Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e36322e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          GeUD1+VLOITAPR7rWF4v7vyQ8TkCdrsENUji2xRny8k=
Subject key identifier:   ED:4A:40:5E:3C:DD:0B:BB:5E:0A:08:D3:E2:94:EB:69:12:0E:B0:5B
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0F98495ED17DA572BE8F81A0E8BD87B7386A00DE
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:16 +0000
ROA not before:           Tue 28 Jul 2026 12:13:16 +0000
ROA not after:            Tue 27 Jul 2027 12:18:16 +0000
asID:                     7029
IP address blocks:        62.144.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:98:49:5e:d1:7d:a5:72:be:8f:81:a0:e8:bd:87:b7:38:6a:00:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:16 2026 GMT
            Not After : Jul 27 12:18:16 2027 GMT
        Subject: CN=ED4A405E3CDD0BBB5E0A08D3E294EB69120EB05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:df:c1:78:79:9d:b5:81:62:80:33:b6:0b:
                    ae:73:cf:53:38:1b:cb:e1:82:73:e0:bb:ac:4a:3b:
                    aa:be:ef:b7:cb:6b:22:09:30:a2:d4:dd:2a:96:66:
                    94:5b:f7:f4:2c:30:34:1a:37:61:94:24:1d:91:db:
                    67:50:7c:df:ca:a9:4f:1c:89:af:10:8b:92:32:d9:
                    ea:65:64:a0:9e:22:52:a6:58:be:fd:3b:3b:2e:b3:
                    f0:99:3b:fb:78:d1:a6:f5:98:a7:eb:ca:e3:9b:29:
                    48:e2:9a:4c:b6:9b:c6:0f:63:5d:86:4f:e5:8a:1c:
                    95:98:7c:66:ae:ea:2b:ef:da:24:1a:a9:b6:ea:68:
                    d7:f5:a7:1f:fa:37:f1:f8:e8:15:d1:9d:90:be:b3:
                    d4:12:4a:18:7f:2f:28:c2:1d:1f:44:f6:85:18:da:
                    f1:34:af:ef:c5:1c:90:78:18:42:d0:83:70:38:07:
                    84:31:c8:e1:10:0d:90:ae:72:2c:80:30:32:0a:86:
                    bb:af:85:d3:67:aa:fe:83:40:52:38:2b:d7:cd:af:
                    0b:4b:ce:4f:df:02:2e:49:3e:16:e2:f3:f3:16:3b:
                    e4:85:ed:5a:86:71:b2:6c:84:70:74:d2:c8:41:81:
                    87:d4:80:f4:94:23:42:71:cb:cc:a8:36:f1:a5:6e:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4A:40:5E:3C:DD:0B:BB:5E:0A:08:D3:E2:94:EB:69:12:0E:B0:5B
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36322e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:00:1b:fd:43:19:f0:ab:9c:c1:5d:43:56:fa:27:a2:eb:1d:
         7e:8d:ae:6d:fd:9a:af:62:48:34:8e:6b:88:e5:fb:62:33:4d:
         61:51:8a:4a:0a:d8:e7:d9:37:66:6c:fe:d9:94:67:f0:6b:6c:
         a8:c0:a8:21:03:6a:ce:1d:0b:a5:7f:c4:8b:19:2a:f9:64:4c:
         2b:b7:1e:55:52:83:7f:9d:f3:93:58:17:9e:21:8e:14:aa:55:
         64:0f:6b:e3:8f:1a:58:92:cb:a8:5e:04:75:ee:f6:20:ca:0f:
         18:61:d7:f0:b8:76:ef:97:de:02:a5:0d:b5:ce:4d:99:dd:c5:
         3b:28:d2:56:43:20:43:37:04:28:90:37:f4:46:7e:59:e0:14:
         50:03:a4:17:32:61:a8:e0:0e:74:13:06:56:69:f4:08:f6:11:
         35:47:a8:d6:f4:84:07:da:17:11:2a:88:3e:4d:6e:3b:01:a0:
         b7:c4:6b:97:76:3f:84:e4:41:4b:20:5b:e4:95:66:a4:79:bc:
         ce:1f:3a:02:a8:30:74:39:8a:d4:7b:78:2c:1f:cd:7c:bd:bd:
         79:f7:88:74:0a:1f:fa:4f:9c:bd:69:2e:b3:08:8d:86:66:3b:
         34:71:75:d1:84:51:03:82:67:ad:ef:02:e2:8f:72:9d:a3:6b:
         c4:2f:d8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:20:21 2026 by rpki-client