Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134312e302f32342d3234203d3e2036303739.roa
File:                     38312e32322e3134312e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          Hnth0eBynqRNoQwnoL3AFAYdSxzdx8ruEmdCwuZxzGw=
Subject key identifier:   6C:A9:38:4A:5E:5E:A7:67:4B:EB:4E:10:71:66:AC:90:FF:7A:28:08
Certificate issuer:       /CN=C972E8671DEDC43FE908B548531C969A051CD34C
Certificate serial:       1113CE963CA1D608215F59C384930CA49F867BD1
Authority key identifier: C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134312e302f32342d3234203d3e2036303739.roa
Signing time:             Sat 14 Mar 2026 11:24:03 +0000
ROA not before:           Sat 14 Mar 2026 11:19:03 +0000
ROA not after:            Sat 13 Mar 2027 11:24:03 +0000
asID:                     6079
IP address blocks:        81.22.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl
                          rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:13:ce:96:3c:a1:d6:08:21:5f:59:c3:84:93:0c:a4:9f:86:7b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C972E8671DEDC43FE908B548531C969A051CD34C
        Validity
            Not Before: Mar 14 11:19:03 2026 GMT
            Not After : Mar 13 11:24:03 2027 GMT
        Subject: CN=6CA9384A5E5EA7674BEB4E107166AC90FF7A2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:2f:f8:ad:ae:eb:1a:c3:ec:6c:b0:73:74:
                    bd:d4:d1:5d:be:61:67:e9:b5:06:87:e0:f8:0e:2c:
                    cb:0d:18:ff:e1:bb:56:ab:43:51:1a:f0:db:a4:0b:
                    5d:d8:e7:63:24:2f:17:23:92:d7:8c:89:d9:bb:c6:
                    62:88:a7:f4:7c:ff:45:7c:a8:4b:30:69:72:cc:43:
                    a1:70:40:bf:75:41:d6:ed:58:35:83:fd:19:e2:77:
                    b1:2a:99:fa:14:de:78:b5:18:a7:16:c6:a5:19:78:
                    32:e5:a6:56:ea:e5:c8:08:2f:fa:61:a8:fc:7e:89:
                    d8:f3:a8:b5:d2:d6:27:86:de:f0:bf:6d:7c:2c:d5:
                    99:de:ed:83:98:e2:d4:44:d7:b0:f0:6f:09:03:40:
                    de:40:dd:66:be:56:8e:a0:e0:8b:01:29:6b:17:a3:
                    ce:4d:1c:67:6e:5b:eb:19:1c:5b:0b:0e:95:96:49:
                    91:90:70:90:ad:74:ee:c8:f4:d1:8c:f0:8a:f5:fa:
                    5e:16:fd:7f:e9:b7:5b:10:1f:aa:63:db:e2:29:2a:
                    4c:42:f0:a5:16:8a:19:4d:a0:61:e1:77:0f:87:2b:
                    6a:2c:43:cf:b0:ea:16:a7:42:2a:e2:20:a5:28:52:
                    82:b3:f4:1b:f4:d2:92:74:c7:ce:0c:08:c2:b8:4e:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A9:38:4A:5E:5E:A7:67:4B:EB:4E:10:71:66:AC:90:FF:7A:28:08
            X509v3 Authority Key Identifier:
                keyid:C9:72:E8:67:1D:ED:C4:3F:E9:08:B5:48:53:1C:96:9A:05:1C:D3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/C972E8671DEDC43FE908B548531C969A051CD34C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/C972E8671DEDC43FE908B548531C969A051CD34C.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/ddd1818b-9fbf-440c-aaec-44a4d1590f87-0/0/38312e32322e3134312e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:2f:6d:1a:29:a1:c7:63:db:3a:bc:bd:b2:61:76:9d:a8:
         27:d9:e8:91:3a:c9:d0:39:68:7a:e2:5e:22:9e:f6:74:56:6a:
         e9:02:38:52:8c:ab:13:78:8f:c5:17:a3:b6:7a:27:cb:29:95:
         6e:70:36:41:46:43:4b:7f:a0:d1:1c:31:2b:f2:91:a3:34:c9:
         18:5b:10:6b:51:28:32:99:40:1a:c7:ab:cb:ea:e5:d5:27:1a:
         e0:55:a2:9e:94:ec:4a:b5:33:51:66:30:91:8f:78:c2:56:15:
         39:54:49:49:5e:ab:b0:1d:f6:1e:71:f3:0f:a7:12:03:c9:13:
         84:0e:21:69:a6:c1:f3:57:92:44:34:6d:29:f4:c0:5c:c3:9c:
         01:2d:34:a6:0d:2c:b3:f8:c0:20:b0:cb:c6:64:92:35:b3:37:
         20:0a:97:0b:2d:05:0a:2e:e4:58:4a:83:b0:0a:72:4c:82:b1:
         b7:00:4f:ab:57:b3:7b:ab:fb:f2:d9:25:5c:ac:b0:54:e8:27:
         02:8e:2c:4f:fc:cf:9d:b8:18:6b:8f:97:61:f6:a4:c5:2c:7f:
         fa:f3:a1:8b:7a:3e:c7:64:b0:66:fd:41:44:0c:27:c9:fc:9e:
         65:d7:8e:d5:92:35:4a:4c:04:50:41:9c:05:e7:7d:ce:bd:77:
         b6:bf:43:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:36 2026 by rpki-client