Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e203132303833.roa
File:                     36322e3134342e36312e302f32342d3234203d3e203132303833.roa (raw, json)
Hash identifier:          Lh5pVw3e4QTfcATehftdpLn7vEyycPhx08nLWIGSxxU=
Subject key identifier:   76:C5:17:15:E3:A0:6D:BC:E5:33:35:43:D1:92:85:84:87:57:C1:FD
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       623FA7B1C92230C75FE49B14A6D115557E0F6B3D
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e203132303833.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     12083
IP address blocks:        62.144.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:a7:b1:c9:22:30:c7:5f:e4:9b:14:a6:d1:15:55:7e:0f:6b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=76C51715E3A06DBCE5333543D19285848757C1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:e4:49:b5:0e:89:a6:df:bb:0d:8f:6f:e7:
                    b8:ed:7a:3e:67:dc:1a:77:91:a6:82:1b:79:8f:3b:
                    c6:8e:32:0f:73:76:19:ed:78:97:de:7c:ec:91:da:
                    23:fb:c8:d4:9b:57:b0:38:e6:7e:be:68:48:b5:dd:
                    7d:8d:f1:28:c9:cf:7f:52:d0:3d:ba:ff:93:ba:9e:
                    2e:64:09:bf:cc:e8:de:98:94:f8:7e:c4:5e:97:2f:
                    28:55:dc:57:c9:48:6b:ac:11:1e:d9:ef:b2:cd:ca:
                    f2:df:42:06:ba:18:ce:d2:b7:39:76:51:d3:eb:6c:
                    53:8d:a3:3c:8a:fd:bb:9b:1a:3a:c5:29:91:3c:c2:
                    d4:74:27:76:1c:f3:0a:de:bb:61:fe:ef:6f:78:e0:
                    e9:a6:a9:62:69:48:39:a3:37:e4:85:40:a9:6f:b0:
                    1a:e9:50:02:28:36:d8:88:f1:fe:0b:d6:e5:0a:00:
                    f7:0b:b4:9f:11:cb:ce:25:c9:73:23:38:43:e6:22:
                    43:83:3b:d5:71:8c:a1:9b:1f:ed:a0:77:a6:d9:94:
                    06:7b:00:cc:62:2b:f3:63:90:28:3c:4c:3e:ac:20:
                    39:d0:dd:15:70:b0:2b:0f:62:13:25:2a:ef:52:7e:
                    06:3f:92:cf:ff:75:d7:11:c4:ab:7f:56:57:c6:74:
                    0c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C5:17:15:E3:A0:6D:BC:E5:33:35:43:D1:92:85:84:87:57:C1:FD
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e203132303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:cf:1a:5a:31:fe:4b:ab:23:96:11:48:f6:9c:4e:7e:f2:31:
         18:7e:0a:56:f4:c2:61:1b:a9:98:28:ad:49:b8:d1:12:ec:5c:
         1a:7d:2e:ae:32:da:08:2e:be:02:66:c7:fa:6d:1b:5f:39:62:
         18:55:e3:81:1d:4b:74:11:e3:f9:2d:7d:2a:99:6a:52:1d:3f:
         fc:99:1a:48:85:93:5a:4b:d0:c0:d4:cd:02:5c:d3:91:c1:82:
         96:77:da:b0:6d:df:36:43:fd:a3:1b:bf:08:b7:e4:64:1d:56:
         f4:e0:ae:b3:87:84:4f:4d:b2:07:4e:e9:f8:0f:e4:9d:4a:b6:
         ec:2f:c3:5a:15:7c:81:ab:b2:f5:25:eb:fe:ef:29:88:c7:42:
         06:74:75:99:3f:c5:73:25:72:c6:32:51:ca:22:47:21:40:73:
         51:3e:7b:9e:37:15:da:c1:3e:b5:0b:13:72:50:5d:56:af:bf:
         fb:83:c8:2d:9b:bc:0b:ab:34:7d:02:ab:76:b2:d2:11:fc:a7:
         38:6e:a0:e1:41:40:c4:c2:cc:92:6d:29:aa:a0:ed:90:d5:9f:
         3f:99:cf:39:99:a7:ea:c5:09:df:01:8f:cd:be:d3:7f:41:1a:
         f7:22:65:5b:80:bb:1a:85:90:8f:64:d5:60:71:28:fb:cc:43:
         49:c0:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:11:50 2026 by rpki-client