Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e36312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          UINOmaz/wEz6f2JGO1B+qURrtLq4L6IRAymeDWUoiAg=
Subject key identifier:   E0:0D:8C:BC:16:AB:DD:60:C1:82:BB:98:B2:AD:E5:85:C4:78:BC:21
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       6381E7B8CF3BE00C95726AE09B8CF58778F00602
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     7029
IP address blocks:        62.144.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:81:e7:b8:cf:3b:e0:0c:95:72:6a:e0:9b:8c:f5:87:78:f0:06:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=E00D8CBC16ABDD60C182BB98B2ADE585C478BC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:6d:97:41:52:17:75:0b:8a:d7:6f:68:3c:
                    df:bf:ca:da:0b:99:27:5e:91:47:d9:cc:ec:9b:ca:
                    ca:ec:82:69:f6:09:a2:24:03:ff:66:35:4e:46:9b:
                    03:d0:90:2a:c8:32:72:05:c0:2b:fe:10:0f:1d:4d:
                    33:c3:72:3f:08:60:1d:58:92:d3:7e:e2:dd:fa:c7:
                    a5:cc:1d:7e:0b:87:73:c8:74:6b:c2:f8:eb:93:f8:
                    ee:49:29:2c:ae:d5:d3:5a:1e:4b:3b:43:c0:9c:7f:
                    a2:a4:29:af:ab:a3:17:1d:27:67:7e:45:81:d4:22:
                    1a:db:ea:f1:4d:9d:68:4e:71:79:e4:de:9d:42:2f:
                    80:09:b0:55:ca:11:13:ae:63:1b:09:de:b6:4b:08:
                    3b:89:5a:ec:0b:36:9c:c9:88:e8:3e:91:99:32:65:
                    bd:ed:69:88:a4:4c:1a:cd:c2:c9:be:c4:f6:0c:6a:
                    7b:9e:11:5c:b4:eb:1a:90:1c:29:0b:50:97:2d:0e:
                    9c:89:43:ab:39:86:bc:b2:69:e5:6e:f8:98:b6:6b:
                    55:0a:e2:7a:55:de:40:77:c3:50:98:3a:58:a6:5d:
                    0b:94:28:02:3c:f6:e9:0f:69:12:c5:31:84:37:79:
                    04:dc:4d:1f:86:82:7c:e8:98:59:cb:94:a6:f2:d8:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0D:8C:BC:16:AB:DD:60:C1:82:BB:98:B2:AD:E5:85:C4:78:BC:21
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:08:4a:c4:be:b1:4a:a4:96:d8:3c:f1:7d:0d:0c:e8:c6:7d:
         7f:10:77:2b:8c:ac:c5:ff:9e:f3:21:34:cc:f2:1a:b7:b6:e7:
         e6:ce:6d:cd:13:8d:e7:cc:17:d2:1b:85:19:ed:b9:00:e5:6c:
         00:b6:00:d5:b4:26:f7:e5:6e:96:80:47:4b:1c:c0:55:3a:7a:
         27:79:3e:14:1f:ad:23:7f:1b:a5:6b:f6:61:44:ce:12:af:1c:
         a7:f6:78:0d:2a:04:8e:23:17:d2:3e:eb:b5:3e:84:1b:6b:36:
         6b:c3:27:00:f3:dd:a3:70:ab:b8:50:4c:5d:a1:86:9a:d0:b1:
         c1:f7:1e:96:83:75:39:01:68:b6:ab:00:4b:6c:ef:92:ca:91:
         1d:f8:03:f7:34:a1:cf:01:24:d4:ca:7a:1c:90:0a:2b:61:de:
         9a:a6:3e:5f:d9:88:7c:e0:d6:ca:47:47:d1:2b:03:2a:bd:03:
         1a:2b:a4:45:14:2c:d9:3d:c9:7b:b3:95:b7:53:e7:7a:4d:5f:
         70:d8:bd:c6:92:c1:d4:1f:b2:16:3e:6d:95:00:1e:5c:4c:40:
         5f:68:c8:b2:59:da:33:49:ed:4c:ee:42:31:f8:4e:99:48:31:
         29:e8:f2:73:49:ad:9e:1e:0d:90:b7:5e:8a:00:af:ee:81:0e:
         f2:3a:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:24 2026 by rpki-client