Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132322e302f32332d3234203d3e20383334.roa
File:                     3136392e34302e3132322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          1QKO9L9+2vUnxOqC3/wYDb6hjhImt+C5hk3nk3zMTLM=
Subject key identifier:   08:00:69:0F:6E:10:5D:F6:59:73:6E:27:86:DF:F6:C2:64:D6:7B:C6
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4058D46486691203934E6B021D77D795FB6E92F4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132322e302f32332d3234203d3e20383334.roa
Signing time:             Mon 16 Feb 2026 11:36:04 +0000
ROA not before:           Mon 16 Feb 2026 11:31:04 +0000
ROA not after:            Mon 15 Feb 2027 11:36:04 +0000
asID:                     834
IP address blocks:        169.40.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:58:d4:64:86:69:12:03:93:4e:6b:02:1d:77:d7:95:fb:6e:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 16 11:31:04 2026 GMT
            Not After : Feb 15 11:36:04 2027 GMT
        Subject: CN=0800690F6E105DF659736E2786DFF6C264D67BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:ee:05:fb:d8:34:51:ef:71:63:86:ec:b9:
                    af:e3:b9:c7:0c:f6:51:a1:4a:67:b4:ba:d1:56:1e:
                    09:1b:e3:be:e4:e1:18:ad:54:15:a3:4e:9f:80:ea:
                    b9:05:62:f5:ad:da:b3:ed:0a:2e:ef:15:fa:08:ff:
                    b0:a9:ff:9e:e4:f1:cb:de:81:f9:5a:00:5a:7b:28:
                    83:d0:a2:3f:8d:1e:ff:35:1e:30:15:d1:7d:44:fa:
                    dd:dd:b1:05:18:94:b8:89:5e:9c:4e:01:51:5c:15:
                    c4:b0:80:46:6c:09:3f:1f:4c:2b:8d:c8:35:23:4d:
                    c8:6d:3b:b4:17:49:2f:1b:50:49:f9:99:15:0c:f4:
                    07:f7:86:a3:c7:df:6f:9e:04:50:ec:66:58:0b:d9:
                    74:e2:60:e8:00:8a:18:6c:02:b5:32:b7:16:a0:21:
                    e8:93:5b:1d:de:f5:f6:9f:37:d9:2c:b0:38:16:fd:
                    71:01:ac:f1:10:39:87:c6:d8:77:ff:07:7b:77:1c:
                    9e:9d:ac:e2:29:bf:40:6a:7a:1c:23:63:de:78:43:
                    ff:88:5c:51:2f:14:4c:c0:48:c4:5c:ba:5b:a3:a8:
                    76:47:35:e1:78:03:b4:dd:a5:bd:26:ce:b3:6f:8f:
                    88:38:ad:f1:59:c9:69:d6:84:db:6d:b3:7b:09:17:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:00:69:0F:6E:10:5D:F6:59:73:6E:27:86:DF:F6:C2:64:D6:7B:C6
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:ef:fd:1c:82:a9:b7:35:50:ee:b3:22:39:54:e8:e4:89:
         59:0d:21:dd:46:ef:f7:ae:ea:7e:a0:d1:6d:d2:87:9f:37:d7:
         49:91:e6:5a:63:ac:6b:0f:e1:a4:c1:d6:cb:7b:74:28:5d:06:
         00:22:57:2a:33:77:b6:6c:a0:66:cc:15:d4:33:94:78:ee:76:
         23:0c:7c:27:70:fc:43:3c:d6:45:33:41:0f:0f:ec:e0:6c:98:
         a9:32:dc:8e:2e:4a:c2:88:ad:12:bd:69:a3:0f:a1:44:d5:90:
         4b:eb:cd:c5:f0:c1:2b:6d:3c:be:df:70:cc:93:81:5b:51:99:
         d9:30:c4:3a:ad:6b:de:9d:08:74:a9:f0:89:3a:c6:6d:3e:e5:
         40:3d:04:5f:01:6d:a4:e9:b1:44:70:84:e3:fc:3a:d5:12:26:
         c5:a6:7d:ff:c1:e6:44:e9:29:c6:95:b1:e3:1d:e9:be:2d:6e:
         a1:e2:db:a4:1b:f3:31:c7:58:37:04:39:82:b8:15:35:17:9a:
         5e:8f:fa:ff:24:18:de:45:77:ca:47:d2:9f:1f:a1:8a:62:98:
         74:13:18:e5:1f:f3:fa:a4:8e:48:4e:44:d4:21:e2:98:fd:79:
         62:b3:61:74:a6:40:a1:86:16:a0:43:f1:94:de:9b:3d:2d:50:
         e0:30:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:41 2026 by rpki-client