Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e20333938343635.roa
File:                     38312e32322e3133352e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          Si9CUGeYU1YEsur2+bt9h4OKV8mVgoMgkgd3dqq9m78=
Subject key identifier:   EF:B7:C8:AA:AE:A8:9C:4F:C1:7D:3C:4D:BB:01:E7:78:64:19:5C:16
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       1EB0C0CDB32EB9E90EF3260CF10CDE5397DF6DDF
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e20333938343635.roa
Signing time:             Sat 14 Mar 2026 11:23:52 +0000
ROA not before:           Sat 14 Mar 2026 11:18:52 +0000
ROA not after:            Sat 13 Mar 2027 11:23:52 +0000
asID:                     398465
IP address blocks:        81.22.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b0:c0:cd:b3:2e:b9:e9:0e:f3:26:0c:f1:0c:de:53:97:df:6d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Mar 14 11:18:52 2026 GMT
            Not After : Mar 13 11:23:52 2027 GMT
        Subject: CN=EFB7C8AAAEA89C4FC17D3C4DBB01E77864195C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:0e:3d:e5:32:75:95:e5:f7:45:50:95:98:
                    93:fc:40:72:58:1c:53:2a:f1:15:33:a7:19:5f:29:
                    86:b7:52:b6:ed:16:e7:73:7a:af:16:0b:62:e0:23:
                    19:67:42:a5:e7:97:f0:9a:90:ae:6b:45:46:2e:cc:
                    25:c0:c7:4e:9e:d5:77:7e:78:ee:3f:11:c6:23:23:
                    ca:52:d3:2f:5b:8e:b8:67:a7:6e:f5:dd:b8:ef:6c:
                    ee:1e:b3:fd:e9:d4:f5:9c:03:7d:cf:da:b3:1f:ba:
                    3c:f1:63:cf:80:8e:30:fb:5d:55:df:c6:c4:8f:dc:
                    b5:51:53:b8:6f:ea:c3:48:30:5b:b6:a0:6d:5b:f4:
                    cf:4d:99:4f:7d:ee:66:7f:ac:b2:71:f1:f3:76:d2:
                    6a:8e:70:67:a1:f2:6e:d0:d7:2e:41:78:f5:1b:22:
                    09:f4:92:4f:b2:79:51:9c:76:15:f9:78:94:46:53:
                    b4:41:e0:25:3c:9b:52:a4:13:25:1c:72:87:b4:3d:
                    c4:1a:a0:f3:a6:6a:75:68:0b:fa:b4:56:42:47:a6:
                    59:58:e4:0c:a3:00:1d:83:65:f2:27:60:7d:9f:20:
                    9d:3c:60:79:05:5d:ff:73:24:af:b0:a8:31:b5:2e:
                    c6:70:bb:75:2a:86:fa:45:c8:02:cb:7b:7b:02:72:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B7:C8:AA:AE:A8:9C:4F:C1:7D:3C:4D:BB:01:E7:78:64:19:5C:16
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133352e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b7:35:c1:d5:af:5f:65:b9:b1:2e:d5:55:ee:ff:7f:fe:d0:
         02:7e:f5:b1:f8:66:c4:f4:9d:e1:eb:7f:96:06:7e:cf:6b:fe:
         a8:c0:41:03:12:ca:e9:bd:5b:b2:41:fb:6b:46:6d:a3:c1:fc:
         72:bc:60:e4:15:cc:f0:8d:2f:62:21:c7:27:1f:c4:d7:63:fc:
         01:b5:0d:33:46:09:2f:34:e8:b7:3e:2d:75:ed:bd:28:26:2e:
         02:4f:ad:54:16:85:b8:2c:f6:62:c3:68:da:e7:de:fc:ac:d8:
         e9:ce:4b:f5:42:24:83:d8:9a:bb:4b:e2:82:49:76:94:f6:24:
         72:12:09:73:22:f9:a1:a6:38:43:b9:55:4b:d2:77:78:41:b2:
         df:b9:61:91:00:e4:b6:47:d8:2b:83:21:cf:e4:84:9e:a9:9d:
         03:86:c6:9d:ab:fe:fd:e0:e1:7b:b1:01:e3:05:27:f6:2c:09:
         3c:04:7b:32:70:d5:80:91:72:85:03:d0:2b:44:36:c6:bb:d4:
         4e:70:bc:0a:56:d8:03:a0:f9:66:30:33:34:89:28:cb:42:f1:
         ec:25:ca:df:9d:0f:30:e5:fc:a8:27:61:d9:79:6c:48:a9:4a:
         4b:98:c2:10:02:6d:26:f5:33:60:67:4b:b0:8e:8f:75:47:8c:
         0c:2c:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:13:44 2026 by rpki-client