Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e20343032323336.roa
File:                     38312e32322e3132392e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          v0HielX8qXuofSQdlSx05yskpFw2u16UVbyuD0cTD/0=
Subject key identifier:   8A:BF:F3:29:88:79:16:57:A4:34:A1:A5:E2:B4:12:DD:DA:F9:4D:8B
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       3C73F89CEA170717D95369AECD1B0D2BAE3DAF19
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:22:27 +0000
ROA not before:           Mon 06 Jul 2026 18:17:27 +0000
ROA not after:            Mon 05 Jul 2027 18:22:27 +0000
asID:                     402236
IP address blocks:        81.22.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 09:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:f8:9c:ea:17:07:17:d9:53:69:ae:cd:1b:0d:2b:ae:3d:af:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Jul  6 18:17:27 2026 GMT
            Not After : Jul  5 18:22:27 2027 GMT
        Subject: CN=8ABFF32988791657A434A1A5E2B412DDDAF94D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:16:40:cc:a5:0e:af:e7:75:bd:29:92:4c:
                    2f:17:57:14:a1:7a:4b:9f:83:6e:27:38:93:3f:5b:
                    61:e9:90:cf:bb:39:41:43:aa:a5:bd:ee:ae:49:20:
                    40:c6:e6:c5:b1:6f:f5:ec:4e:f5:9b:d6:34:a5:a7:
                    d0:28:b6:dd:9d:4b:7e:94:1e:04:bf:c5:0d:b7:71:
                    ad:d9:79:94:18:f9:b1:6a:38:0a:c2:69:95:a3:49:
                    56:e2:79:50:65:bc:f8:0c:16:b9:37:12:c1:2c:9b:
                    d4:2f:fe:51:db:e1:d1:24:c2:10:65:01:ae:13:27:
                    2b:71:ab:5d:14:60:b8:51:ce:9e:9b:77:79:1c:50:
                    2e:c2:fd:c3:3e:d1:57:ad:35:e7:3e:4a:62:0f:f8:
                    0f:37:f4:b0:fe:87:72:22:a6:37:be:f8:3b:58:c1:
                    23:08:52:00:13:13:58:34:9f:f3:34:c9:25:77:9c:
                    2e:b9:1a:9f:43:4b:de:f7:6e:c5:cb:8e:74:3e:cc:
                    79:68:8b:a4:d8:99:22:2b:e2:26:61:9d:30:bf:84:
                    bb:3a:9c:95:1c:9a:ee:44:bc:7c:3b:0a:7a:2c:91:
                    ff:70:6f:12:b6:ce:96:e8:b9:d5:4e:3e:94:2b:1b:
                    c4:15:f5:24:2b:dc:68:b6:ec:52:c0:93:9a:36:a9:
                    3e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BF:F3:29:88:79:16:57:A4:34:A1:A5:E2:B4:12:DD:DA:F9:4D:8B
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:f3:83:86:c2:ec:a7:fa:19:b5:ff:da:b7:8a:ad:29:4f:
         97:74:6b:d1:40:35:d2:8a:e7:e4:2b:8b:6a:e5:8e:f9:b0:19:
         c7:82:85:10:f5:c6:ae:30:4f:79:57:4a:d5:0e:85:bc:84:c6:
         c7:e8:5a:c6:bd:e4:eb:1c:31:e8:46:0f:22:6b:88:e4:06:cf:
         3e:94:1e:71:d7:81:3b:f5:92:0e:0c:0b:d0:6a:a6:7c:fc:a0:
         dc:05:97:97:f2:ca:f6:ef:a9:7f:b6:49:8e:2d:74:2a:13:b6:
         af:cc:96:60:07:be:ec:ca:53:d6:e1:69:28:c0:c6:12:66:59:
         7a:c0:93:38:f0:7d:0a:3f:b6:c6:3d:9a:99:6c:d3:b3:71:cb:
         d2:fb:86:bf:94:ae:71:28:04:59:04:cd:c5:09:14:fe:cb:16:
         df:4d:00:b0:9f:28:15:89:c8:21:eb:f4:14:30:45:21:d2:3c:
         ec:91:af:fe:94:6a:1b:33:ea:3a:6a:7c:66:70:3b:73:c8:18:
         52:02:1a:80:d4:91:c1:76:eb:99:65:eb:4f:88:85:f3:0e:61:
         f1:ba:fb:30:e3:05:48:b4:66:d6:1f:0c:a3:ed:ec:67:54:8b:
         96:a8:2f:26:1e:c4:6a:1e:77:0f:c1:c8:dd:62:dc:6a:d4:6c:
         cf:ee:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client