Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2035363530.roa
File:                     36322e3134342e34392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          4euzLFh9ripebKev+hYseWAiNvU5GznGrCxUSigXO9o=
Subject key identifier:   E4:AC:8C:22:FE:75:31:D0:AB:88:F2:34:7F:EF:E7:60:BE:0A:83:72
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       3B8C601191AD165917843FD23FD1A988C46373CF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2035363530.roa
Signing time:             Tue 28 Jul 2026 12:18:14 +0000
ROA not before:           Tue 28 Jul 2026 12:13:14 +0000
ROA not after:            Tue 27 Jul 2027 12:18:14 +0000
asID:                     5650
IP address blocks:        62.144.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 13:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8c:60:11:91:ad:16:59:17:84:3f:d2:3f:d1:a9:88:c4:63:73:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:14 2026 GMT
            Not After : Jul 27 12:18:14 2027 GMT
        Subject: CN=E4AC8C22FE7531D0AB88F2347FEFE760BE0A8372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:41:36:33:bb:bb:90:9c:87:09:ad:c6:2a:
                    e8:dd:e3:f3:2f:d8:9f:51:21:de:ef:0d:2b:c2:84:
                    14:5d:7e:d5:77:05:85:9d:2f:36:a3:0b:ad:4c:b6:
                    12:96:9b:ea:09:17:91:bc:68:3f:d4:61:13:db:6f:
                    f1:4a:52:12:81:21:6c:6b:91:bd:72:72:fa:09:cb:
                    12:8f:da:0a:47:2c:53:0c:3c:09:b5:9f:62:7d:6c:
                    3b:31:fd:9c:79:0a:98:7f:67:c6:21:03:0b:ae:ad:
                    4b:72:8e:e2:02:05:37:ba:e0:87:5b:52:10:a9:9c:
                    ad:76:f9:c2:d3:8c:f5:f0:2f:97:b3:05:67:d8:7c:
                    f3:72:1a:32:36:9a:de:3e:1a:97:a4:71:ef:4a:b6:
                    6e:bb:d5:61:ca:ed:c0:94:e7:04:79:9b:c1:69:cc:
                    2c:99:2d:06:37:62:9b:aa:5d:f4:db:4f:4c:3c:48:
                    06:6b:12:6f:5d:d6:e5:36:c0:97:69:27:ff:7f:4f:
                    9f:3c:86:d6:d1:47:dd:8b:a0:7f:6d:e0:17:fd:4a:
                    21:7a:8b:fe:e3:c4:74:96:1e:34:d9:ac:9c:fc:00:
                    c2:85:28:35:ca:47:1a:63:78:31:59:71:d6:84:81:
                    c9:94:2f:12:c0:a2:85:ab:a5:78:fe:bf:b7:b6:78:
                    c4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AC:8C:22:FE:75:31:D0:AB:88:F2:34:7F:EF:E7:60:BE:0A:83:72
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e34392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:8b:24:3d:4d:4a:60:7f:51:50:7b:0a:0d:01:45:81:7c:
         ae:d4:91:f4:3c:cb:89:0e:7c:41:79:e5:14:ea:c5:0a:65:0f:
         d8:33:ea:3c:13:a7:d8:4b:da:aa:94:4d:95:05:85:8f:54:5f:
         03:9c:f0:45:0e:7b:24:37:a3:b1:ba:b8:83:68:34:a7:fa:c0:
         f1:04:8a:7b:71:3b:e0:82:35:39:7a:98:4e:10:b4:0a:2c:63:
         a3:d6:cf:6d:fe:f5:f8:c9:cb:22:c8:22:a8:02:6a:e2:eb:de:
         f1:b7:e3:83:43:a6:fe:bd:e6:a5:83:72:09:d6:0b:e0:02:b2:
         a6:3d:3c:87:f8:07:cb:4d:4d:ab:44:0e:19:ce:9a:61:54:82:
         9c:42:67:c2:2d:a6:e4:af:3c:8b:64:80:03:ec:f2:76:3b:d8:
         d5:b3:7a:6c:7e:5c:06:c2:43:ed:c2:6f:94:f1:b3:a1:0a:e5:
         fe:fe:e5:ea:23:bb:2f:e3:de:80:e2:cf:25:09:e2:87:75:e3:
         b5:b5:0a:b7:af:10:1d:3b:d8:10:a0:9d:d0:a2:17:c0:40:08:
         59:e8:db:1e:15:99:14:0a:62:e6:d6:9c:ed:ff:1f:d0:ce:14:
         3a:df:dc:06:2d:c8:63:6b:16:ab:10:07:9b:55:98:d0:33:36:
         09:09:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:01:49 2026 by rpki-client