Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa
File:                     36322e3134342e35302e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          ArWNA/Dhxokx4umcYjbpGxonQiUnaRDVnT8EtqjTfsM=
Subject key identifier:   33:AC:92:D6:87:C4:67:05:23:0E:A6:47:93:E6:34:80:E1:DD:41:CE
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       61F777B568C36D19051CC10441234F7024F3D6B3
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 28 Jul 2026 12:18:15 +0000
ROA not before:           Tue 28 Jul 2026 12:13:15 +0000
ROA not after:            Tue 27 Jul 2027 12:18:15 +0000
asID:                     7029
IP address blocks:        62.144.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f7:77:b5:68:c3:6d:19:05:1c:c1:04:41:23:4f:70:24:f3:d6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Jul 28 12:13:15 2026 GMT
            Not After : Jul 27 12:18:15 2027 GMT
        Subject: CN=33AC92D687C46705230EA64793E63480E1DD41CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:93:35:f7:82:30:30:9f:48:67:da:2e:bf:19:
                    0c:b5:a4:91:70:16:f4:32:63:b7:cf:11:1c:12:da:
                    17:38:81:77:f4:e7:ad:ce:1b:de:91:80:e3:19:57:
                    aa:4a:bf:b3:17:1b:91:47:46:e3:2e:f0:bf:ef:3e:
                    6b:07:6e:c1:17:72:fb:6f:b2:39:0c:91:4c:88:15:
                    00:97:49:06:44:fa:02:b1:3d:d6:d9:b7:1c:ba:72:
                    de:ca:8a:ab:5e:e9:fa:81:76:db:33:47:ea:50:62:
                    9a:01:a3:96:15:66:56:51:54:48:16:4c:af:e4:ef:
                    6a:18:fb:6a:42:f8:8e:cc:ef:42:dc:a3:b3:8e:5f:
                    df:36:c4:0c:d1:f9:c8:8d:14:2d:6f:0d:2c:2e:59:
                    6b:91:80:04:1c:3d:6f:e8:a9:f5:09:40:af:01:60:
                    6f:6b:05:d0:fd:74:8b:4e:9e:21:38:6a:6a:93:46:
                    67:15:ed:c1:20:42:b8:fd:40:4f:96:7b:8e:79:71:
                    2e:97:67:50:4b:77:54:1d:61:a8:a1:f7:5f:d6:75:
                    ca:5f:ff:46:11:ee:60:15:30:44:aa:a7:df:bb:bd:
                    e4:7b:eb:77:55:35:fa:2e:ee:35:f4:b4:15:7e:5a:
                    65:eb:f2:d4:63:49:d0:70:d4:90:04:da:cf:71:61:
                    fc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AC:92:D6:87:C4:67:05:23:0E:A6:47:93:E6:34:80:E1:DD:41:CE
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35302e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:c6:ca:56:d2:1b:a3:3d:25:b3:36:fe:ca:0b:dd:a9:6c:
         75:dc:5e:62:cb:7a:dc:b5:df:65:13:40:31:bd:00:80:77:de:
         d2:81:5e:bf:bc:fd:b0:13:94:57:a4:69:c9:1c:51:34:74:d5:
         aa:59:bb:25:09:d7:a5:2b:f4:a7:11:72:34:5a:ca:b0:1f:47:
         37:2a:9e:d8:75:02:8a:14:da:e2:3a:0a:89:84:41:a1:56:47:
         e4:a3:21:56:b9:a7:2f:7e:a4:79:9a:5f:a3:4e:52:61:d2:fa:
         78:9a:8a:37:63:f4:97:d7:40:ec:c5:a2:f1:b4:ca:76:03:ac:
         f1:cf:a6:64:f2:40:a7:08:d9:c4:9d:64:bc:df:4d:bf:aa:fc:
         c0:90:e1:36:75:7e:78:0e:e0:89:b2:e4:89:9e:38:5e:87:08:
         2c:f5:6a:0d:d2:b7:6f:d8:17:f0:4d:fb:7e:9a:2c:0a:46:af:
         46:cb:2e:ed:06:b5:ed:c1:4b:85:02:1c:7c:2e:40:2e:93:f3:
         43:97:f8:97:58:90:69:7a:d5:0a:1b:62:bf:0e:a5:b5:8f:31:
         e9:56:6a:1b:36:e2:51:a8:a3:43:05:b9:55:3c:84:38:30:02:
         b2:e9:32:ae:c9:ee:ff:ee:74:db:f7:84:74:c4:53:26:fb:ea:
         ce:8e:a9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:43:29 2026 by rpki-client