Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
File:                     38312e32322e3132392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          A2H4JIkh3tnZrf72QWFXIA16GpXF8Yg3S+yPxvCFHYk=
Subject key identifier:   64:9C:B2:2E:75:CE:3A:21:6D:DF:21:5E:14:16:51:F5:D4:84:BB:1A
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       41F930B3C9B0A38B6EFF83427D570B44B506EDB5
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 23 Feb 2026 15:06:29 +0000
ROA not before:           Mon 23 Feb 2026 15:01:29 +0000
ROA not after:            Mon 22 Feb 2027 15:06:29 +0000
asID:                     6079
IP address blocks:        81.22.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:30:b3:c9:b0:a3:8b:6e:ff:83:42:7d:57:0b:44:b5:06:ed:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:29 2026 GMT
            Not After : Feb 22 15:06:29 2027 GMT
        Subject: CN=649CB22E75CE3A216DDF215E141651F5D484BB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:58:6c:6b:90:c4:2d:21:e0:bf:5e:5d:da:
                    37:fc:3a:1e:d1:d1:fb:00:10:c5:63:5b:b4:66:90:
                    68:37:41:53:fb:8b:ae:55:dc:30:d6:cb:25:b8:eb:
                    12:7d:f8:df:5e:bc:33:fa:52:d8:2f:60:d4:13:00:
                    20:db:ca:de:f4:53:82:f5:77:79:c0:32:89:ab:19:
                    3e:a8:08:ee:3f:ee:f2:f2:32:fb:e2:a7:09:11:c2:
                    62:97:04:28:91:8a:6e:90:da:4b:1a:c1:e5:a6:60:
                    09:74:94:ab:a7:11:73:35:73:d9:ae:bb:f1:6b:38:
                    83:9d:7a:8c:6a:4d:14:c9:a1:b7:2a:55:4b:db:1a:
                    4b:42:2f:87:79:13:3d:dd:bc:16:0c:07:f7:87:ee:
                    21:53:e1:6c:58:b6:90:f0:14:7a:7d:5c:7f:8c:ef:
                    a3:6a:07:89:91:99:15:b2:82:c3:7c:51:c8:19:97:
                    7e:44:f6:28:ae:7a:04:19:3c:48:7c:a0:88:1a:0d:
                    28:2d:04:04:1e:67:17:34:47:ea:95:51:90:07:e3:
                    62:cb:c3:df:ee:d5:43:2b:af:07:0a:20:e1:f2:40:
                    f1:e0:1f:86:f1:d8:e0:d5:af:6e:8d:18:cc:0a:0f:
                    97:12:37:ed:49:48:9b:54:81:52:9e:1a:76:89:99:
                    38:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:B2:2E:75:CE:3A:21:6D:DF:21:5E:14:16:51:F5:D4:84:BB:1A
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:34:00:47:83:e7:b2:53:09:e3:7d:a6:80:dd:7f:bc:98:66:
         5f:22:8e:f7:51:5a:37:49:a0:1f:0d:f0:c8:8f:f5:50:19:03:
         0d:c8:fb:ea:c3:19:04:ce:ce:71:57:b5:7a:0f:fb:8c:a5:e4:
         0a:69:5a:ff:7a:9b:ec:5e:53:17:1d:e1:a2:a6:7e:26:01:f2:
         60:8d:2d:3b:76:1a:3c:20:9f:9a:83:1b:4d:ea:d3:c2:95:a0:
         ab:33:f9:98:a2:fe:31:54:e4:6b:d9:ac:4c:5f:5f:43:2f:96:
         3d:95:c1:fa:88:1f:35:25:f4:87:02:cf:8d:8a:5b:53:fe:4d:
         9c:a2:7c:5a:d2:59:b9:6a:95:11:bf:90:bf:3d:b3:fe:d3:27:
         08:ed:0d:f2:3d:06:5b:7c:b7:6c:da:65:4f:db:46:af:b5:f9:
         85:bd:ae:e7:51:63:7e:cc:5f:2e:40:53:c4:15:50:f2:1b:02:
         f4:a5:7a:6c:f8:f5:2b:5f:67:66:c4:89:4f:6e:d3:ab:41:24:
         9b:43:05:2f:72:6f:7b:fd:a1:55:2a:e9:4d:cf:65:81:34:ce:
         cc:40:8b:8c:35:0b:5f:95:31:5d:fb:93:6c:b5:cb:6c:9b:8e:
         63:f1:33:02:56:15:ee:10:b3:e8:df:be:e3:8c:50:fb:4f:30:
         7f:85:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:32:17 2026 by rpki-client