Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133302e302f32342d3234203d3e203631333137.roa
File:                     38312e32322e3133302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          poMndNJM89pXwhfk0KmodnaotvNFT8umNQDJv4//rVg=
Subject key identifier:   C8:EC:20:94:EA:CC:69:A2:A9:73:DC:3D:CA:C3:11:38:47:EB:AB:CD
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       1A1E6D6F006235EFF288087424031B91FC3F20
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133302e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 23 Feb 2026 15:06:29 +0000
ROA not before:           Mon 23 Feb 2026 15:01:29 +0000
ROA not after:            Mon 22 Feb 2027 15:06:29 +0000
asID:                     61317
IP address blocks:        81.22.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:6d:6f:00:62:35:ef:f2:88:08:74:24:03:1b:91:fc:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:29 2026 GMT
            Not After : Feb 22 15:06:29 2027 GMT
        Subject: CN=C8EC2094EACC69A2A973DC3DCAC3113847EBABCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:9f:1b:03:0e:95:ed:c7:c5:72:12:e5:28:
                    a1:23:68:1f:70:da:61:63:ae:6f:45:98:6c:cd:27:
                    32:d4:47:8b:f2:f2:74:62:43:bc:bc:50:c7:87:01:
                    28:34:8c:71:6f:d2:ad:3e:87:b4:de:b1:f5:9b:25:
                    6a:13:6c:bc:34:52:a8:80:a4:c5:89:ea:16:ea:c1:
                    55:bb:05:c0:46:e1:96:22:72:e1:76:91:b5:c5:70:
                    ee:17:81:df:5f:ee:60:e7:23:e0:5d:99:16:d8:a1:
                    bb:86:4b:b3:00:3b:ea:38:84:51:61:1d:30:45:d9:
                    92:9a:a1:e8:bd:92:4a:ef:e5:7d:8e:09:08:0d:b8:
                    fa:b4:61:10:15:82:6a:4d:a2:ef:c6:61:5c:56:b4:
                    dd:f8:58:6e:4b:21:c1:fe:d2:3d:09:c6:34:82:4b:
                    13:a0:ad:05:30:dd:21:44:df:a1:e3:14:04:2e:e4:
                    08:da:38:69:59:7b:d1:4c:fa:9d:ad:c6:af:91:ec:
                    55:51:dc:dd:8f:26:21:73:79:4a:26:a0:87:8b:3e:
                    59:37:18:2e:f5:07:c5:84:68:cc:be:b0:e7:1a:aa:
                    13:f6:f5:6a:77:17:54:66:75:a1:82:ad:fd:4b:08:
                    65:28:8a:d8:99:c5:c9:e0:33:e5:a9:88:6c:19:d0:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:20:94:EA:CC:69:A2:A9:73:DC:3D:CA:C3:11:38:47:EB:AB:CD
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:d8:60:ca:dd:45:1d:56:67:b8:62:ae:76:8b:ab:04:6b:
         c9:7a:3d:15:5f:4e:c0:f3:c7:56:de:5d:89:a5:7e:6c:95:a5:
         15:f5:7d:60:00:13:da:33:fb:88:23:24:4c:65:0e:de:ce:93:
         5f:33:a0:88:19:ba:02:0b:2d:9b:ac:0b:4d:69:5e:04:f8:be:
         27:95:f4:0e:38:f9:75:ce:1b:66:bd:a7:47:45:b9:a4:dd:2e:
         f2:14:2a:f6:6f:2a:4a:8d:0e:c5:af:2a:8e:6e:99:6e:e1:dd:
         d5:a6:60:e2:bf:43:ec:94:e5:9d:34:ed:c6:5b:e9:b7:a6:9c:
         21:56:5a:32:71:45:24:64:a5:fb:6b:3c:91:25:3f:bb:f6:13:
         4c:d0:39:67:e9:26:8e:2a:e2:90:f2:94:b9:9e:f9:bd:9b:56:
         7f:53:52:57:49:be:61:46:62:f7:ad:fc:cd:7c:a0:2a:d5:84:
         a3:85:00:68:da:01:d5:2f:ca:cf:0a:82:88:38:35:19:b7:25:
         c0:b7:94:a9:25:c7:14:52:c2:70:3c:d2:57:05:45:b6:60:f6:
         c5:f4:e7:30:19:39:f2:33:0e:a4:fb:c1:b0:81:da:b8:b2:64:
         a1:63:c7:af:92:ca:9d:9d:07:79:2a:1d:0f:a5:15:bd:6c:f3:
         54:e3:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:04 2026 by rpki-client