Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32312d3234203d3e20383334.roa
File:                     36322e3134342e35362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          MwJAxzhwK/bnWF5f6p4dqZhtDryKvomYpGFvCL+GCaw=
Subject key identifier:   E9:E1:74:77:69:DE:7D:59:6A:EB:D7:E2:CF:93:8C:1B:31:12:42:D9
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       0ADA1642EE2CD3426CB1FF8C52DEAEC1959F1ACF
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32312d3234203d3e20383334.roa
Signing time:             Wed 12 Aug 2026 00:06:41 +0000
ROA not before:           Wed 12 Aug 2026 00:01:41 +0000
ROA not after:            Wed 11 Aug 2027 00:06:41 +0000
asID:                     834
IP address blocks:        62.144.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 06:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:da:16:42:ee:2c:d3:42:6c:b1:ff:8c:52:de:ae:c1:95:9f:1a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 12 00:01:41 2026 GMT
            Not After : Aug 11 00:06:41 2027 GMT
        Subject: CN=E9E1747769DE7D596AEBD7E2CF938C1B311242D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:0f:f2:ab:c1:eb:73:6c:77:05:81:4d:df:
                    c3:ce:92:b4:58:b6:ed:be:b8:21:08:23:d4:df:cf:
                    1a:4d:ed:3f:2f:32:4b:a9:ae:4d:9c:db:f0:d3:04:
                    f0:d8:1a:e8:78:48:29:c6:06:15:96:de:41:3a:81:
                    3d:e6:e3:65:51:28:34:8b:e3:89:65:5b:07:d1:4f:
                    59:92:f5:36:44:2b:f2:db:7a:23:f6:0e:28:26:5f:
                    08:ff:fe:17:12:7a:73:d2:44:9b:8f:4b:7b:d7:c4:
                    3a:02:fc:8d:c5:01:05:05:12:4a:ed:df:0e:1c:d3:
                    e5:8a:c1:89:4f:2c:f6:d6:90:55:a7:c7:83:0a:cd:
                    e2:a5:9b:38:16:2b:3a:93:17:51:bd:7b:53:9b:df:
                    ff:bc:10:a8:31:c4:58:ed:14:e6:94:80:f8:3c:aa:
                    68:03:ac:54:f8:db:b4:50:6b:e5:d8:8d:e7:93:b3:
                    89:fa:fd:28:91:95:89:f6:9f:b5:46:4d:67:f5:23:
                    eb:88:a7:1b:91:7a:c6:47:48:39:6a:6c:3c:c8:f3:
                    b9:fa:2d:7a:71:b3:7d:46:64:89:64:f9:cc:61:4c:
                    c5:65:f3:49:4d:4a:19:3c:cf:8a:28:16:f7:ab:30:
                    db:5d:70:6a:db:32:72:0d:21:f0:30:76:00:c4:d4:
                    a0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E1:74:77:69:DE:7D:59:6A:EB:D7:E2:CF:93:8C:1B:31:12:42:D9
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35362e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:82:a5:ef:fc:66:57:cb:e7:53:ac:40:af:d4:bc:05:ab:
         73:ff:ec:f4:1a:8b:01:ef:8b:fe:60:57:8b:cc:13:5d:47:c2:
         35:26:d8:af:3c:80:1c:09:56:52:fe:00:01:5b:cf:0f:9c:31:
         03:75:f3:f6:a0:11:d1:59:2c:ea:bb:35:73:e4:f3:a7:e7:cc:
         3a:68:e2:7c:ab:98:4a:49:9c:f7:e0:31:65:c6:b1:3b:00:a4:
         a4:a1:ed:65:01:ee:75:28:ff:5c:83:b2:0c:20:90:f1:19:9d:
         6e:cb:fd:64:1c:4e:1f:7c:7d:61:8d:a0:9b:87:f0:84:8d:96:
         77:d0:78:0d:2c:8d:d3:80:c6:68:c3:ba:c8:29:05:5f:48:c0:
         8f:52:e6:55:68:b6:fd:ed:ac:6a:1a:63:63:ea:54:8b:09:89:
         1c:11:60:88:74:38:e3:d8:4d:50:e8:bb:0e:99:2a:10:e1:ad:
         41:52:5e:02:62:20:30:ea:28:7a:66:28:3e:80:35:71:90:ab:
         92:77:f1:05:4e:82:fa:3f:ba:a5:92:44:34:de:52:6a:1d:49:
         7b:9a:87:5c:c8:82:23:f6:f7:5f:bd:a0:9a:e6:43:72:07:81:
         43:be:58:ea:82:a1:1c:ef:d9:09:8a:60:e8:88:9e:fd:47:5b:
         15:22:86:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:45 2026 by rpki-client