Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36332e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e36332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          zBvodhzz1qaEIfsy7COFGUByq0jHOfsXyadMoAOiHug=
Subject key identifier:   52:D6:B7:4F:17:13:41:40:CB:38:5D:01:5B:B7:E2:8F:02:2A:74:A2
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       55FB990066723130CB33ABEF5ED3AE14A502135F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36332e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 25 Feb 2026 12:40:51 +0000
ROA not before:           Wed 25 Feb 2026 12:35:51 +0000
ROA not after:            Wed 24 Feb 2027 12:40:51 +0000
asID:                     7029
IP address blocks:        62.144.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fb:99:00:66:72:31:30:cb:33:ab:ef:5e:d3:ae:14:a5:02:13:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Feb 25 12:35:51 2026 GMT
            Not After : Feb 24 12:40:51 2027 GMT
        Subject: CN=52D6B74F17134140CB385D015BB7E28F022A74A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:1a:98:d1:d4:ac:d5:fb:67:ea:c4:7f:da:
                    2b:f5:41:39:66:a5:09:76:bf:0b:83:38:f9:4a:fb:
                    1e:09:5c:bd:68:4e:df:28:e1:79:48:19:55:46:e7:
                    e3:aa:20:df:b4:23:36:c8:c8:75:e5:5f:af:a3:67:
                    8a:03:9e:54:f0:2d:f5:52:21:45:64:8f:bb:bd:5f:
                    58:6b:f0:23:c9:9e:0e:64:d8:e8:8e:14:f2:b9:06:
                    44:31:2b:0a:b9:f7:93:34:9e:92:a9:a7:0a:4d:62:
                    c0:b5:93:d2:c2:76:3b:e8:7f:9f:ac:a1:54:a2:81:
                    ca:ae:41:ac:82:53:c2:78:77:5d:20:bb:91:c6:2f:
                    8f:68:fd:d7:25:02:de:fd:11:f2:de:e9:bd:cc:26:
                    94:3a:cb:09:82:8c:90:8e:d1:60:d8:ca:45:e6:c1:
                    80:48:b8:37:be:1a:94:b2:09:64:66:5a:74:0b:bb:
                    04:09:67:b8:90:1b:18:10:a8:16:f9:ee:1c:e9:94:
                    9d:f0:6e:aa:b0:75:3a:b2:94:c0:30:e4:5e:ae:d6:
                    70:60:cb:8e:d5:0f:72:f8:cc:89:a7:2b:8a:c1:dd:
                    d1:93:12:9a:da:03:a8:7c:73:73:f3:98:0b:5c:4d:
                    f5:8c:d4:28:48:1b:5f:2c:77:fe:b1:b7:3c:e2:1e:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:B7:4F:17:13:41:40:CB:38:5D:01:5B:B7:E2:8F:02:2A:74:A2
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e36332e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:50:e4:1e:6a:a6:0a:93:d2:3a:25:7e:0a:35:86:66:78:d0:
         92:4f:9f:81:cd:9b:c9:93:0d:e5:f9:4a:b1:63:b3:47:17:0f:
         7a:af:f5:48:d0:f2:11:c8:4c:a5:63:9a:4f:d0:96:24:32:90:
         51:2e:33:b8:76:a6:35:e2:69:a5:83:4e:76:a0:a2:80:06:2c:
         16:ba:df:78:20:af:dc:69:a8:b9:c6:39:c6:14:5b:54:14:24:
         6f:80:30:b5:8d:45:dc:b9:dc:f2:b5:7e:6d:e3:95:d1:c0:6f:
         42:c7:6f:5b:68:4b:00:3e:c6:c0:28:89:c5:b3:d4:2f:e9:02:
         00:12:2a:15:77:d4:9e:86:f2:4f:40:0a:b6:cc:99:29:f1:57:
         61:97:5b:53:4d:1e:41:ee:e9:11:89:d5:41:3a:b4:4c:4c:bf:
         64:55:44:9f:ce:27:9c:fd:b5:de:c1:e0:e3:ea:68:0c:b9:53:
         4c:48:fd:e4:3f:24:6a:3f:76:2d:bb:bc:c5:01:31:95:2f:ca:
         41:b4:b6:09:b0:29:41:b9:bf:f4:32:74:1a:e3:c6:a3:63:c3:
         0a:55:91:86:c0:4f:a8:91:9f:1c:40:9e:21:48:d1:d1:af:f3:
         55:89:a5:bc:fc:c5:37:40:3e:18:be:50:12:55:15:60:71:5c:
         e7:0c:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:17:46 2026 by rpki-client