Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132382e302f32342d3234203d3e2038303735.roa
File:                     38312e32322e3132382e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          txrHXgT69Fa06vFkfl9nt55d90pOM/BKWlMSxdLyVZc=
Subject key identifier:   A1:ED:29:14:B8:93:08:00:77:90:CA:38:0A:00:C6:AC:46:AF:61:87
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       6E93334A3BB8CF5AC10ADCF85928D596D11D2C19
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132382e302f32342d3234203d3e2038303735.roa
Signing time:             Mon 23 Feb 2026 15:06:29 +0000
ROA not before:           Mon 23 Feb 2026 15:01:29 +0000
ROA not after:            Mon 22 Feb 2027 15:06:29 +0000
asID:                     8075
IP address blocks:        81.22.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:33:4a:3b:b8:cf:5a:c1:0a:dc:f8:59:28:d5:96:d1:1d:2c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:29 2026 GMT
            Not After : Feb 22 15:06:29 2027 GMT
        Subject: CN=A1ED2914B89308007790CA380A00C6AC46AF6187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:df:bb:fb:13:d1:54:88:e1:48:28:b1:9b:
                    1a:29:db:ec:d4:e1:3d:46:1b:10:4e:45:7c:5e:cf:
                    eb:9e:02:c9:8b:2b:97:ce:19:68:49:c6:c6:88:7c:
                    90:30:d3:da:cc:be:f0:f2:3a:ef:e1:54:9f:f4:dd:
                    1e:73:9d:2f:ef:9b:3f:44:9e:ff:1b:f1:6b:7b:43:
                    d4:c1:81:d7:e5:13:c1:f3:bc:27:6c:b0:e8:4b:65:
                    bd:3e:ac:be:8c:e4:e4:6e:99:ab:be:e3:bc:9a:34:
                    db:9d:6b:81:10:a8:b0:6f:67:30:69:6f:2f:1d:e7:
                    27:fb:80:91:97:f7:94:bb:45:b7:70:68:2b:8f:a1:
                    49:dd:21:e1:0e:85:95:af:cb:7b:fe:20:88:1f:35:
                    ce:d3:ea:a2:7a:b4:7d:83:63:93:46:48:11:48:2a:
                    f5:52:df:af:6d:24:1d:99:73:ac:fb:b9:8b:d2:f4:
                    a9:7b:dc:1a:9a:40:0c:c6:48:2c:21:b7:bb:71:9c:
                    ad:c2:c8:eb:58:62:80:f2:aa:bd:8f:16:97:a3:60:
                    ca:96:42:bb:4e:76:35:a4:ce:e2:a9:77:99:a8:47:
                    18:bb:9c:a7:01:54:8e:d6:3e:f7:4c:2d:28:3c:3a:
                    fb:6b:41:94:bf:12:1f:13:8b:72:d9:63:bb:bf:9c:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:29:14:B8:93:08:00:77:90:CA:38:0A:00:C6:AC:46:AF:61:87
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132382e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:3e:d9:79:61:0e:64:fb:a6:d3:17:0f:e7:87:55:b1:ab:
         1a:0a:10:02:9c:b6:93:19:81:02:7a:af:f8:64:f0:29:84:d8:
         1f:69:e1:fc:8f:7f:61:6d:3f:23:a1:9e:b7:e6:06:c1:a2:0d:
         5c:e6:d5:74:3d:27:2a:8a:73:c6:4f:e3:6b:aa:d7:86:14:2b:
         43:70:3e:aa:06:8f:b8:9c:ea:58:0d:47:d9:17:76:14:1d:1f:
         ff:6e:9f:28:62:39:ae:7f:9e:02:ee:2a:27:81:aa:21:49:4b:
         be:e2:7f:eb:14:16:28:c5:50:7e:ce:10:d8:81:db:9a:48:10:
         b8:14:f4:2e:4b:5d:9f:49:35:35:46:cb:23:68:ad:08:e7:c3:
         bd:af:90:18:c5:52:d6:e8:93:c8:f3:40:5b:7f:99:a5:3d:b1:
         b7:88:1f:e0:a9:f0:58:07:cf:dc:7d:5d:05:d1:81:a6:ab:f4:
         2b:59:1f:eb:aa:0a:68:3c:b6:15:94:07:60:69:a8:02:83:fc:
         15:9c:0a:3d:cd:59:d5:08:49:b5:a4:99:e9:6d:ab:b3:6c:e2:
         78:cd:01:a1:63:6b:7e:8b:b5:13:9c:86:8c:ac:89:3d:e3:e1:
         cb:66:87:33:74:fa:a1:09:10:cc:4b:ec:30:0d:a8:a4:af:38:
         d8:e2:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:22 2026 by rpki-client