Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134312e302f32342d3234203d3e2037303239.roa
File:                     38312e32322e3134312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          TjuDGamayH6DfIYGsNiYvpjERzl1EJraNV2v/g/EGhs=
Subject key identifier:   F6:F1:11:01:75:D6:84:EB:66:4A:ED:90:A5:28:40:D0:FC:6F:02:77
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       06CC8DAB28B2EC0502AB86C0E4D8B7BF3CEA9E47
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134312e302f32342d3234203d3e2037303239.roa
Signing time:             Mon 23 Feb 2026 15:06:32 +0000
ROA not before:           Mon 23 Feb 2026 15:01:32 +0000
ROA not after:            Mon 22 Feb 2027 15:06:32 +0000
asID:                     7029
IP address blocks:        81.22.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 08:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:8d:ab:28:b2:ec:05:02:ab:86:c0:e4:d8:b7:bf:3c:ea:9e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:32 2026 GMT
            Not After : Feb 22 15:06:32 2027 GMT
        Subject: CN=F6F1110175D684EB664AED90A52840D0FC6F0277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:24:16:6d:75:27:bf:66:ac:3d:1b:f0:76:
                    10:bc:b5:8b:ca:dc:cd:84:08:dd:f1:c6:c5:25:d0:
                    06:c7:ef:a3:8e:a2:43:ff:57:1c:5a:55:c5:1e:57:
                    31:07:1e:b2:c0:90:e6:bf:18:8d:3e:df:b6:e8:02:
                    d7:96:d3:5e:8a:ea:67:71:b0:07:b9:72:99:58:3a:
                    54:40:c6:32:1b:de:ee:b9:cb:3c:b5:61:21:aa:f1:
                    7c:23:72:56:6a:39:9a:04:b9:70:4f:60:ae:fe:43:
                    0e:b4:b9:8c:71:76:ca:17:56:18:4b:34:30:af:8a:
                    c3:9c:c3:ee:74:d3:93:0b:a9:05:63:71:c0:72:74:
                    55:8d:58:ef:1a:c1:cd:87:8d:a0:ba:5d:ba:81:93:
                    bf:84:f6:d4:aa:b2:32:63:67:8d:87:ec:e7:25:9c:
                    87:7a:db:5e:69:46:15:10:38:26:a3:e3:16:c1:26:
                    bf:83:8e:d9:7d:f2:1d:05:5c:4d:c3:62:d8:81:e9:
                    1b:64:d8:73:86:d7:a8:40:0c:1e:f3:24:c6:5f:66:
                    05:a2:6d:fa:7a:a0:dc:5d:f8:67:7a:e4:86:50:23:
                    74:8c:44:e4:b8:6c:32:78:98:96:bf:98:62:c1:8f:
                    90:88:22:a1:94:b4:ab:02:89:ad:c6:20:f2:a4:5f:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F1:11:01:75:D6:84:EB:66:4A:ED:90:A5:28:40:D0:FC:6F:02:77
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:31:54:8a:e9:fa:d5:cf:bf:01:10:cc:36:26:8a:8c:42:f9:
         76:9e:68:ea:a8:ae:73:09:40:20:56:be:21:72:2f:fb:1c:63:
         d3:d2:f4:d6:fd:18:87:14:61:31:75:41:b5:53:49:0a:9d:c8:
         ea:49:aa:60:a0:ff:ac:8f:65:fd:4b:29:7d:42:44:ab:ec:c5:
         95:65:a7:38:e8:82:e3:25:02:33:c6:d8:03:57:b8:da:6b:f0:
         0e:40:96:47:89:b6:1d:50:ab:a7:4e:75:4a:cf:62:1a:81:ef:
         df:74:b4:4d:d7:73:e2:0e:6b:84:3d:ee:86:57:1e:20:a0:ec:
         78:cf:60:2b:f1:74:b0:3e:ea:d6:df:95:a9:2d:f3:9a:af:e0:
         eb:b4:0c:d4:b3:90:fe:fd:80:9c:d1:be:d1:46:d7:e8:4b:56:
         ff:9f:f3:c9:59:7d:78:04:e4:0c:4b:e7:f5:94:09:fa:0f:cc:
         66:9a:61:68:52:2f:08:f6:8b:58:60:ea:8f:84:6a:2e:2c:9b:
         69:ff:1e:ef:5c:fa:76:d3:9a:eb:f1:d2:69:46:7b:72:57:af:
         df:de:af:d0:62:10:d4:9e:1d:ed:b2:b1:03:a4:ee:5b:df:bc:
         99:59:87:8d:05:1c:00:03:a2:7c:fc:a9:1a:fb:fe:91:4a:fb:
         2a:ee:0a:2c
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUBsyNqyiy7AUCq4bA5Ni3vzzqnkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjAyMjMxNTAxMzJaFw0yNzAyMjIxNTA2MzJaMDMxMTAvBgNV
BAMTKEY2RjExMTAxNzVENjg0RUI2NjRBRUQ5MEE1Mjg0MEQwRkM2RjAyNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYCyQWbXUnv2asPRvwdhC8tYvK
3M2ECN3xxsUl0AbH76OOokP/VxxaVcUeVzEHHrLAkOa/GI0+37boAteW016K6mdx
sAe5cplYOlRAxjIb3u65yzy1YSGq8XwjclZqOZoEuXBPYK7+Qw60uYxxdsoXVhhL
NDCvisOcw+5005MLqQVjccBydFWNWO8awc2HjaC6XbqBk7+E9tSqsjJjZ42H7Ocl
nId6215pRhUQOCaj4xbBJr+Djtl98h0FXE3DYtiB6Rtk2HOG16hADB7zJMZfZgWi
bfp6oNxd+Gd65IZQI3SMROS4bDJ4mJa/mGLBj5CIIqGUtKsCia3GIPKkX8UtAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQU9vERAXXWhOtmSu2QpShA0PxvAncwHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl
Yy00NGE0ZDE1OTBmODctMC8wLzM4MzEyZTMyMzIyZTMxMzQzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaNMA0GCSqGSIb3DQEB
CwUAA4IBAQADMVSK6frVz78BEMw2JoqMQvl2nmjqqK5zCUAgVr4hci/7HGPT0vTW
/RiHFGExdUG1U0kKncjqSapgoP+sj2X9Syl9QkSr7MWVZac46ILjJQIzxtgDV7ja
a/AOQJZHibYdUKunTnVKz2Iage/fdLRN13PiDmuEPe6GVx4goOx4z2Ar8XSwPurW
35WpLfOar+DrtAzUs5D+/YCc0b7RRtfoS1b/n/PJWX14BOQMS+f1lAn6D8xmmmFo
Ui8I9otYYOqPhGouLJtp/x7vXPp205rr8dJpRntyV6/f3q/QYhDUnh3tsrEDpO5b
37yZWYeNBRwAA6J8/Kka+/6RSvsq7gos
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:49 2026 by rpki-client