Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e203235313938.roa
File:                     3130392e37322e3132342e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          9ORHfzNnxrEKM4zGoxsIOvas5t7V2DMiXuPqm9wA1DI=
Subject key identifier:   D5:A5:33:18:A2:4E:93:A1:B7:26:31:F2:05:4E:D1:8A:E0:40:3E:25
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       41C22B9411F5C55FEB57C9B8B1ED4ECC99690C80
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e203235313938.roa
Signing time:             Fri 26 Jun 2026 13:59:11 +0000
ROA not before:           Fri 26 Jun 2026 13:54:11 +0000
ROA not after:            Fri 25 Jun 2027 13:59:11 +0000
asID:                     25198
IP address blocks:        109.72.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 09:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c2:2b:94:11:f5:c5:5f:eb:57:c9:b8:b1:ed:4e:cc:99:69:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Jun 26 13:54:11 2026 GMT
            Not After : Jun 25 13:59:11 2027 GMT
        Subject: CN=D5A53318A24E93A1B72631F2054ED18AE0403E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:30:70:7f:cf:43:7b:81:cf:cf:6b:b8:68:
                    d9:a1:13:26:fb:29:97:ae:91:e9:0e:98:42:98:ab:
                    c4:85:82:e3:c6:ec:da:a4:cf:a4:96:81:bc:dd:d4:
                    30:16:c5:be:6d:d1:c6:9d:c7:d1:f6:3b:b7:3f:83:
                    99:6c:66:2d:9b:bc:6c:88:91:60:aa:58:8e:06:f0:
                    db:85:b6:33:70:ff:e3:d1:3b:35:15:7a:2d:0b:7a:
                    b7:17:84:d6:07:a6:be:49:79:17:59:0f:b7:63:38:
                    f5:48:b0:ca:46:6a:8d:2d:b0:ee:dc:9c:5a:05:36:
                    67:7d:13:55:80:dd:9a:11:40:d1:f8:dd:08:63:35:
                    80:27:8f:a6:a0:11:b6:ed:87:de:34:59:13:6d:f0:
                    da:94:42:7b:f4:09:41:df:c3:f5:f8:4b:12:13:de:
                    6f:4a:12:fe:7a:f9:e1:14:04:47:23:41:10:ad:1e:
                    2d:49:83:62:d0:4a:1f:5d:ca:4c:78:c1:4a:af:4b:
                    ae:6c:18:fb:db:ea:46:89:d5:08:7f:ba:76:71:12:
                    06:89:ca:c9:11:95:b8:d8:cc:23:09:93:ac:6a:17:
                    1e:b2:7a:30:b7:72:ab:bc:85:94:2e:97:c7:53:15:
                    64:23:96:5d:d5:ec:dc:05:ca:9b:c8:33:70:a9:3b:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A5:33:18:A2:4E:93:A1:B7:26:31:F2:05:4E:D1:8A:E0:40:3E:25
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/3130392e37322e3132342e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.72.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:66:9b:0c:aa:9c:af:8f:33:8d:07:b7:9c:b6:44:01:91:
         ed:43:42:11:33:43:d8:fb:ce:ed:9d:77:ae:88:04:fd:c0:83:
         27:e9:ac:d7:e4:ae:01:bd:9e:6e:dd:05:26:9a:89:06:63:66:
         11:30:a7:3a:19:d8:3f:ad:e5:a2:71:74:70:2b:61:af:d0:73:
         a3:ee:78:c7:b8:5d:ba:d4:27:b0:b3:db:f1:5d:50:fe:4f:5d:
         52:bb:09:13:b2:81:b8:11:2b:6d:84:88:90:7f:93:36:d4:36:
         6a:40:95:f9:09:f9:41:f9:88:93:da:7e:f2:9e:f4:65:fd:15:
         39:c9:9e:b0:05:0a:5a:56:59:38:5d:99:5b:1b:0e:57:3e:55:
         26:91:1c:0e:e7:ab:e8:45:ee:97:a8:fe:d0:32:a9:f1:65:f5:
         fd:c1:0c:7b:35:aa:de:c4:64:93:21:93:7f:c5:d2:eb:59:14:
         32:ae:67:b0:a3:fa:13:0c:dd:ea:dc:36:bf:59:21:5a:a5:85:
         77:25:d2:c9:bf:0d:a6:91:4e:c1:26:1a:a5:cd:a2:56:3f:cb:
         6d:a7:e4:9e:3e:71:48:69:56:74:fd:a8:9c:c1:5c:16:57:fc:
         1d:36:cc:f9:b3:29:c0:f8:5b:d6:4e:6a:11:de:a4:a9:37:9f:
         4e:f9:c9:a9
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUQcIrlBH1xV/rV8m4se1OzJlpDIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk3MkU4NjcxREVEQzQzRkU5MDhCNTQ4NTMxQzk2OUEw
NTFDRDM0QzAeFw0yNjA2MjYxMzU0MTFaFw0yNzA2MjUxMzU5MTFaMDMxMTAvBgNV
BAMTKEQ1QTUzMzE4QTI0RTkzQTFCNzI2MzFGMjA1NEVEMThBRTA0MDNFMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkDBwf89De4HPz2u4aNmhEyb7
KZeukekOmEKYq8SFguPG7Nqkz6SWgbzd1DAWxb5t0cadx9H2O7c/g5lsZi2bvGyI
kWCqWI4G8NuFtjNw/+PROzUVei0LercXhNYHpr5JeRdZD7djOPVIsMpGao0tsO7c
nFoFNmd9E1WA3ZoRQNH43QhjNYAnj6agEbbth940WRNt8NqUQnv0CUHfw/X4SxIT
3m9KEv56+eEUBEcjQRCtHi1Jg2LQSh9dykx4wUqvS65sGPvb6kaJ1Qh/unZxEgaJ
yskRlbjYzCMJk6xqFx6yejC3cqu8hZQul8dTFWQjll3V7NwFypvIM3CpO9WRAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU1aUzGKJOk6G3JjHyBU7RiuBAPiUwHwYDVR0j
BBgwFoAUyXLoZx3txD/pCLVIUxyWmgUc00wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGRkMTgxOGItOWZiZi00NDBjLWFhZWMtNDRhNGQxNTkwZjg3LTAvMC9DOTcyRTg2
NzFERURDNDNGRTkwOEI1NDg1MzFDOTY5QTA1MUNEMzRDLmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5LzYxNzA4YTZiLTZjM2EtNDBhMC1hMzAyLTU5NWVj
YzE3ODQ4Yy8yL0M5NzJFODY3MURFREM0M0ZFOTA4QjU0ODUzMUM5NjlBMDUxQ0Qz
NEMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9kZGQxODE4Yi05ZmJmLTQ0MGMtYWFl
Yy00NGE0ZDE1OTBmODctMC8wLzMxMzAzOTJlMzczMjJlMzEzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1IfDANBgkqhkiG
9w0BAQsFAAOCAQEAHdVmmwyqnK+PM40Ht5y2RAGR7UNCETND2PvO7Z13rogE/cCD
J+ms1+SuAb2ebt0FJpqJBmNmETCnOhnYP63lonF0cCthr9Bzo+54x7hdutQnsLPb
8V1Q/k9dUrsJE7KBuBErbYSIkH+TNtQ2akCV+Qn5QfmIk9p+8p70Zf0VOcmesAUK
WlZZOF2ZWxsOVz5VJpEcDuer6EXul6j+0DKp8WX1/cEMezWq3sRkkyGTf8XS61kU
Mq5nsKP6Ewzd6tw2v1khWqWFdyXSyb8NppFOwSYapc2iVj/Lbafknj5xSGlWdP2o
nMFcFlf8HTbM+bMpwPhb1k5qEd6kqTefTvnJqQ==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:35 2026 by rpki-client