Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          OdWRfwKO7R2LUbMJeqoLAaE0sIkLHa0NNjlpCAso89c=
Subject key identifier:   1E:93:09:6C:F1:3C:F1:F4:3F:2E:30:7B:A5:6F:80:46:93:AE:B3:1F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       2B1644B6332299ACF8504589473F6AA42A7F0DDA
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS12083.roa
Signing time:             Thu 10 Sep 2026 08:49:20 +0000
ROA not before:           Thu 10 Sep 2026 08:44:20 +0000
ROA not after:            Thu 09 Sep 2027 08:49:20 +0000
asID:                     12083
IP address blocks:        62.144.32.0/22 maxlen: 24
                          62.144.36.0/22 maxlen: 24
                          62.144.40.0/22 maxlen: 24
                          62.144.44.0/22 maxlen: 24
                          62.144.48.0/24 maxlen: 24
                          62.144.49.0/24 maxlen: 24
                          62.144.50.0/24 maxlen: 24
                          62.144.51.0/24 maxlen: 24
                          62.144.52.0/24 maxlen: 24
                          62.144.53.0/24 maxlen: 24
                          62.144.54.0/24 maxlen: 24
                          62.144.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:16:44:b6:33:22:99:ac:f8:50:45:89:47:3f:6a:a4:2a:7f:0d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:20 2026 GMT
            Not After : Sep  9 08:49:20 2027 GMT
        Subject: CN=1E93096CF13CF1F43F2E307BA56F804693AEB31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:12:bb:fb:6b:a7:04:5d:55:72:48:5e:5c:
                    1d:34:30:0f:0b:d7:cf:2f:be:d2:ca:a1:95:dc:64:
                    a7:a1:45:c8:28:da:d9:5f:73:c1:0c:3c:65:81:03:
                    b4:87:5e:a8:4e:17:45:e3:24:b9:b9:d1:ac:b5:af:
                    cb:31:94:0c:c7:d1:2a:ff:56:31:62:36:24:b4:df:
                    5c:76:a6:bc:5a:18:d8:10:ad:04:6c:ba:8e:40:05:
                    d3:4e:48:35:c1:0d:e6:08:13:15:b6:53:4e:be:97:
                    01:0a:9a:8b:98:b1:9a:c5:e4:64:cd:b0:81:18:59:
                    1e:eb:fc:4b:67:5e:ee:22:d9:49:a3:9b:91:15:b4:
                    f1:2e:98:59:f1:0c:01:74:77:82:e4:00:39:32:8d:
                    62:d7:b3:a9:f7:b1:ed:57:60:c5:0c:36:76:6d:26:
                    be:11:1d:2f:17:4f:5e:bb:e9:9e:c8:67:fc:f5:ec:
                    9e:ad:4e:1c:fd:9e:89:e0:64:39:af:48:b0:4e:5f:
                    0c:57:63:8c:a3:52:63:07:58:fa:7f:8d:b3:92:05:
                    fc:9a:9f:6f:2a:26:c8:5b:04:24:15:f4:a2:83:16:
                    87:f3:90:0d:0c:63:84:57:c3:e4:c1:cb:dd:c4:5c:
                    a5:02:af:67:fb:ee:1f:fb:8d:6f:73:e1:de:e6:03:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:93:09:6C:F1:3C:F1:F4:3F:2E:30:7B:A5:6F:80:46:93:AE:B3:1F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.32.0-62.144.55.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:00:36:9e:b8:28:f9:e3:f4:e3:8e:86:c7:fe:ad:f5:99:
         dd:3e:c6:62:2d:a7:a5:8a:75:ea:c0:69:31:ea:6e:57:c7:f1:
         cc:71:b9:6e:21:8e:58:30:8c:6a:07:85:35:f6:29:2b:de:be:
         d1:d8:1b:78:c9:76:ce:5c:52:19:64:a6:dc:ab:75:43:28:97:
         c5:79:b3:ba:17:35:a1:04:6d:1a:6c:6c:28:b3:db:bf:76:a3:
         70:fb:8a:a6:bd:7b:e8:e0:39:a8:63:f8:d8:7c:a2:a4:d3:c5:
         fc:68:c7:46:3a:a0:1a:d8:42:3b:62:03:ef:dd:4c:2d:57:81:
         a8:08:08:7c:ce:30:d5:14:6e:1a:d8:49:1d:aa:e1:95:71:31:
         34:0b:e6:80:d8:ba:1d:f7:f5:39:49:d8:a4:11:0d:a5:7a:f7:
         d2:cf:fd:49:cc:b2:a8:9a:af:b5:48:19:61:c9:19:b2:f3:a3:
         c8:0c:ff:00:d0:fe:e5:49:49:a7:c3:f4:51:21:f7:a2:f8:ce:
         2a:85:00:31:22:ae:9a:8c:82:d2:04:c8:db:ff:50:06:f9:d5:
         9c:75:02:04:ba:06:42:44:c8:ba:05:e9:3e:8f:88:57:15:f6:
         6b:7e:96:ae:37:13:73:1b:21:4c:aa:46:c0:11:81:dc:77:02:
         26:fd:41:da
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKxZEtjMimaz4UEWJRz9qpCp/DdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM1NEQzMjhDQkJGRDFFRjNDRDI5MjY4QTIzQjBGQ0M2
MEUzQTJDNTAeFw0yNjA5MTAwODQ0MjBaFw0yNzA5MDkwODQ5MjBaMDMxMTAvBgNV
BAMTKDFFOTMwOTZDRjEzQ0YxRjQzRjJFMzA3QkE1NkY4MDQ2OTNBRUIzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqWhK7+2unBF1VckheXB00MA8L
188vvtLKoZXcZKehRcgo2tlfc8EMPGWBA7SHXqhOF0XjJLm50ay1r8sxlAzH0Sr/
VjFiNiS031x2prxaGNgQrQRsuo5ABdNOSDXBDeYIExW2U06+lwEKmouYsZrF5GTN
sIEYWR7r/EtnXu4i2Umjm5EVtPEumFnxDAF0d4LkADkyjWLXs6n3se1XYMUMNnZt
Jr4RHS8XT1676Z7IZ/z17J6tThz9nongZDmvSLBOXwxXY4yjUmMHWPp/jbOSBfya
n28qJshbBCQV9KKDFofzkA0MY4RXw+TBy93EXKUCr2f77h/7jW9z4d7mA1D7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUHpMJbPE88fQ/LjB7pW+ARpOusx8wHwYDVR0j
BBgwFoAUs1TTKMu/0e880pJoojsPzGDjosUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
YTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0MDA4YjE2NTRjLTAvMC9CMzU0RDMy
OENCQkZEMUVGM0NEMjkyNjhBMjNCMEZDQzYwRTNBMkM1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8wL0IzNTREMzI4Q0JCRkQxRUYzQ0QyOTI2OEEyM0IwRkNDNjBFM0Ey
QzUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vYTAzNzViMzktZjk0OS00Y2I1LWI1MTktZjk0
MDA4YjE2NTRjLTAvMC9BUzEyMDgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAU+kCADBAM+kDAwDQYJ
KoZIhvcNAQELBQADggEBAC+vADaeuCj54/TjjobH/q31md0+xmItp6WKderAaTHq
blfH8cxxuW4hjlgwjGoHhTX2KSvevtHYG3jJds5cUhlkptyrdUMol8V5s7oXNaEE
bRpsbCiz2792o3D7iqa9e+jgOahj+Nh8oqTTxfxox0Y6oBrYQjtiA+/dTC1XgagI
CHzOMNUUbhrYSR2q4ZVxMTQL5oDYuh339TlJ2KQRDaV699LP/UnMsqiar7VIGWHJ
GbLzo8gM/wDQ/uVJSafD9FEh96L4ziqFADEirpqMgtIEyNv/UAb51Zx1AgS6BkJE
yLoF6T6PiFcV9mt+lq43E3MbIUyqRsARgdx3Aib9Qdo=
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:34 2026 by rpki-client