Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133342e302f32342d3234203d3e203439393831.roa
File:                     38312e32322e3133342e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          HH7g60sMMwxShQTWzldrjZiHk9DNiVMrte4ym2aqI2U=
Subject key identifier:   16:36:0D:2D:F2:1D:10:B2:1B:41:3D:B3:9D:DE:68:4F:08:B5:AA:11
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       7CEB33A487A7BC3A547C8D87D970AB4D9138549A
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133342e302f32342d3234203d3e203439393831.roa
Signing time:             Mon 23 Feb 2026 15:06:30 +0000
ROA not before:           Mon 23 Feb 2026 15:01:30 +0000
ROA not after:            Mon 22 Feb 2027 15:06:30 +0000
asID:                     49981
IP address blocks:        81.22.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:eb:33:a4:87:a7:bc:3a:54:7c:8d:87:d9:70:ab:4d:91:38:54:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:30 2026 GMT
            Not After : Feb 22 15:06:30 2027 GMT
        Subject: CN=16360D2DF21D10B21B413DB39DDE684F08B5AA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:1c:34:7e:9c:2f:f1:ec:6f:ff:31:90:91:
                    27:c1:57:e7:c2:00:ea:48:ad:e7:fd:36:8b:59:b8:
                    ba:62:59:40:f2:aa:3b:18:10:c3:8a:eb:3e:9f:e5:
                    a5:41:fc:3b:5d:ce:63:44:03:1f:49:de:67:f0:33:
                    74:c4:cb:04:02:34:fa:ef:7f:02:c5:8a:74:13:1f:
                    c0:74:76:05:b8:e7:bf:09:08:cf:67:14:84:d2:45:
                    a5:d8:c8:eb:42:cb:60:16:de:c0:cf:b1:4c:1c:55:
                    81:c7:42:dd:ef:4a:09:41:ed:cc:c3:e9:5e:9c:00:
                    bb:7d:96:e6:38:9c:fd:39:78:95:52:90:c4:b5:50:
                    f4:e3:64:b6:20:fa:b6:b5:ae:ca:6c:7a:af:25:89:
                    82:fe:b5:4e:d2:c5:f2:7f:38:02:20:eb:49:c5:82:
                    e4:f3:4d:ae:8b:5b:fa:a6:89:bb:a1:ab:a7:66:d7:
                    ff:3c:55:c3:9b:03:e2:42:f4:81:96:65:d9:4b:d6:
                    29:a4:ac:bf:87:f9:22:88:a3:e7:e4:4b:5d:9a:c8:
                    9e:1c:dc:31:98:f8:a1:c3:65:00:41:cd:f8:11:79:
                    eb:55:68:50:56:51:15:5d:77:66:22:83:c5:f8:21:
                    57:33:a9:96:ed:32:42:4f:99:ab:c2:89:2a:10:29:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:36:0D:2D:F2:1D:10:B2:1B:41:3D:B3:9D:DE:68:4F:08:B5:AA:11
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133342e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:09:d8:ab:cd:ef:6c:3c:e7:25:4c:36:66:aa:72:08:90:
         43:97:46:1a:62:ed:a9:d2:99:0d:4a:5d:c5:b0:8a:6d:24:14:
         11:f2:96:dd:20:c7:df:54:19:5e:d8:73:99:10:9c:b8:9f:bb:
         0c:f0:96:a4:15:c4:f8:e0:7d:30:bf:1d:0f:e7:a7:80:aa:11:
         7b:2a:5b:c2:8e:be:8a:ce:84:fc:5e:3c:f0:01:2b:36:b9:32:
         27:b9:94:2c:76:16:20:b0:0d:8d:9e:02:d5:db:1c:84:ea:bf:
         03:4c:d6:a3:a7:bb:6e:a1:15:03:e6:6e:f8:35:f6:7a:b1:31:
         eb:f1:5b:a2:f4:8c:c4:0e:d9:d0:12:e7:5f:3c:dc:07:38:ef:
         cf:e6:f6:43:f4:5e:fe:bc:57:e9:3b:4c:1b:e2:c2:e0:6a:e8:
         4f:bd:6a:23:63:48:75:54:d7:74:9b:de:55:ff:1f:a3:e9:25:
         a6:a1:c3:ef:29:5d:75:9f:6f:ce:31:a0:d2:72:fa:56:ac:d6:
         92:d0:e8:74:90:04:b9:62:d4:8e:37:c0:fb:1a:c7:2a:84:a7:
         76:46:ce:08:49:e5:d9:2a:bf:31:04:44:0a:c8:52:1c:7f:db:
         b6:85:65:e3:fc:ef:a1:9f:fa:a2:71:7f:ba:51:ea:28:f7:9e:
         64:cd:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:10 2026 by rpki-client