Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2036303739.roa
File:                     38312e32322e3133382e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          /N0GZguxMjvzTsqPk49M4sZRPG18o5Bs+5jBxXZxr2I=
Subject key identifier:   A9:F9:A0:D5:5E:2A:0C:34:E1:97:B8:E4:6D:58:C8:BA:46:1C:F9:43
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       541C989DBC2B9B3A1C7B1EFCC8910613FBCAEF17
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 23 Feb 2026 15:06:31 +0000
ROA not before:           Mon 23 Feb 2026 15:01:31 +0000
ROA not after:            Mon 22 Feb 2027 15:06:31 +0000
asID:                     6079
IP address blocks:        81.22.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1c:98:9d:bc:2b:9b:3a:1c:7b:1e:fc:c8:91:06:13:fb:ca:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:31 2026 GMT
            Not After : Feb 22 15:06:31 2027 GMT
        Subject: CN=A9F9A0D55E2A0C34E197B8E46D58C8BA461CF943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:8f:9d:a1:4a:e0:93:40:c6:ef:67:9e:20:
                    53:3f:2b:fb:78:d6:99:ac:3f:00:1e:e1:17:ad:40:
                    0c:4c:7c:a8:fe:15:c0:61:f7:d1:e9:40:9e:2a:df:
                    67:c2:33:1e:7f:82:29:d4:77:56:4d:dc:b5:0b:33:
                    72:91:d9:a8:a0:33:bf:15:1b:83:66:8b:b9:42:f7:
                    a0:cc:f6:e7:f8:52:98:49:65:b3:22:f3:60:d6:b1:
                    34:1f:32:d8:da:b2:2a:46:51:d5:44:18:c9:76:09:
                    11:a9:3f:28:60:7d:ea:aa:86:79:0d:66:82:8a:d1:
                    22:77:cd:f0:65:f7:3a:5e:dd:70:76:37:e8:68:e7:
                    9e:23:88:47:1f:d4:da:35:b9:0a:88:4c:91:3a:dc:
                    28:11:b1:43:7d:0d:01:f1:89:b3:0d:b0:a3:08:86:
                    18:75:82:0e:65:b6:60:5c:f8:89:8e:5f:f9:64:32:
                    e8:c7:1b:37:f1:36:df:5f:19:78:7f:4e:b6:2c:6f:
                    d2:40:5b:66:e3:c2:5d:09:45:ea:cf:00:2e:71:55:
                    40:d0:2b:82:ef:fd:50:1f:a7:c0:cc:43:29:60:b2:
                    a0:b8:3b:15:a5:d7:5e:33:68:e8:81:b7:46:09:d7:
                    ca:24:9e:69:59:41:11:42:f1:5e:10:cc:1c:f8:a2:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F9:A0:D5:5E:2A:0C:34:E1:97:B8:E4:6D:58:C8:BA:46:1C:F9:43
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133382e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:05:9f:4f:f3:dd:a6:2d:90:76:bb:07:9e:d2:ae:26:54:8c:
         51:cd:9d:d6:0d:e7:ec:eb:f8:a4:6b:b5:03:e0:53:68:2b:28:
         a9:59:7e:30:45:24:fb:ff:c2:0a:4e:c5:b7:48:e7:75:43:4c:
         5e:41:f3:53:63:ed:4d:05:29:b3:63:b8:22:f6:97:98:db:4b:
         fe:d1:5f:cb:63:54:cc:56:aa:50:a8:b5:22:cf:07:55:a6:db:
         d5:c1:61:6a:9c:26:5c:99:72:fc:92:66:9f:c8:ea:71:7e:0a:
         67:68:d8:8a:01:f1:04:60:6d:ed:a6:a5:67:88:84:af:c4:19:
         1e:8f:1b:e4:ee:e3:13:1d:60:82:d0:e0:84:b9:f9:a9:c0:bf:
         e2:96:60:ad:75:56:7d:67:3d:f5:7c:12:f9:28:59:c3:03:da:
         ee:f8:8e:41:f6:dc:bc:c7:fa:db:29:be:76:ee:c2:41:b8:2e:
         6e:53:61:fd:5d:c2:45:63:fd:24:2b:cc:b1:e1:0f:f4:c1:40:
         f8:28:08:0c:0e:fd:dd:e8:70:23:86:02:23:a3:88:9b:04:a9:
         7a:7b:81:58:d2:b4:1c:a8:01:d1:5e:c9:6b:36:b5:69:34:e3:
         fa:b5:87:e5:94:ef:cf:fb:ad:3c:56:6f:8f:8b:ce:37:2f:82:
         dd:78:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:30 2026 by rpki-client