Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20383334.roa
File:                     38312e32322e3133362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Lyon8kmvO/zesQ9Y03SubriC5OGjw1CkUoaI6G4OwSs=
Subject key identifier:   79:2B:2A:3F:5A:DC:0C:3B:9D:9D:FD:7B:CF:C6:E2:6C:C3:E9:2C:43
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       0D2E60AEDD394220364158D833CF6F98C57E37C2
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20383334.roa
Signing time:             Tue 12 May 2026 14:34:31 +0000
ROA not before:           Tue 12 May 2026 14:29:31 +0000
ROA not after:            Tue 11 May 2027 14:34:31 +0000
asID:                     834
IP address blocks:        81.22.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2e:60:ae:dd:39:42:20:36:41:58:d8:33:cf:6f:98:c5:7e:37:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: May 12 14:29:31 2026 GMT
            Not After : May 11 14:34:31 2027 GMT
        Subject: CN=792B2A3F5ADC0C3B9D9DFD7BCFC6E26CC3E92C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a4:eb:81:0f:ce:88:5e:93:9f:2d:41:31:5a:
                    38:cf:be:f2:f6:f7:81:d7:b7:48:fc:b7:17:32:aa:
                    eb:bc:b9:53:e9:1e:10:93:46:f3:8f:69:f7:31:c6:
                    05:11:1b:2a:82:ad:88:66:61:67:76:f6:81:d4:31:
                    b5:60:b6:a8:95:be:cb:a9:22:69:b3:a8:c6:17:93:
                    79:7a:81:6c:88:bb:c0:88:a9:ca:09:3e:85:7a:e2:
                    1d:e6:ee:84:39:49:e8:7a:ff:fb:a0:c5:78:9f:91:
                    93:27:bb:03:6d:34:60:26:c8:6b:cd:69:c4:6e:d8:
                    86:8c:3e:63:9b:5b:4f:b0:51:94:d6:94:d9:1f:f6:
                    5a:ac:87:c5:13:57:9a:36:c4:f8:79:6d:cb:c6:5c:
                    d5:ae:81:e9:e9:ed:1d:9f:aa:4f:71:03:a0:2a:19:
                    e1:01:e7:95:d7:32:53:2b:67:96:b7:30:89:35:f8:
                    9c:f7:d5:70:09:c4:26:d7:8d:0b:67:4e:9b:89:2a:
                    23:7f:76:b9:5f:cf:f2:14:96:25:a3:3e:6a:30:9a:
                    fa:ed:ae:11:be:7a:f7:e0:39:21:41:05:27:14:7d:
                    99:db:71:c7:7f:6b:20:94:b1:82:9d:90:19:b5:08:
                    24:df:3e:ba:a1:7f:30:91:62:aa:7f:3f:90:27:f4:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2B:2A:3F:5A:DC:0C:3B:9D:9D:FD:7B:CF:C6:E2:6C:C3:E9:2C:43
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3133362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:30:57:f9:51:c7:1a:86:7f:fe:f1:bb:aa:cd:4f:c1:da:
         a8:23:8d:0b:65:b5:46:a7:44:5c:7d:8a:d4:d9:dc:d4:07:e7:
         9b:6d:60:6e:f8:09:e6:d7:b4:5e:c5:fc:5c:e7:91:bd:e0:25:
         54:7a:04:a1:a0:a5:26:9b:dd:7f:13:e2:c8:83:c5:f7:09:93:
         46:ed:31:ab:ee:ea:ad:2d:db:b2:35:fa:73:1b:43:a9:42:17:
         88:e2:a7:0a:ae:98:f3:33:3c:f9:66:12:11:81:20:61:50:58:
         32:73:b6:c7:3c:27:45:b8:42:34:4e:7c:37:cd:1b:b7:e8:28:
         3b:5e:28:1c:2f:d1:89:cd:89:94:1e:99:4a:1f:7e:fb:a3:8d:
         98:32:b0:1b:a2:08:58:ed:4f:0e:7b:90:5c:60:f4:cb:43:f5:
         87:37:51:3c:79:09:24:68:f8:10:0b:e6:50:1c:11:64:a5:8e:
         d0:ca:4b:d1:d5:a8:fa:2b:ca:8c:47:d3:a8:ac:b9:17:dc:16:
         e2:bb:7b:65:aa:ea:e2:c8:41:b0:4b:31:fb:e0:94:6a:77:1e:
         0a:cb:b2:da:f0:e4:98:6e:c7:14:94:a7:e9:45:ca:29:68:16:
         05:ec:56:24:1d:5e:96:f3:d4:80:d5:10:19:58:de:6f:f3:75:
         2c:65:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:41 2026 by rpki-client