Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa
File:                     38312e32322e3133332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier:          diD/yJ6l+NRcL6bHQl136l5XkszblkxGE2xXu4AostU=
Subject key identifier:   06:7E:C5:11:66:21:CF:B2:2D:06:67:C5:98:EF:F5:AF:BD:9D:18:07
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       753810E63DB7361B856C743156D7743FE7964F42
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa
Signing time:             Mon 23 Feb 2026 15:06:30 +0000
ROA not before:           Mon 23 Feb 2026 15:01:30 +0000
ROA not after:            Mon 22 Feb 2027 15:06:30 +0000
asID:                     200017
IP address blocks:        81.22.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:38:10:e6:3d:b7:36:1b:85:6c:74:31:56:d7:74:3f:e7:96:4f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:30 2026 GMT
            Not After : Feb 22 15:06:30 2027 GMT
        Subject: CN=067EC5116621CFB22D0667C598EFF5AFBD9D1807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:af:e1:bf:b0:65:e5:1a:6d:fa:1a:00:27:
                    35:e7:84:0e:eb:67:a3:f7:8a:9e:45:69:1d:fb:84:
                    36:2a:e9:8e:72:d1:3f:d6:54:20:0c:4f:1c:c7:ca:
                    f6:55:7a:84:9c:03:d7:85:5e:dc:ec:71:dd:07:eb:
                    48:0e:4d:cc:02:33:a7:c7:57:38:bd:fd:de:18:63:
                    ea:dd:dd:29:4b:0e:a2:0d:18:fb:27:60:5c:26:c7:
                    b7:d8:bb:41:46:73:fe:a1:b2:f1:3e:98:16:3d:34:
                    f3:a4:ff:ae:3a:4c:01:95:46:df:c5:d9:47:36:fb:
                    a1:9a:b8:54:43:bb:5f:cd:8c:72:34:d6:e5:65:07:
                    c4:fa:b0:0e:f4:0b:a8:40:9a:3d:d5:ff:67:6e:61:
                    db:b8:27:00:16:7b:ec:ef:84:28:fe:49:29:fb:47:
                    4a:79:57:d8:9f:70:40:b6:b1:ba:01:d1:24:50:b0:
                    bc:a2:46:81:96:4a:b5:84:f0:9b:b4:6d:34:9e:2c:
                    af:17:03:f6:57:ef:c5:81:f7:31:c2:e7:80:18:f3:
                    db:6c:3e:2f:56:04:37:b7:1e:31:be:cf:ff:fc:7b:
                    9c:d2:b6:ea:1b:ac:a7:95:5d:15:a9:bf:7a:2d:5b:
                    3a:0b:9e:d9:e6:6c:50:5a:d2:2c:f3:f5:2d:2d:f7:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7E:C5:11:66:21:CF:B2:2D:06:67:C5:98:EF:F5:AF:BD:9D:18:07
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:01:a3:19:65:4c:90:36:67:ca:77:a9:a2:21:da:8d:23:67:
         ce:fe:cf:cc:17:33:42:7e:6b:9e:7b:cd:4d:a6:53:38:ac:1e:
         1d:c0:2b:5f:1a:eb:7e:2d:40:40:18:e0:64:d0:d6:ab:bd:f1:
         a5:22:1e:1d:5d:09:ed:d8:f0:7a:64:29:67:9a:bd:5d:19:7f:
         2c:97:34:71:33:f3:bd:eb:d4:42:8f:c4:51:a7:c5:d5:5d:90:
         f9:99:61:6d:1f:b8:2a:28:40:76:d3:14:8d:cf:5c:07:7c:71:
         36:69:86:a9:c8:32:25:c9:b6:9e:9a:15:22:e4:e6:91:c3:73:
         13:d2:ea:a1:d9:8c:4a:9c:6d:dd:a7:aa:2e:55:5d:5c:ac:03:
         54:fc:c3:9f:83:55:da:40:2b:4a:bc:f3:f1:40:b3:65:71:12:
         a4:03:60:0d:67:b6:0a:26:11:f1:bb:05:7a:93:70:9a:a2:c1:
         a0:53:2d:bb:db:f1:64:c4:bf:13:02:24:61:7b:c2:67:17:ec:
         db:d5:f6:55:f8:25:af:a2:e8:a1:85:fa:06:36:3d:40:3f:57:
         c9:a4:7c:ce:d6:25:98:05:a4:0e:ab:43:b2:a9:4a:3a:ad:74:
         10:d5:7d:25:ec:a5:41:34:2b:24:0a:65:47:4d:b8:57:3f:a5:
         bf:cc:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:17:05 2026 by rpki-client