          DVB2Sml8Vx5U3m3tIvO0UMpiHnl5c+JEMPoZef5gdlE=
Subject key identifier:   C4:04:9F:FE:5E:21:F0:5D:10:E0:28:74:37:28:44:64:95:F5:82:89
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       78DBE2692840C88A50EA94CAB353F3A0DFCAB6B5
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:50 +0000
ROA not before:           Wed 25 Feb 2026 12:35:50 +0000
ROA not after:            Wed 24 Feb 2027 12:40:50 +0000
asID:                     7029
IP address blocks:        62.144.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:db:e2:69:28:40:c8:8a:50:ea:94:ca:b3:53:f3:a0:df:ca:b6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:50 2026 GMT
            Not After : Feb 24 12:40:50 2027 GMT
        Subject: CN=C4049FFE5E21F05D10E028743728446495F58289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:a0:a2:ff:74:5e:18:f9:2f:58:29:67:69:
                    b6:5b:f4:8e:68:87:54:2a:b5:f1:3f:d4:e4:74:0e:
                    8e:82:05:86:c1:74:a3:8d:ce:d1:5e:f3:2a:71:d7:
                    aa:2d:59:8e:f8:13:b7:bc:45:b1:0d:bd:41:dd:46:
                    c8:e7:c4:bc:34:67:3b:af:e1:c0:67:d9:f9:f5:53:
                    82:ea:0a:f7:95:05:b8:1b:01:e5:db:c1:2f:f3:5c:
                    c2:1a:9f:91:db:61:7d:aa:46:41:ec:f5:24:16:25:
                    67:be:56:26:d2:cb:a6:a0:2f:ee:f0:7f:82:4c:87:
                    b4:93:09:37:6a:73:1c:54:b7:57:d6:20:32:03:11:
                    de:43:0e:36:c3:8c:77:4e:27:bd:be:06:17:cb:ba:
                    09:f4:07:12:e6:df:0f:45:2f:32:9e:68:ff:84:78:
                    74:ed:70:2b:b9:90:f3:6e:9c:e1:f4:2e:57:48:d6:
                    95:f9:b4:0e:fd:b4:87:82:01:95:4b:1c:cb:c7:72:
                    d2:c6:53:26:67:b7:f9:43:42:f3:77:23:86:a1:f6:
                    f6:2f:ea:0e:25:3d:fe:26:c1:75:d3:91:1d:9e:a5:
                    13:8e:71:e7:12:e1:59:59:04:27:e2:70:02:37:a4:
                    4a:d3:de:65:a7:57:c6:c8:e2:08:0e:1b:1b:e2:7b:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:04:9F:FE:5E:21:F0:5D:10:E0:28:74:37:28:44:64:95:F5:82:89
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36302e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ec:56:f7:70:f1:a2:27:95:35:35:cb:1c:2c:98:ec:ed:23:
         8e:e8:b4:45:15:e3:69:d8:51:d5:50:96:51:a2:01:13:14:4d:
         ae:46:eb:79:9f:9c:85:b1:56:75:14:99:15:ff:83:69:59:e3:
         ef:ff:56:5e:1f:89:be:65:78:06:9e:45:d1:66:ef:fb:50:2d:
         53:16:e8:87:3f:14:38:4d:99:cb:bd:c5:10:52:33:dc:ac:18:
         29:1b:e8:ae:71:13:27:b2:8f:2c:22:94:e4:57:af:f9:60:d2:
         0b:e0:95:52:1c:66:03:7f:14:8c:ca:a9:1d:50:7a:c4:b5:8c:
         09:09:ef:60:3c:a6:9c:4f:f3:eb:8e:d8:51:ae:0f:4b:fa:c6:
         84:ee:ea:06:b7:f2:59:75:8c:e0:35:6c:e4:44:f1:b7:be:fd:
         17:07:61:79:42:68:9e:9d:49:15:8d:3c:c3:25:fa:f1:48:8e:
         8b:19:28:e1:fb:e4:6b:53:db:1e:18:27:2d:74:0c:e7:05:80:
         ad:31:0e:69:c0:5d:a8:a0:d5:3f:1d:9e:f9:f2:a4:3d:0e:ac:
         56:21:00:5a:2e:ff:11:71:a6:44:6c:42:9c:c2:9d:4a:94:c1:
         4e:21:8f:cc:ed:73:68:ae:c5:87:56:88:c0:e7:09:b5:fb:ec:
         37:73:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:21:02 2026 by rpki-client