Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134322e302f32342d3234203d3e2035353131.roa
File:                     38312e32322e3134322e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier:          WFTH4gcE6qgi3J4fgier0H2wang2+xquFGVgjAGiy78=
Subject key identifier:   1C:00:EB:2B:9F:C5:3C:91:3D:C8:E2:96:64:EC:75:D8:54:AD:90:25
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       1DDA0DE6931F445ACFD139EA098ECBB106DB824A
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134322e302f32342d3234203d3e2035353131.roa
Signing time:             Mon 23 Feb 2026 15:06:32 +0000
ROA not before:           Mon 23 Feb 2026 15:01:32 +0000
ROA not after:            Mon 22 Feb 2027 15:06:32 +0000
asID:                     5511
IP address blocks:        81.22.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:da:0d:e6:93:1f:44:5a:cf:d1:39:ea:09:8e:cb:b1:06:db:82:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Feb 23 15:01:32 2026 GMT
            Not After : Feb 22 15:06:32 2027 GMT
        Subject: CN=1C00EB2B9FC53C913DC8E29664EC75D854AD9025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:a0:04:b6:3b:f9:b1:11:57:94:e5:ab:ec:
                    15:26:e2:10:4d:c7:cd:f3:9d:a9:5c:d0:0c:95:f2:
                    cf:21:40:2b:8d:54:84:62:18:df:e5:95:82:cf:89:
                    65:1b:71:f6:14:a2:7f:e3:ad:85:7c:06:dc:16:b4:
                    9b:94:f0:38:31:eb:ad:2c:2f:ab:3c:f1:f4:25:ac:
                    c4:8c:ae:27:89:c2:14:b3:2b:4c:cc:e5:8a:6b:56:
                    f7:0d:f0:f2:94:af:9d:03:ee:bd:8b:a1:40:12:24:
                    5a:b9:c7:72:d5:42:21:53:24:09:8f:fb:1f:ac:6b:
                    2e:53:99:87:01:e8:39:12:5f:17:97:85:82:32:3b:
                    62:2d:d5:70:c7:56:e8:62:83:6e:b1:1a:3a:cb:df:
                    67:c4:e5:78:0f:d5:6e:cb:0e:09:01:3d:cb:9a:bf:
                    35:64:1f:d5:ff:6a:20:aa:38:e2:cd:e1:f8:a7:a1:
                    16:db:10:ed:30:0b:bc:40:82:4e:bd:04:0b:06:69:
                    62:3d:e7:26:5a:51:d5:d2:b4:3d:98:d7:e0:0b:e4:
                    da:71:17:7e:38:65:fa:fb:47:c7:ad:ad:50:4c:50:
                    86:de:77:8e:8a:7f:a4:f4:97:d8:42:67:69:85:52:
                    c2:f5:fe:c6:b9:6b:a6:e4:6e:e6:a9:c1:4d:22:6f:
                    47:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:EB:2B:9F:C5:3C:91:3D:C8:E2:96:64:EC:75:D8:54:AD:90:25
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134322e302f32342d3234203d3e2035353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:26:04:0d:54:c0:e5:77:05:87:16:d5:b9:9f:e3:fb:a5:57:
         69:1a:10:f9:2a:86:1e:36:09:0e:94:ba:6a:cd:c6:91:49:e8:
         f4:64:2b:4f:34:c9:b6:0f:87:bc:30:65:0e:de:b3:74:16:c0:
         01:01:a8:7c:5e:76:56:aa:65:0f:da:1e:f9:66:a4:f9:38:57:
         6a:30:15:04:7b:ce:aa:2c:aa:e1:42:6f:1b:0e:ae:38:a2:bd:
         0c:40:f0:ab:27:71:f7:80:85:9c:70:94:e3:f5:24:88:29:24:
         bd:32:bc:de:37:4c:bf:17:ba:14:9f:52:0b:34:d1:65:7e:ef:
         4b:9d:3a:22:06:f2:d7:d2:73:9a:07:df:0a:a9:3e:13:52:fc:
         8e:69:9e:90:90:aa:d7:36:2f:fe:21:48:80:a4:93:91:3f:d6:
         b6:4b:65:62:7f:02:7b:81:b2:60:f3:74:72:89:90:1e:ab:48:
         d5:ff:10:d8:86:76:da:02:73:80:bc:56:e1:b1:2c:42:64:67:
         08:bc:6c:76:85:f7:6e:b6:ee:b3:bd:50:40:69:d8:29:84:5a:
         00:dd:47:df:2d:6e:e9:ef:93:b4:8d:a1:73:39:f1:8c:2f:c5:
         14:24:ff:d7:58:d9:0e:c6:78:0b:83:2d:88:9b:d4:3a:7a:c1:
         21:15:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:35 2026 by rpki-client