Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20323134343332.roa
File:                     38312e32322e3133362e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier:          G/Eal+ZsmR0BAxIQOz5ZTZq4eg/QOo91lRVf8Z4d8Ec=
Subject key identifier:   F6:6E:B0:02:84:0A:11:48:A0:5B:33:09:56:F6:92:72:20:EE:82:D9
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       1BB094164D990D9D2951C8E81114A5C881E91BBA
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20323134343332.roa
Signing time:             Sun 24 May 2026 16:23:53 +0000
ROA not before:           Sun 24 May 2026 16:18:53 +0000
ROA not after:            Sun 23 May 2027 16:23:53 +0000
asID:                     214432
IP address blocks:        81.22.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 05:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b0:94:16:4d:99:0d:9d:29:51:c8:e8:11:14:a5:c8:81:e9:1b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: May 24 16:18:53 2026 GMT
            Not After : May 23 16:23:53 2027 GMT
        Subject: CN=F66EB002840A1148A05B330956F6927220EE82D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:34:6b:63:6e:07:a8:f2:a5:b5:33:9f:80:
                    2e:1f:ed:24:10:de:7a:1f:b0:33:b9:92:70:60:65:
                    00:47:14:65:44:7d:5a:34:75:f3:e3:30:ec:63:1a:
                    e8:a0:aa:29:9d:fe:34:ce:5e:bf:a0:af:61:c8:20:
                    ca:78:65:bb:87:a4:50:d1:b2:75:a3:b5:8b:8e:4f:
                    fc:be:d4:0b:ae:36:98:a5:9f:c7:fb:a5:1b:c2:c4:
                    d9:1b:c6:33:4b:75:38:bc:d4:bc:e8:57:56:41:e8:
                    49:62:70:71:98:5e:26:e3:8f:22:c5:84:5d:81:4f:
                    e2:07:92:57:7a:35:48:d0:7b:c3:5f:40:c4:c5:c9:
                    83:60:09:34:9f:26:6f:a3:57:a4:d7:81:1b:af:d5:
                    58:d4:53:39:e2:b9:17:de:90:5c:d7:8e:36:24:47:
                    45:62:98:4a:9c:54:1c:56:cb:7b:e5:0f:f8:00:4b:
                    d2:08:aa:ee:6b:29:27:59:b7:38:d3:09:74:dc:9a:
                    f7:77:e9:bb:91:57:f1:e1:a0:35:22:20:e3:72:70:
                    3c:e8:c8:c2:fe:17:6d:1c:73:18:b6:2a:40:22:0a:
                    e5:f3:1e:77:dc:fd:69:62:96:1f:f3:d3:bb:70:f7:
                    c2:cf:d7:65:b7:ca:60:cf:26:61:3d:eb:a2:f4:b2:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6E:B0:02:84:0A:11:48:A0:5B:33:09:56:F6:92:72:20:EE:82:D9
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20323134343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:dd:e6:03:0e:7d:29:c3:76:8d:39:61:80:4c:79:97:d2:00:
         05:b6:33:14:83:ca:27:b0:99:d3:81:27:22:11:11:d3:84:39:
         a7:15:73:8e:77:ed:02:c2:bd:af:1d:ff:9c:41:1b:e5:4c:fd:
         42:b5:7f:d9:aa:9a:3a:3d:e3:3f:3a:fe:c6:76:d1:18:19:f7:
         26:43:6b:7a:63:96:75:e4:e4:2f:73:2b:f4:4d:2c:83:c1:2a:
         63:8c:0f:df:93:3b:7c:8b:f8:26:27:d9:83:63:e8:b2:4b:c3:
         0b:de:f6:7d:5f:1b:e7:4f:7e:cc:8a:dc:e8:8b:d2:be:e2:72:
         60:02:80:d9:53:26:b7:41:15:65:43:ed:c1:f0:83:d3:bf:32:
         73:8e:77:6b:1d:6f:d8:02:cf:ad:a7:79:f9:fe:1d:50:3c:1d:
         33:68:bf:92:59:22:4b:39:5e:cf:0b:bc:3b:69:cb:a5:90:44:
         82:65:35:e6:3b:57:30:69:9f:87:9c:29:27:3b:23:4f:6d:73:
         91:96:6c:8a:06:b1:36:c8:19:7b:62:3a:4f:6e:78:63:43:54:
         bf:57:47:ac:c6:9f:da:14:b7:f3:71:71:c1:62:f3:92:bf:e3:
         7e:55:d6:15:13:70:d6:46:90:fd:e0:ed:9a:22:65:d4:39:c5:
         9b:0d:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:28 2026 by rpki-client