Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131352e302f32342d3234203d3e203439363038.roa
File:                     3136392e34302e3131352e302f32342d3234203d3e203439363038.roa (raw, json)
Hash identifier:          yWUeZdJRWL7HoGbHGIXGSpQ9tY5T5HMt2I5hbonrURI=
Subject key identifier:   21:32:24:BA:24:8B:83:9F:FD:1F:57:22:F7:AB:7C:9C:2C:DF:F6:17
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7F0FCFABA907D8E82C7B99B050EDE558CF6B2B69
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131352e302f32342d3234203d3e203439363038.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     49608
IP address blocks:        169.40.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0f:cf:ab:a9:07:d8:e8:2c:7b:99:b0:50:ed:e5:58:cf:6b:2b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=213224BA248B839FFD1F5722F7AB7C9C2CDFF617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:84:77:a9:f6:cc:42:ac:6f:ee:db:ad:c4:
                    5b:57:57:cb:79:2b:c6:09:bf:99:fa:c8:57:42:dd:
                    88:1e:4d:0e:74:d4:34:b4:ae:a3:36:3d:9d:99:98:
                    a4:01:fb:e9:fc:65:39:36:46:f8:ae:73:56:d6:5f:
                    9f:8c:42:6f:91:b5:94:79:92:ff:35:47:fd:79:f2:
                    85:c8:04:34:a2:c4:f0:13:4a:52:bb:ac:78:9e:8b:
                    c4:bb:2c:f0:bd:0c:0a:77:34:6e:7d:17:f9:3b:e6:
                    ab:1f:fc:4c:15:4b:be:6c:4d:86:73:ff:2d:72:91:
                    e2:27:85:bb:d7:08:19:dd:b2:a2:f5:04:7e:a4:2c:
                    ed:31:a9:f0:77:0f:2f:98:0a:0b:b4:e2:75:42:4a:
                    ef:5a:c6:ac:21:39:62:df:8c:46:e9:5d:1f:2c:55:
                    c7:d3:95:46:3f:cd:5c:0d:a9:4b:1e:db:e1:21:23:
                    8b:d4:b2:e2:51:5c:7a:f9:35:6e:23:94:84:b4:a4:
                    2f:2f:ef:ca:e8:19:0d:2d:72:99:ee:d1:1e:f4:63:
                    e9:1e:8c:ca:35:eb:f3:3f:ea:4e:2b:35:3b:96:df:
                    74:b7:72:d8:05:78:c2:a8:cc:54:9e:5a:a0:92:c9:
                    9f:d2:99:ad:2e:92:61:5b:00:a1:c4:fb:bd:7b:f2:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:32:24:BA:24:8B:83:9F:FD:1F:57:22:F7:AB:7C:9C:2C:DF:F6:17
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131352e302f32342d3234203d3e203439363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:21:3c:e1:36:fb:1c:de:f5:5d:7a:d7:fe:25:34:dc:5c:8a:
         bb:db:14:35:cb:03:58:3b:a2:e3:91:62:42:61:50:3a:81:32:
         a7:46:a7:b9:4e:bb:6e:a8:09:40:1a:e7:95:16:7d:44:21:84:
         e6:a4:63:6b:86:a0:2d:b4:8c:28:b3:28:49:cd:91:61:ab:36:
         9f:19:69:15:94:45:c9:fa:35:cd:88:09:fd:2b:3b:c4:a9:10:
         87:48:15:78:81:07:81:92:99:cf:c7:de:08:6d:ef:b3:f1:c6:
         0a:ac:9f:ac:01:cd:f1:0a:09:a6:38:2d:16:7a:e4:ca:fe:1b:
         d8:cb:70:aa:cc:3d:2c:eb:75:37:84:59:76:37:21:7f:ed:2a:
         0b:f2:5b:6e:ad:b7:29:6c:90:09:7d:b0:25:ab:24:0b:26:97:
         f6:ac:7a:dd:7f:22:87:89:6f:80:9e:4b:c8:d3:34:ff:10:2a:
         b5:f5:83:d7:6d:27:a9:04:76:5c:95:71:27:b7:81:4b:9e:85:
         98:a7:08:c8:45:0e:3b:84:c8:26:96:f5:62:82:0d:48:e9:c0:
         1a:7c:eb:9e:14:3e:d2:a3:cb:84:ab:5d:1f:92:01:b3:57:c1:
         c7:20:6e:e6:a7:39:90:f1:5d:a3:2d:cc:4d:c5:a9:8a:cb:1b:
         ae:50:44:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:21 2026 by rpki-client