Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
File:                     38312e32322e3132392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          8M8t69jt9R6KTH9Js3G5lmSnDyOS96qlrh8GuVnQcGg=
Subject key identifier:   A1:74:E9:09:9A:E6:A7:B4:DC:60:C7:5E:D0:D9:A4:AC:58:46:F5:4F
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       4451D0ED73818B657129C5EC36FDF8D22CB1E7AD
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 06 Jul 2026 18:22:28 +0000
ROA not before:           Mon 06 Jul 2026 18:17:28 +0000
ROA not after:            Mon 05 Jul 2027 18:22:28 +0000
asID:                     6079
IP address blocks:        81.22.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 09:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:51:d0:ed:73:81:8b:65:71:29:c5:ec:36:fd:f8:d2:2c:b1:e7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Jul  6 18:17:28 2026 GMT
            Not After : Jul  5 18:22:28 2027 GMT
        Subject: CN=A174E9099AE6A7B4DC60C75ED0D9A4AC5846F54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:af:dc:90:59:50:7f:8d:12:70:7f:de:0a:
                    85:03:37:9f:1f:89:13:ef:7f:f0:bd:cd:46:ff:39:
                    fc:5a:94:9d:ae:93:6f:55:85:62:29:a3:1f:fa:10:
                    ea:f2:c1:4a:3c:fa:7b:5c:e8:15:52:fa:4e:cc:7f:
                    b1:59:60:93:93:fe:9f:38:59:b5:3f:18:7a:03:12:
                    0e:32:11:9b:8a:35:29:2e:52:96:28:bf:ea:98:ae:
                    22:0d:22:2a:4e:15:fc:6b:98:23:a6:8d:8b:a4:05:
                    26:d8:9c:67:7a:d4:17:46:7a:1d:0d:f1:6b:50:78:
                    66:58:f7:98:f8:3b:b9:df:fe:2f:21:cc:08:db:04:
                    ed:ce:c6:ac:29:4c:47:5d:ec:bf:17:54:2e:3f:4b:
                    43:6c:a1:68:db:b8:7b:48:97:7e:b1:13:4e:5b:27:
                    3d:f0:23:a9:88:ad:80:aa:dc:61:cd:d7:3f:8d:0f:
                    50:ac:9a:6a:0e:97:61:28:11:70:ed:d4:a4:69:aa:
                    60:d8:4b:9f:77:e4:85:45:a5:42:68:46:0e:58:e8:
                    0a:4a:7d:dd:71:fd:d2:33:c3:a1:56:bf:19:62:00:
                    d7:1b:e8:06:b0:e5:0e:42:2e:d3:01:75:17:ed:58:
                    5d:a2:33:39:96:47:e0:3f:66:db:60:94:b6:f7:1d:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:74:E9:09:9A:E6:A7:B4:DC:60:C7:5E:D0:D9:A4:AC:58:46:F5:4F
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3132392e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:12:c0:5c:bd:29:80:e8:9d:08:c7:1b:a3:51:53:d2:59:
         d4:33:05:7b:d9:24:eb:ea:74:44:7d:35:5a:0f:07:68:28:2d:
         b3:30:69:f3:f9:39:79:03:26:47:9f:98:4d:c5:bd:ed:12:ea:
         cf:e0:8f:d2:1e:61:f1:8c:21:5e:85:e1:14:ff:87:cc:39:30:
         2d:2b:47:7b:3d:f5:41:32:5b:c5:7d:b2:a0:39:96:95:a0:4c:
         6a:53:6e:32:bd:69:9a:ae:79:64:6a:fb:74:f8:98:08:ce:59:
         46:66:86:d1:06:a1:b7:d5:e7:6c:bd:06:a2:df:a2:3e:9b:2c:
         b6:02:a0:e0:00:b1:0e:50:9a:8f:29:12:61:f3:d7:96:29:1e:
         7b:7a:59:c3:b8:05:76:9d:d2:ea:ba:e3:47:83:fc:9d:f5:30:
         8f:bf:eb:54:f4:04:7e:3e:ac:9f:6e:0a:06:66:00:89:09:a4:
         66:4a:bb:d0:1e:db:b7:ea:84:39:39:f5:f0:5c:1f:c8:08:5b:
         89:dc:96:9a:e2:38:fc:ed:12:05:7c:e1:19:70:a6:d0:0e:3c:
         44:e6:b1:89:63:bf:de:6d:7f:4d:9a:81:7a:c8:93:31:5a:ff:
         9f:4e:e4:a9:08:40:73:13:ec:29:dd:b4:fc:74:20:1a:24:8a:
         f5:8a:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:19:53 2026 by rpki-client