Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32342d3234203d3e203233303631.roa
File:                     36322e3134342e34342e302f32342d3234203d3e203233303631.roa (raw, json)
Hash identifier:          5HTHxOLuWAkQaqokLduXFDvM0UwZe6eSmFXZQZC6LFA=
Subject key identifier:   C7:86:C0:B7:D0:30:75:69:53:C1:5F:20:44:8A:3A:A3:91:13:A0:35
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       02F1EE382D223CC6A2308D8CC32B12049C007F0E
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32342d3234203d3e203233303631.roa
Signing time:             Fri 16 Oct 2026 22:56:27 +0000
ROA not before:           Fri 16 Oct 2026 22:51:27 +0000
ROA not after:            Fri 15 Oct 2027 22:56:27 +0000
asID:                     23061
IP address blocks:        62.144.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:ee:38:2d:22:3c:c6:a2:30:8d:8c:c3:2b:12:04:9c:00:7f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 16 22:51:27 2026 GMT
            Not After : Oct 15 22:56:27 2027 GMT
        Subject: CN=C786C0B7D030756953C15F20448A3AA39113A035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cd:f4:b8:40:03:3a:d5:f6:3d:c1:91:eb:42:
                    f2:22:bf:c0:81:f5:41:f9:fb:82:27:b5:35:27:68:
                    5f:2e:4a:40:5b:bb:6e:1e:ca:d9:cf:c5:ae:5d:a5:
                    b5:f3:7d:5e:5d:bf:ac:97:b3:f0:b7:b1:fe:a8:13:
                    d0:04:9e:c5:82:fe:73:5f:75:55:65:93:68:59:a5:
                    75:a3:85:0b:64:26:8a:eb:3d:3c:8f:82:d9:87:33:
                    6e:a6:ad:78:02:e1:5a:b2:5b:c0:d7:cd:da:a9:de:
                    1b:12:5a:a4:53:da:ba:e1:1f:9f:43:14:8e:62:0f:
                    21:f7:28:da:17:ef:cd:a6:7f:91:16:e6:58:31:a9:
                    21:6f:c3:a6:c4:b1:a6:e3:af:e5:af:74:0b:14:3f:
                    61:c8:b9:7b:10:20:19:39:89:95:4e:e6:97:a0:8e:
                    03:53:a9:95:57:14:2c:b5:e7:96:c7:37:29:5d:00:
                    2b:88:be:0a:4e:72:9d:66:c0:80:e5:5e:22:ef:d2:
                    74:89:64:66:2e:58:d2:b9:69:3d:0a:d7:0c:6c:4a:
                    99:2e:a9:4c:40:c1:e8:8c:10:fb:13:c4:3d:1e:39:
                    a8:be:d5:8b:01:9e:87:d6:0f:b6:48:d5:08:eb:2d:
                    41:e7:4a:a4:4a:8c:e8:05:ee:63:b7:a6:a5:b0:27:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:86:C0:B7:D0:30:75:69:53:C1:5F:20:44:8A:3A:A3:91:13:A0:35
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34342e302f32342d3234203d3e203233303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:8e:20:15:46:71:9f:60:20:46:f7:bd:0f:dd:32:60:9b:
         de:8e:bb:91:9d:a1:b2:4a:c2:ad:35:6d:5a:b1:ba:e3:2b:9b:
         15:4d:ca:a5:cd:f5:ef:d2:52:bd:9a:76:f0:19:1c:dd:ca:9f:
         1d:7b:dc:b3:02:e6:d4:87:89:da:f8:a4:54:27:16:d4:ab:b7:
         f9:67:41:65:11:9d:15:db:38:d9:9b:15:43:dc:f1:db:9f:95:
         3d:e5:c4:cc:a6:39:54:a2:15:72:b7:ee:c9:0c:19:f5:08:7b:
         de:99:47:55:44:26:d2:a8:a8:77:cd:86:21:98:51:f8:c9:a8:
         f2:1b:5c:ab:49:fa:88:fd:f3:27:7e:c9:04:47:33:44:2b:e8:
         65:79:3a:75:c4:4a:66:36:8d:72:f6:d5:a9:a2:a0:a4:4e:df:
         75:42:c4:e7:b8:8c:e3:c7:44:43:25:63:f1:9d:9b:d3:81:b7:
         a5:01:d5:f5:38:4e:6f:e1:06:24:dc:04:3e:b5:00:4f:2d:5a:
         5a:78:21:97:0f:29:81:0d:20:47:9d:c8:92:44:33:36:37:a9:
         b1:47:ca:cc:05:41:3b:9b:27:05:3b:6b:04:a0:b5:ae:00:d0:
         2c:34:97:d0:d4:20:a2:ea:72:4d:ad:0c:97:c5:1c:48:73:c4:
         73:73:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:15:12 2026 by rpki-client