Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e20323139323137.roa
File:                     36322e3134342e35372e302f32342d3234203d3e20323139323137.roa (raw, json)
Hash identifier:          1SOWEgINbDk3mJAS6eR8CeKT1xCN7MsHmLfC/kJs3xI=
Subject key identifier:   9D:26:80:58:E0:F2:D3:42:49:82:F5:A2:F4:CD:DA:E2:EC:40:93:3F
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       452633DDF9A8CEC268D019157361ACF1D10E858C
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e20323139323137.roa
Signing time:             Mon 12 Oct 2026 00:02:09 +0000
ROA not before:           Sun 11 Oct 2026 23:57:09 +0000
ROA not after:            Mon 11 Oct 2027 00:02:09 +0000
asID:                     219217
IP address blocks:        62.144.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:26:33:dd:f9:a8:ce:c2:68:d0:19:15:73:61:ac:f1:d1:0e:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Oct 11 23:57:09 2026 GMT
            Not After : Oct 11 00:02:09 2027 GMT
        Subject: CN=9D268058E0F2D3424982F5A2F4CDDAE2EC40933F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:e8:16:71:cb:42:f2:33:a6:64:9c:cb:1e:
                    ab:2c:42:af:c3:cd:af:71:78:48:a0:2c:90:1c:c0:
                    ff:ee:be:64:93:5d:8e:37:56:ff:87:68:6b:4b:e5:
                    bb:0f:96:5d:81:b0:44:ec:ca:a8:8e:0a:82:7a:62:
                    2b:c5:09:43:a6:f2:07:2f:22:e1:cf:37:ba:33:8a:
                    30:9d:80:84:1a:b9:22:c0:81:78:dc:68:a6:ae:d5:
                    41:53:ef:de:8e:bd:18:56:ff:8e:2d:9d:6d:6e:85:
                    a4:80:80:18:ad:2c:a6:a2:5b:15:23:b9:9a:45:9b:
                    8c:a5:17:42:ee:53:58:4e:da:76:16:70:d8:db:7b:
                    13:12:bb:c9:6e:38:70:47:f1:7a:21:de:59:54:77:
                    93:11:7a:90:3e:b6:45:a9:e3:3e:83:73:98:50:b0:
                    b5:2f:55:08:8d:80:e8:a5:fd:3e:84:1a:d3:8a:ec:
                    b4:53:b3:26:d4:e2:9f:5e:c0:6a:67:b6:60:f8:51:
                    0c:bf:c7:4d:57:62:c1:3c:e8:ee:3d:6e:ee:c0:a4:
                    a4:53:2c:3f:7e:f8:83:24:33:ab:4e:05:76:c6:ed:
                    61:6d:61:90:45:88:cd:75:db:03:d1:51:f2:2b:49:
                    ff:c9:44:0c:62:64:d0:7a:4d:cb:75:0e:dc:85:b4:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:26:80:58:E0:F2:D3:42:49:82:F5:A2:F4:CD:DA:E2:EC:40:93:3F
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35372e302f32342d3234203d3e20323139323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:ee:4e:8b:fb:23:83:b9:a3:9d:76:0d:ea:90:b7:97:df:
         dc:5d:39:b5:04:91:0a:c7:f9:dd:33:27:fe:7b:d6:5b:43:d6:
         3a:0d:62:64:4c:ff:3d:dd:97:53:86:8c:eb:27:ef:c2:26:e0:
         45:d7:0c:92:39:14:e8:f6:6b:2b:f8:a8:d0:fd:90:6d:4e:eb:
         7d:b7:05:bf:52:37:55:49:aa:c5:80:84:ba:b4:c1:f6:d8:54:
         85:a3:bf:6f:10:d7:20:7e:1d:cf:54:96:8b:7b:01:d7:3a:52:
         7f:b0:2d:05:fc:19:06:7a:44:69:d8:bd:55:18:bd:be:0c:f6:
         f3:4d:c1:a7:fd:e7:af:af:10:ab:6b:31:d7:f8:1b:9b:98:e7:
         d1:9e:f9:f1:e3:c2:49:d5:88:83:a8:45:f0:6e:cd:6e:39:d3:
         3f:71:c6:3c:15:f6:cb:84:19:6a:87:b7:cd:a9:90:85:13:db:
         4a:35:0f:81:64:bb:07:8a:56:f8:86:1b:06:e7:88:50:71:a9:
         08:3e:67:36:c1:91:dd:4c:0e:3f:96:81:5b:ad:1b:b0:40:fa:
         66:3c:50:25:e3:eb:91:5b:cd:04:27:71:86:63:3b:cb:ba:56:
         1a:ae:53:48:67:31:af:cd:0a:18:e6:79:3d:e9:60:2e:f4:20:
         12:fe:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:28:07 2026 by rpki-client