Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133392e302f32342d3234203d3e2035353131.roa
File:                     38312e32322e3133392e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier:          OlIaCajUTL5moF67p1nsHzyEakJYFlX5ANotZCHgwiM=
Subject key identifier:   F6:B3:16:1A:DF:05:CF:8F:06:8A:85:DF:58:03:B7:8E:79:8A:4C:C5
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       7C3E3D6FF6A7FB2404A84F16A4E1AF7E159ADEE0
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133392e302f32342d3234203d3e2035353131.roa
Signing time:             Mon 23 Feb 2026 15:06:31 +0000
ROA not before:           Mon 23 Feb 2026 15:01:31 +0000
ROA not after:            Mon 22 Feb 2027 15:06:31 +0000
asID:                     5511
IP address blocks:        81.22.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3e:3d:6f:f6:a7:fb:24:04:a8:4f:16:a4:e1:af:7e:15:9a:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:31 2026 GMT
            Not After : Feb 22 15:06:31 2027 GMT
        Subject: CN=F6B3161ADF05CF8F068A85DF5803B78E798A4CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:68:8a:c5:b0:8a:3f:87:f8:c4:89:9c:19:
                    f4:41:26:d2:37:f2:1d:e9:c8:4e:11:ff:70:e6:e1:
                    c2:85:8b:dd:ed:d3:eb:64:bf:9d:a9:bd:1f:9d:9e:
                    0a:72:92:66:bc:e9:51:10:a9:52:23:31:ad:2d:5f:
                    cd:ea:d0:c3:8d:0a:cc:03:a6:52:1b:61:0b:78:6b:
                    e9:01:17:44:cd:b8:77:0c:e5:09:70:d1:52:0f:4b:
                    5c:f6:e1:06:1e:09:1e:7c:32:9f:6a:48:12:14:52:
                    27:af:d4:c4:97:89:95:1f:d7:37:99:1b:7e:01:00:
                    ab:94:7a:77:a2:21:c5:f1:ca:c7:5f:ab:e4:00:4e:
                    d8:b5:99:d7:ca:c6:32:ea:54:0b:88:bd:5f:19:b6:
                    22:4f:9e:b4:a9:f5:59:3a:95:93:d4:b0:0c:ad:15:
                    a4:d7:ac:6d:9c:3c:aa:c5:c8:8b:fd:0b:40:7a:de:
                    1a:81:b9:4c:cb:02:ec:cf:ae:ef:47:ac:cf:f1:75:
                    2d:d9:3b:e7:66:8e:9a:2d:d4:24:21:68:40:80:3e:
                    4a:6c:6f:80:6a:a8:db:6c:d0:ca:8f:48:3f:70:04:
                    a2:c5:51:30:bd:6c:b8:f0:60:93:c4:58:fd:5f:3c:
                    78:c3:c4:8f:9a:42:22:97:9c:2c:dc:db:ab:f7:77:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B3:16:1A:DF:05:CF:8F:06:8A:85:DF:58:03:B7:8E:79:8A:4C:C5
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133392e302f32342d3234203d3e2035353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:ec:f1:6e:2f:24:16:d4:53:ea:17:9b:05:ed:db:e7:1b:
         58:45:a5:10:29:53:3e:63:da:30:4b:70:5a:13:dd:bc:2e:dd:
         af:7c:0f:80:da:65:57:e7:a2:6a:c5:1f:3c:41:7e:90:41:c1:
         a2:ba:94:94:e2:e4:d8:59:54:2c:2a:d7:3f:c6:49:91:e2:c3:
         3c:ae:d2:8a:98:37:0e:2e:0e:cd:08:c0:ca:8a:b8:b7:b5:d3:
         e4:e7:70:50:07:cb:7e:b7:cf:66:a2:e7:b0:63:10:02:7c:0d:
         f8:77:a6:2d:5c:f6:3e:25:83:2f:6c:51:42:7f:13:1c:f3:e8:
         4e:43:a1:d2:19:bb:60:e2:50:50:3c:67:78:a5:50:2b:6c:ad:
         1f:a8:2c:79:d9:d3:52:39:77:59:d7:d1:9d:6e:53:33:7e:93:
         8f:a1:ce:14:a5:8a:62:fe:04:53:53:e5:ea:10:87:07:1b:fa:
         e1:9b:f6:14:b8:46:20:34:ad:8f:65:e1:77:c1:3d:78:cf:d7:
         dd:03:80:80:7f:e1:5b:fd:f1:8e:41:ee:fe:21:65:9b:54:ec:
         9a:82:88:48:36:2d:30:96:51:76:df:cd:b8:0d:72:92:48:eb:
         b1:de:f2:69:6a:9a:60:12:28:58:9c:96:d9:56:1d:c3:00:b2:
         41:00:a2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:47 2026 by rpki-client