Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e36322e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          39pCnDt/5ysHLVirmDYhrEpMKazUApewwA7C3e2EI8w=
Subject key identifier:   63:23:DC:AE:FA:74:C5:50:A7:AE:6D:E6:C3:F4:9F:4F:8F:F5:84:98
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       20CEFEAD495B11A891FECB35D0B699A5237D073F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:51 +0000
ROA not before:           Wed 25 Feb 2026 12:35:51 +0000
ROA not after:            Wed 24 Feb 2027 12:40:51 +0000
asID:                     7029
IP address blocks:        62.144.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ce:fe:ad:49:5b:11:a8:91:fe:cb:35:d0:b6:99:a5:23:7d:07:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:51 2026 GMT
            Not After : Feb 24 12:40:51 2027 GMT
        Subject: CN=6323DCAEFA74C550A7AE6DE6C3F49F4F8FF58498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:4c:92:6d:f4:fa:3b:56:59:27:27:1a:0d:
                    27:5b:1e:da:7c:99:6a:84:d7:13:02:4c:be:dc:2b:
                    fb:81:8d:1f:8c:b1:aa:72:16:fb:e7:4f:73:0d:62:
                    2b:63:61:a8:02:d7:13:a6:cb:4b:4a:f7:65:34:95:
                    d3:73:51:3c:f8:0d:c0:1b:81:af:02:0f:75:c6:41:
                    cb:4a:08:f9:98:e3:84:d0:e5:87:6f:82:78:81:f6:
                    cc:d7:4a:ac:88:08:bb:8f:99:a0:d4:04:f5:18:0f:
                    5f:a5:23:10:dd:3d:43:50:f8:39:18:4d:72:9a:06:
                    af:d3:f4:72:ea:c2:b9:0e:ee:53:1e:a7:44:a9:f8:
                    d9:36:41:c0:aa:58:f7:68:d3:36:33:00:de:6f:8a:
                    c6:47:2a:6b:48:65:89:d5:d2:84:c9:99:91:04:bb:
                    c1:cd:45:c1:44:66:0d:75:89:13:7f:7f:02:f3:f2:
                    fe:e6:2d:c1:87:78:00:9c:68:69:19:cb:22:7c:1f:
                    36:68:15:28:f6:74:bb:83:e1:75:bd:2d:1b:f8:a9:
                    07:be:75:c0:af:99:76:c2:1b:ec:15:d0:5b:70:6e:
                    8a:47:30:74:52:9d:1b:0d:18:a8:63:ad:71:30:a6:
                    0b:1e:66:e1:fa:61:20:7a:3f:bf:ed:5f:3c:94:43:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:DC:AE:FA:74:C5:50:A7:AE:6D:E6:C3:F4:9F:4F:8F:F5:84:98
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:cf:c5:db:e7:d9:96:89:36:11:f2:f5:d2:34:aa:3f:34:
         91:c8:d5:53:db:17:34:2f:ee:31:33:3f:42:f2:33:dc:ad:e7:
         89:6b:73:42:97:73:1b:67:27:49:6b:19:de:20:17:39:97:6b:
         24:6a:c8:31:c0:86:47:83:ea:c6:55:2b:ab:fc:e9:5c:e4:91:
         51:76:13:13:75:e4:d4:ec:fd:69:e2:5a:e2:1d:56:6b:10:cd:
         55:a0:b4:58:49:99:25:39:ab:f3:85:f1:11:09:b2:be:99:12:
         ad:43:2c:52:6d:eb:0c:ce:62:20:6a:1d:9f:22:d5:d9:d7:9f:
         25:c9:53:f8:c6:c4:0b:78:98:7a:c2:c3:64:bf:d0:fd:a7:0c:
         7c:9c:15:c1:60:25:2f:63:c1:00:bb:b7:e4:11:7b:c7:97:16:
         ac:bd:c5:e8:f3:70:e7:cb:c5:b1:6f:41:88:c6:54:aa:41:af:
         0f:63:18:9b:64:2b:9f:3c:29:b2:4a:e2:f8:0e:2d:72:04:da:
         35:83:d1:45:8a:03:9c:4e:b5:f3:b9:f3:1b:dc:29:d0:55:71:
         d2:9d:19:e4:8f:34:2c:82:98:1d:6e:85:0d:ed:bf:8b:23:25:
         6c:c1:5d:3d:0f:9f:be:a0:ca:32:46:33:9e:8e:4e:0b:89:05:
         2c:78:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:40:05 2026 by rpki-client