Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e34382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          Fd5xz7raOBS82Q17vj0byQDtV9wpixzRnLuvD8yFm24=
Subject key identifier:   08:52:FA:CF:6B:D4:45:1F:4E:AB:93:F3:B4:16:6A:33:F9:4E:6E:08
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       19C603C1481CD50BB93FCAD9A041BF3CF0B13D3F
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:18 +0000
ROA not before:           Tue 28 Jul 2026 12:13:18 +0000
ROA not after:            Tue 27 Jul 2027 12:18:18 +0000
asID:                     7029
IP address blocks:        62.144.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c6:03:c1:48:1c:d5:0b:b9:3f:ca:d9:a0:41:bf:3c:f0:b1:3d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:18 2026 GMT
            Not After : Jul 27 12:18:18 2027 GMT
        Subject: CN=0852FACF6BD4451F4EAB93F3B4166A33F94E6E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:3b:d3:ab:32:4c:71:19:23:9d:05:77:83:
                    cd:84:a7:e6:b6:d8:9f:cc:b1:99:8f:0e:e4:fd:08:
                    f5:a7:f2:09:60:ed:b9:4c:d3:b5:8b:54:7c:42:c7:
                    7f:b0:02:7d:1c:53:80:03:ea:88:30:c8:ff:3d:e3:
                    42:94:35:e1:e1:df:c1:b8:f3:3a:46:bc:cb:44:3c:
                    88:54:8f:e8:ab:ec:87:e8:8d:77:61:14:06:8d:aa:
                    f4:b7:5d:26:fd:6b:2d:a3:07:5f:22:c0:f3:19:04:
                    db:01:2d:d5:03:67:6e:cb:94:38:97:ad:b3:64:69:
                    5a:03:c1:3c:29:51:7b:10:b8:fc:d3:f5:db:52:34:
                    38:2a:19:b9:61:bc:77:6a:44:35:10:df:e6:ce:1d:
                    86:4f:22:b3:72:d9:13:4f:3b:eb:ab:1d:2d:aa:e5:
                    9e:bb:9c:18:a1:97:0d:94:21:89:23:5f:7a:a5:ff:
                    6a:ed:fe:1b:01:b1:52:e2:ba:c8:74:a1:3e:58:bd:
                    28:a2:a2:1d:19:17:41:a1:d4:19:db:c7:b3:4d:6f:
                    96:eb:c8:c9:0e:7a:2e:c3:ca:27:52:58:95:bb:f5:
                    f4:c6:a3:1a:62:95:ab:2b:19:84:7e:bc:7b:81:1e:
                    e0:e3:e3:0b:9d:52:bd:a4:da:3d:aa:b6:56:db:51:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:52:FA:CF:6B:D4:45:1F:4E:AB:93:F3:B4:16:6A:33:F9:4E:6E:08
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:12:a3:0c:53:38:29:6d:ad:4a:d4:de:06:fc:e3:10:b1:b6:
         76:61:4a:6a:fc:cf:42:ff:18:94:43:9c:ce:27:dd:63:fc:23:
         e0:5c:bd:68:da:3a:49:90:f1:42:76:94:cb:96:3d:07:a0:c9:
         1e:af:ed:47:ac:1f:0b:4e:c3:1d:1e:8e:f5:2c:cb:ab:a7:07:
         35:c8:cd:72:08:ac:c7:62:74:ce:4d:97:ff:bd:cb:e4:f0:5a:
         40:e1:4b:2a:54:f1:d7:9d:1e:49:18:f4:c7:15:4f:e9:23:3c:
         22:71:77:6f:65:44:45:5d:a7:ec:2f:fe:09:35:07:07:06:db:
         2d:5d:0a:e9:1a:20:f7:01:54:21:61:06:87:e7:86:a6:b2:97:
         df:84:e4:38:3e:54:24:e8:fd:b0:4d:6e:a3:ad:8f:e5:f9:0c:
         2a:ab:0a:3b:33:88:b3:bc:08:4e:27:8e:47:1f:39:71:ef:54:
         fb:01:e3:be:10:c5:dd:c5:6f:d2:48:af:7b:01:48:84:3d:70:
         2a:de:03:10:39:c0:dc:5b:3b:8d:01:a4:ad:04:91:2e:d3:55:
         bc:92:26:6e:dc:f4:50:9f:c2:d3:91:68:37:eb:35:1e:e5:95:
         92:4e:85:52:4b:ee:e2:e9:92:78:35:1e:ad:d3:6b:2a:a7:d6:
         78:b0:0b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:17:01 2026 by rpki-client