Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e20313532313739.roa
File:                     36322e3134342e35382e302f32342d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          KOdvfHEaiyw7g7cCejuq6GM3+iySTFV0JnuKqrsiosY=
Subject key identifier:   67:88:94:3C:69:DB:5E:89:66:FD:D2:DA:18:65:DE:ED:A6:CD:98:83
Certificate issuer:       /CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
Certificate serial:       3B5699712AD290111B8FF37EF55CBC33D5EED3AC
Authority key identifier: B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e20313532313739.roa
Signing time:             Mon 17 Aug 2026 03:14:20 +0000
ROA not before:           Mon 17 Aug 2026 03:09:20 +0000
ROA not after:            Mon 16 Aug 2027 03:14:20 +0000
asID:                     152179
IP address blocks:        62.144.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl
                          rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/D0A516B50426202A424F0EBFCB7D2BD4F744F964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KUWtQQmICpCTw6_y30r1PdE-WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Sep 2026 18:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:56:99:71:2a:d2:90:11:1b:8f:f3:7e:f5:5c:bc:33:d5:ee:d3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5
        Validity
            Not Before: Aug 17 03:09:20 2026 GMT
            Not After : Aug 16 03:14:20 2027 GMT
        Subject: CN=6788943C69DB5E8966FDD2DA1865DEEDA6CD9883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:26:c3:3b:d4:1e:8d:7b:13:c9:a3:f1:83:
                    1f:36:a2:84:54:a6:fe:8c:b9:ae:2b:7f:cd:9e:38:
                    d2:41:5f:53:97:1f:58:7a:7b:d3:2f:ff:15:00:89:
                    ce:70:d9:d1:aa:23:4d:98:be:9c:21:51:42:12:29:
                    f7:50:61:78:9f:14:9b:21:5b:8f:ba:62:95:16:52:
                    19:25:5d:08:ed:12:91:6c:45:79:2b:03:77:48:1c:
                    44:e0:3e:3f:bc:ea:9f:1f:7e:5a:75:16:ea:5e:38:
                    20:4f:17:36:2a:29:a0:f3:db:1e:75:a7:df:e7:ea:
                    ec:bb:67:9c:bb:e6:e9:84:23:1a:2f:b8:dd:f7:af:
                    6f:4a:67:e2:82:13:7c:f9:f1:02:f8:df:66:82:93:
                    7b:78:91:66:39:b5:06:8c:bb:a2:5b:e7:5e:26:b4:
                    69:ca:47:eb:27:12:cc:66:d2:fc:da:92:e4:38:37:
                    70:66:15:97:84:68:01:2b:b0:3a:dd:96:be:3c:b9:
                    f3:d3:c1:9c:6f:9a:21:49:d8:87:45:11:43:92:81:
                    e4:68:28:64:46:18:2d:38:aa:77:b8:5a:94:2b:69:
                    75:2a:40:b0:55:88:32:09:43:db:d0:11:c7:d1:3d:
                    38:1d:d3:f8:8a:67:d0:47:9b:9c:d0:e9:c0:16:59:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:94:3C:69:DB:5E:89:66:FD:D2:DA:18:65:DE:ED:A6:CD:98:83
            X509v3 Authority Key Identifier:
                keyid:B3:54:D3:28:CB:BF:D1:EF:3C:D2:92:68:A2:3B:0F:CC:60:E3:A2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/0/B354D328CBBFD1EF3CD29268A23B0FCC60E3A2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a0375b39-f949-4cb5-b519-f94008b1654c-0/0/36322e3134342e35382e302f32342d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.144.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:62:c5:d5:d3:49:60:9e:d9:75:f5:af:0e:40:45:2a:d9:db:
         e1:fe:01:27:9e:b7:08:65:f2:25:ff:e3:59:17:bc:65:aa:9f:
         eb:6b:f9:a5:74:04:f3:26:c9:56:77:14:a4:04:27:fa:92:02:
         e1:cd:53:67:a6:6b:c0:3a:b5:a5:20:86:d2:a2:35:d3:ea:77:
         db:d2:c7:72:9d:a9:7c:b0:e2:ae:b3:57:a5:45:c9:af:d0:35:
         5b:6f:99:e5:e2:8e:f8:62:38:08:91:cd:a8:7d:32:b4:45:df:
         86:b2:f6:66:2f:23:65:9b:e0:c2:fa:45:a9:e1:ae:a4:a4:67:
         8d:b0:0c:1b:9c:f2:64:e9:ff:96:1e:36:98:6b:6b:98:6d:fe:
         09:7a:02:71:be:16:58:16:5e:71:a3:24:d2:a9:bd:4b:76:5c:
         7d:23:6e:6e:a2:48:01:e0:3f:59:30:b7:d6:ad:1a:76:ed:fe:
         6c:60:58:bf:af:1a:89:0e:21:8c:54:a0:ec:f9:72:7f:aa:b0:
         4a:9f:23:f5:9a:ef:33:4c:2a:76:a3:05:66:66:0d:ba:4e:03:
         46:8f:9a:c5:7e:cd:05:2c:ff:af:bc:9e:f6:fe:f6:84:6f:f6:
         99:61:aa:3b:1f:06:eb:18:fa:24:58:61:ea:54:e5:55:8d:94:
         18:04:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:22:04 2026 by rpki-client