Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e36322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          SKbavTCIVLjWHtKdUpoMR1hr5F0vUY7E5xUXD8VnV48=
Subject key identifier:   6B:CF:A1:5F:4C:9F:D5:E1:2E:52:11:07:BD:02:70:F8:62:51:68:5C
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       67DF028719E0994E6369A00C27F30B2F449A8557
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2035363530.roa
Signing time:             Wed 25 Feb 2026 12:40:51 +0000
ROA not before:           Wed 25 Feb 2026 12:35:51 +0000
ROA not after:            Wed 24 Feb 2027 12:40:51 +0000
asID:                     5650
IP address blocks:        62.144.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:df:02:87:19:e0:99:4e:63:69:a0:0c:27:f3:0b:2f:44:9a:85:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:51 2026 GMT
            Not After : Feb 24 12:40:51 2027 GMT
        Subject: CN=6BCFA15F4C9FD5E12E521107BD0270F86251685C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:29:63:95:69:5f:d0:a8:2b:14:97:17:08:
                    98:7c:6b:a5:ee:eb:a3:31:f4:ad:42:5d:d6:ab:95:
                    0b:f6:fb:65:98:ca:bc:8c:5a:01:eb:5c:80:d4:35:
                    60:35:52:bf:2c:2e:be:40:ee:cf:7d:bb:6a:5b:a0:
                    c4:e0:a2:37:ae:28:06:5d:7b:ae:16:2a:14:2a:33:
                    df:67:77:05:a1:ea:18:08:3f:ce:aa:47:dc:6b:13:
                    76:89:64:c2:47:78:0a:42:66:9d:97:22:c0:54:d7:
                    fb:ba:0c:e5:ac:a6:e5:1b:bd:85:da:90:91:6d:b0:
                    3c:d7:1c:23:27:3b:4f:05:56:13:35:20:bd:64:49:
                    aa:4d:17:3b:5c:6c:89:29:3a:61:2a:bd:43:95:74:
                    73:ec:59:bc:ef:2c:0e:61:7c:ba:ba:41:6e:e6:d1:
                    af:d2:0f:81:ae:89:de:25:d9:e2:2a:a2:e2:06:df:
                    de:e5:c0:5e:cc:c4:79:a8:3a:76:74:22:cb:ef:6a:
                    b2:27:ed:39:89:37:01:94:6f:a6:02:87:a2:c1:37:
                    db:68:05:ee:84:f3:15:26:fa:d1:f4:74:b4:2a:d9:
                    a8:bb:fa:86:e8:75:18:1c:f5:92:82:48:2a:32:f0:
                    b8:d5:4a:35:3d:06:0c:e2:20:3e:9d:c6:29:f7:9b:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:A1:5F:4C:9F:D5:E1:2E:52:11:07:BD:02:70:F8:62:51:68:5C
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:c1:b1:15:44:59:a0:91:92:87:f7:03:85:85:5d:b7:ba:
         52:89:cb:eb:b7:85:1d:83:51:76:6f:76:e9:5d:29:5c:a6:37:
         82:71:f9:a4:d5:5b:5a:0d:55:e0:9c:2f:12:09:2d:9e:36:0a:
         f8:fa:b0:95:ab:0d:60:00:a9:77:57:87:d7:cd:ee:eb:39:df:
         52:d6:15:ae:c8:bf:73:3b:9a:60:9d:40:44:42:af:64:e5:64:
         1b:32:06:69:3d:99:1f:24:af:4c:77:9d:96:8f:96:3a:b9:b6:
         bc:e6:5f:c6:cf:0f:f7:00:19:fa:9a:24:a4:50:7d:f3:24:1d:
         ba:84:80:f0:16:b4:2e:b3:0e:42:8f:d0:ce:b4:b5:0b:dd:50:
         42:31:47:72:10:5c:3d:f1:12:54:ff:bc:9f:7e:60:db:28:bf:
         00:45:89:c8:3f:36:55:36:59:6a:7e:81:1a:e7:9f:82:63:76:
         ed:8c:b1:70:73:9e:8e:42:b9:b6:4e:4e:59:d1:2e:a1:03:8e:
         12:39:75:20:a5:a9:81:1f:80:31:ae:cc:e4:46:e0:b9:fc:16:
         43:97:47:67:59:48:1d:fb:68:d4:28:66:5c:94:b5:af:0a:f5:
         16:91:69:0a:7b:8a:a3:dc:46:d4:ff:8a:7f:22:c6:4c:a5:01:
         90:1f:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:37:01 2026 by rpki-client