Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e36312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          dwod3hQ+yuVb3IcgOmZRyVqyl+qHLwBl/sulGcReLPM=
Subject key identifier:   5F:4A:7B:AA:FB:BF:83:85:0F:5A:F2:FD:EE:FD:72:3D:19:1C:4A:63
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       42359DA2F95AB8AA54124DDBAD94DAE76895825B
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:17 +0000
ROA not before:           Tue 28 Jul 2026 12:13:17 +0000
ROA not after:            Tue 27 Jul 2027 12:18:17 +0000
asID:                     5650
IP address blocks:        62.144.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:35:9d:a2:f9:5a:b8:aa:54:12:4d:db:ad:94:da:e7:68:95:82:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:17 2026 GMT
            Not After : Jul 27 12:18:17 2027 GMT
        Subject: CN=5F4A7BAAFBBF83850F5AF2FDEEFD723D191C4A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:cc:22:bd:9d:ea:a4:69:4f:2a:68:b3:db:
                    a3:fe:5c:c4:92:f7:b5:f7:07:a0:5a:25:03:fc:4f:
                    09:68:43:75:21:ee:0f:30:01:27:cf:f2:f6:74:2a:
                    29:8e:79:c8:a1:de:48:c9:ff:c0:8c:e9:4f:74:4e:
                    56:5b:ff:eb:b0:37:03:bb:28:1a:ee:2a:1d:c1:de:
                    db:d0:e5:f1:10:0c:4e:ed:39:aa:fa:7d:31:d7:46:
                    14:f6:3a:47:bc:a4:61:15:a5:56:b6:6b:23:6c:75:
                    91:26:f5:71:b7:62:13:b7:5c:63:96:e6:26:98:09:
                    78:1b:a5:bf:b1:2a:37:31:9f:f9:f9:34:6a:3e:e1:
                    a9:bb:04:a4:5c:30:d4:9a:bc:43:c5:39:df:66:80:
                    d3:81:48:d9:2f:45:d9:af:2e:0d:da:c8:7d:77:d6:
                    ea:b6:5a:58:05:7b:9d:18:7e:46:fe:3c:49:7b:80:
                    02:b5:83:eb:48:84:f5:08:b2:62:cd:c8:ea:6e:f5:
                    99:aa:f4:32:77:ce:c1:db:82:40:93:df:f0:18:82:
                    e1:e5:08:35:24:94:b1:60:55:d6:eb:fa:06:c6:ef:
                    4e:b0:c8:d3:51:e6:bc:f9:9c:81:5c:90:9d:b6:af:
                    f2:d6:d5:c3:db:df:47:18:99:89:d8:58:8c:09:47:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:7B:AA:FB:BF:83:85:0F:5A:F2:FD:EE:FD:72:3D:19:1C:4A:63
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:50:eb:84:00:3b:f2:62:40:61:0d:dd:20:7d:9b:e7:46:70:
         ff:4c:ab:37:8e:e2:4d:54:4c:e3:29:ff:7f:97:b7:7c:a0:91:
         b9:2a:96:e7:09:2c:dc:c8:08:2d:5e:2f:45:ff:f9:70:2d:4c:
         c7:f3:72:a6:d6:a3:b4:44:26:8f:0e:dd:5d:1c:c2:e2:ee:17:
         bb:2b:2d:6f:ea:42:e2:32:ee:9f:c9:d0:8c:83:34:78:c7:09:
         20:22:6e:4b:99:53:44:7a:1c:8d:bb:90:96:e5:79:f7:14:19:
         d0:64:02:51:54:4e:af:16:24:55:60:9f:af:f2:bf:fb:fd:da:
         b4:2c:7f:8c:69:83:10:0a:34:22:96:7d:58:dd:67:3c:7e:c1:
         15:cc:7e:24:c7:d0:c8:7d:4b:04:5d:e9:b6:8f:04:c7:aa:17:
         79:35:7b:ea:26:75:f9:21:3b:a6:0d:d6:d8:96:e4:3c:ea:58:
         90:e9:58:ea:8c:9b:4a:94:de:53:d4:5f:ed:9d:6e:f4:56:a6:
         2c:39:ef:34:d7:23:65:61:9f:1e:6e:0f:71:1e:f5:4c:b8:03:
         1d:60:43:53:61:b2:38:31:06:62:b8:47:83:7f:57:64:39:6b:
         fd:e6:05:04:fc:50:51:eb:40:9a:58:d8:48:e9:ef:c7:21:b4:
         41:5b:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:41:03 2026 by rpki-client