Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219217.roa
File:                     AS219217.roa (raw, json)
Hash identifier:          UpwSsU7/39sSh4qPhMMNqwKT9DxWmogB9g+bh9keF3E=
Subject key identifier:   7D:F5:32:B2:73:65:DE:33:EA:8C:9D:6D:F1:02:4F:A2:73:35:0F:40
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       772EFF8029BE3F0CADB044A16FDDA83BC823F9E9
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219217.roa
Signing time:             Thu 10 Sep 2026 08:49:22 +0000
ROA not before:           Thu 10 Sep 2026 08:44:22 +0000
ROA not after:            Thu 09 Sep 2027 08:49:22 +0000
asID:                     219217
IP address blocks:        62.144.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2e:ff:80:29:be:3f:0c:ad:b0:44:a1:6f:dd:a8:3b:c8:23:f9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Sep 10 08:44:22 2026 GMT
            Not After : Sep  9 08:49:22 2027 GMT
        Subject: CN=7DF532B27365DE33EA8C9D6DF1024FA273350F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:42:96:91:f9:79:d9:80:b5:35:07:96:c6:
                    fa:fb:4f:e0:e8:5e:f3:ff:48:2b:8a:e7:dc:b0:40:
                    71:6f:e2:6b:4e:1a:64:9e:60:2b:9f:26:5f:1a:2a:
                    00:9a:81:76:f3:9a:0c:4d:f6:04:f3:17:55:7d:01:
                    3a:77:d5:fa:9c:10:dc:4a:55:f4:a7:80:7a:be:67:
                    7b:80:98:a2:35:b8:45:3c:a0:ed:0e:69:aa:36:9b:
                    a6:e9:a5:65:89:f2:54:2f:81:52:9a:37:64:ca:fa:
                    11:3a:10:0d:48:35:c6:93:21:3a:d8:9e:70:19:fb:
                    95:eb:1f:cb:a0:ce:32:16:46:ce:9a:ac:32:b0:5b:
                    6c:75:63:0e:18:f9:6e:8b:04:e3:ad:9e:6c:4b:cb:
                    3f:0f:f6:af:c8:82:e6:4d:fa:46:47:d4:e1:00:82:
                    b4:15:51:7a:76:64:07:53:3d:d6:71:03:3b:fd:99:
                    db:a6:51:dc:58:60:2f:bd:01:55:77:b9:fd:87:2b:
                    20:86:48:56:45:08:95:52:cc:d4:da:40:7c:81:ff:
                    35:93:f1:1a:bd:6a:75:f8:70:1c:c2:a7:8b:71:13:
                    b7:63:9d:f2:e6:15:19:9d:6f:a0:e1:24:53:c4:6e:
                    ed:06:56:35:90:37:3c:de:72:81:fe:4b:77:15:96:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F5:32:B2:73:65:DE:33:EA:8C:9D:6D:F1:02:4F:A2:73:35:0F:40
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/AS219217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:b0:b4:f2:c2:db:9f:4e:ed:39:76:fd:62:30:69:32:7c:d1:
         a4:7a:5f:bb:36:10:b3:37:60:19:b0:ec:8c:73:5c:13:df:ec:
         be:15:bc:7c:ea:25:6d:8e:c3:0a:2b:84:65:92:de:07:31:6b:
         55:33:1d:ae:5c:dd:30:b5:60:d3:c5:3f:a5:d8:f2:c1:79:01:
         c8:66:a7:2e:e8:72:40:5a:c0:de:e0:4a:cd:fc:cc:7b:ca:b7:
         ad:2a:10:f3:ea:42:33:e9:2f:b9:ce:f6:41:c7:88:80:db:21:
         e8:f2:59:39:6f:01:98:0b:f1:f7:d8:e7:4d:14:c2:b4:eb:3e:
         ab:1b:1b:d5:aa:3c:ef:03:66:7c:cc:d4:6b:33:40:03:22:b0:
         24:10:cd:13:2d:e5:fc:0c:55:7b:37:c1:7e:6a:bf:41:f7:87:
         01:20:48:6b:65:10:ff:b9:1b:a1:07:8d:61:d9:fd:05:6f:0f:
         aa:f9:5f:9c:94:2c:fc:65:4f:d7:70:21:7f:21:8f:c4:37:f5:
         e4:96:9e:5f:55:0c:96:e3:85:58:08:1a:3f:16:db:d3:c1:51:
         e3:99:2d:17:1f:f0:26:99:3f:61:cb:13:8a:d9:8b:05:b1:a3:
         b7:c2:ca:74:c8:1f:bd:e9:dd:86:a7:b5:f1:5b:15:b7:03:d5:
         97:d7:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:41 2026 by rpki-client