Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130352e302f32342d3234203d3e203432383331.roa
File:                     3136392e34302e3130352e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          kihXwb1kBExx1tOaY61zM94Xe8jYlQA2nD2GXvWFXtc=
Subject key identifier:   2D:7D:BB:5E:38:6E:E4:44:97:4E:9D:21:FD:47:B4:7F:3E:CF:D5:2C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       52ED3DA3B193787BA3679240F4E0160AEB20606B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130352e302f32342d3234203d3e203432383331.roa
Signing time:             Thu 12 Feb 2026 01:05:05 +0000
ROA not before:           Thu 12 Feb 2026 01:00:05 +0000
ROA not after:            Thu 11 Feb 2027 01:05:05 +0000
asID:                     42831
IP address blocks:        169.40.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ed:3d:a3:b1:93:78:7b:a3:67:92:40:f4:e0:16:0a:eb:20:60:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:05 2026 GMT
            Not After : Feb 11 01:05:05 2027 GMT
        Subject: CN=2D7DBB5E386EE444974E9D21FD47B47F3ECFD52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:ac:4b:50:e5:c4:2f:de:40:be:f7:e3:58:
                    c6:3f:41:31:6d:77:60:08:17:d7:14:85:bf:81:09:
                    36:73:37:94:f5:09:94:1c:da:17:ec:8c:ed:fb:87:
                    1d:62:bf:7e:5c:09:c7:b5:05:40:ba:ec:fd:ce:b1:
                    5f:f2:a9:c6:43:36:dc:07:8a:06:2e:26:b9:91:df:
                    da:55:f9:b4:40:12:d7:4e:1a:73:29:be:7a:b8:94:
                    58:49:1f:70:1f:b1:dd:d9:2e:79:fe:2b:82:2b:cf:
                    da:95:3c:c2:33:04:f5:23:35:d0:fb:e3:6c:c3:20:
                    90:b3:86:54:0b:e1:32:88:76:68:6a:f1:4e:14:22:
                    dc:5e:4e:6a:d8:bb:40:87:91:1b:cd:42:74:cf:39:
                    b7:cc:b7:de:67:6a:c8:a8:97:31:b0:08:a9:17:e0:
                    58:da:84:ad:c3:d3:f9:8b:f7:38:2b:8f:4c:c7:a6:
                    cf:7b:4e:2b:0d:ae:36:eb:b8:ae:fd:3c:6c:de:f1:
                    1d:d9:79:e9:4b:d0:23:40:4a:d4:c5:b3:59:e3:98:
                    95:04:09:e1:dc:db:86:32:e7:cc:a2:b3:4b:b5:e4:
                    ba:5c:9c:18:74:73:3b:ef:fd:43:df:3e:71:04:63:
                    d7:0d:8c:62:1c:96:57:36:0f:50:2f:57:3b:94:13:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:BB:5E:38:6E:E4:44:97:4E:9D:21:FD:47:B4:7F:3E:CF:D5:2C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3130352e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:3a:26:c7:7e:b1:f4:a6:7a:b2:d6:0f:bc:77:01:b5:48:
         cf:7c:48:3a:0f:86:14:59:12:54:69:da:cc:15:f6:33:fb:53:
         91:12:bd:1b:b4:68:92:b5:6f:05:2e:03:e7:f3:61:2b:a6:56:
         43:f0:50:a9:a4:39:9c:ba:6e:f9:8c:09:77:80:64:90:c0:25:
         ef:b8:61:c9:ce:54:52:c0:63:8c:61:df:5e:01:1d:36:f9:37:
         8d:80:a1:2f:80:25:13:27:77:5d:6d:3d:f2:4c:95:7c:8e:50:
         fb:23:18:5d:0a:61:72:1f:ab:6d:67:92:10:be:9f:88:1b:80:
         e4:24:d7:40:e0:f1:82:d1:63:66:73:ef:fa:c3:30:e4:3e:12:
         11:ec:92:59:d4:46:77:79:90:e4:7c:58:ee:e8:5b:ea:9f:28:
         c6:9e:1c:c2:3c:0b:dc:d8:a0:9d:95:0b:aa:92:db:ca:66:fd:
         77:1b:25:1c:17:9a:09:33:ff:48:ba:b7:cd:cb:51:09:39:cd:
         2c:99:6b:36:c9:8e:fe:e4:d7:0c:20:a6:06:f7:46:63:fc:f0:
         c3:24:1a:bb:bd:dc:b9:9b:da:df:9b:9d:9d:43:78:75:7b:6e:
         ac:59:92:ac:15:f4:02:36:9d:0b:95:95:8a:7b:6f:e3:d9:3f:
         17:58:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:33 2026 by rpki-client