Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133312e302f32342d3234203d3e20393936.roa
File:                     38312e32322e3133312e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier:          0c/JH+lNRGpEuC0ac3/vUnDxoZ5239PYOm3pvV9xdss=
Subject key identifier:   92:30:38:F6:C0:91:25:18:76:19:9C:4F:6A:0D:66:BF:CC:82:A0:D0
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       6D34D0B6AC5D64DC7BA8F58235FFAD1018E5821B
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133312e302f32342d3234203d3e20393936.roa
Signing time:             Mon 23 Feb 2026 15:06:30 +0000
ROA not before:           Mon 23 Feb 2026 15:01:30 +0000
ROA not after:            Mon 22 Feb 2027 15:06:30 +0000
asID:                     996
IP address blocks:        81.22.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:34:d0:b6:ac:5d:64:dc:7b:a8:f5:82:35:ff:ad:10:18:e5:82:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:30 2026 GMT
            Not After : Feb 22 15:06:30 2027 GMT
        Subject: CN=923038F6C091251876199C4F6A0D66BFCC82A0D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3f:6c:9f:14:04:f7:b7:b3:a2:ec:ac:bb:8f:
                    d6:57:fc:48:23:c0:8e:48:72:13:e5:48:34:54:04:
                    ce:2e:43:e8:fc:9c:fd:74:1e:dd:69:d7:19:18:9c:
                    65:ed:b2:18:17:f2:18:af:cf:75:84:ad:9d:fd:42:
                    fd:d9:9f:f3:f7:ae:c2:99:a5:ba:29:6b:7e:e1:9e:
                    ae:43:0d:54:36:b6:2a:9a:25:07:a8:2d:b7:c2:4d:
                    6b:12:f9:ec:e5:5e:94:a3:8c:93:50:b2:35:34:c9:
                    23:c0:59:8f:02:5f:17:53:7c:6e:07:88:59:f8:08:
                    83:91:39:80:f6:87:59:b0:b1:14:33:4b:d1:3b:53:
                    08:52:b6:50:f8:41:eb:f7:a0:bb:fc:e6:e9:de:e3:
                    59:9d:bb:7d:1c:6d:34:6a:fb:e0:12:26:6f:cb:b1:
                    16:05:6b:26:ff:b9:23:15:cd:4e:73:b1:b6:58:ae:
                    96:2c:81:4e:46:21:05:cc:bf:77:51:b4:32:7a:5f:
                    75:8d:32:52:17:b1:c7:b9:5c:be:3f:ee:0d:02:03:
                    21:4a:9b:b7:c8:82:56:77:b8:3c:0c:0b:9b:3a:3e:
                    36:29:6b:91:a2:98:6e:4d:51:bb:49:7f:8c:1e:5a:
                    60:54:05:7b:0e:73:37:9d:41:42:ef:a4:00:cb:e6:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:30:38:F6:C0:91:25:18:76:19:9C:4F:6A:0D:66:BF:CC:82:A0:D0
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133312e302f32342d3234203d3e20393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:3f:56:4f:48:d0:ca:ae:62:37:38:8d:cf:a7:fc:f4:64:
         9d:97:72:b5:07:fc:db:21:11:05:0c:92:98:0c:6d:d5:2f:9a:
         f9:2e:e1:c1:8c:fa:87:07:3b:fd:1f:cb:73:3f:f1:ae:b2:67:
         9e:5f:00:20:6c:96:a3:6a:dd:5a:ae:d8:77:f6:b6:0c:73:bf:
         26:ef:28:55:ba:f7:ff:ad:38:07:41:35:19:cd:06:f3:d9:c4:
         6a:06:e0:b0:5f:38:b8:73:e6:1f:e1:95:cb:68:2a:48:b7:4a:
         a5:8e:c2:bf:ca:c1:12:12:25:ec:a3:4b:1a:a5:f8:6b:97:f4:
         84:0d:f5:05:ab:f6:24:d9:a1:9b:38:c2:c3:e7:2a:f3:03:d1:
         2c:65:13:85:07:5b:f3:a8:0a:a7:0e:59:94:72:d2:a3:22:86:
         c3:63:1d:fe:f9:b1:dd:9b:11:1a:b8:e2:68:70:b0:3d:a0:a6:
         0b:9e:c2:42:0f:62:e6:9d:f5:04:55:fb:1e:78:c5:45:e6:cf:
         27:9e:ce:ac:f2:fb:77:5a:a5:6b:95:a2:57:6a:cc:99:5c:28:
         90:4b:e9:c3:43:31:df:96:c1:29:12:34:ae:5e:bb:8a:d3:2c:
         f7:1e:15:60:53:65:02:0a:db:76:64:71:0b:8c:f1:d1:31:65:
         7f:6d:de:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:02 2026 by rpki-client