Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132372e302f32342d3234203d3e203432383331.roa
File:                     3136392e34302e3132372e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          tTwzWX6IRIo+09WkGB1DW/7eEJqRKhsOhPGns9oHhQ0=
Subject key identifier:   F1:B4:61:0D:A2:D0:A7:E4:2A:37:8C:F9:17:4C:EC:6B:F1:24:81:F8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4170CD8F3D023C774E74A8A785124BA1BBF54CD5
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132372e302f32342d3234203d3e203432383331.roa
Signing time:             Thu 12 Feb 2026 01:05:05 +0000
ROA not before:           Thu 12 Feb 2026 01:00:05 +0000
ROA not after:            Thu 11 Feb 2027 01:05:05 +0000
asID:                     42831
IP address blocks:        169.40.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:cd:8f:3d:02:3c:77:4e:74:a8:a7:85:12:4b:a1:bb:f5:4c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:05 2026 GMT
            Not After : Feb 11 01:05:05 2027 GMT
        Subject: CN=F1B4610DA2D0A7E42A378CF9174CEC6BF12481F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:0f:c2:b9:bd:84:85:d9:31:c5:f1:bb:4f:
                    e7:4d:70:a5:0a:2a:e0:4f:9e:f1:72:5b:6f:c4:8b:
                    4e:9f:c1:70:e5:cc:6e:16:4b:48:d1:12:0b:23:41:
                    d9:bd:f1:cf:56:79:0e:b9:6d:ff:28:94:4a:88:d2:
                    94:3e:8e:67:af:e9:02:ce:02:52:3a:66:0d:b9:35:
                    a6:af:74:c7:2a:52:80:a4:56:16:55:eb:8f:30:97:
                    78:42:f5:1b:e8:32:66:04:f0:92:fc:0f:4d:ad:ec:
                    84:7f:fe:4d:0e:b1:7c:50:af:fe:d7:21:7a:37:46:
                    9f:97:fa:d3:b8:13:14:a6:1e:b3:75:fa:ca:70:c9:
                    bc:00:4e:83:62:44:e2:2b:7c:07:93:39:4c:62:ee:
                    e2:73:d4:6a:91:a5:a6:97:24:1d:70:1e:ab:87:74:
                    a0:84:32:d5:b8:31:20:8c:61:9c:f5:c0:3a:71:96:
                    11:ec:4d:40:d9:c1:bf:fb:ed:56:18:58:65:eb:ab:
                    4f:f9:24:2a:46:d7:d0:b7:68:1f:2f:83:4c:60:4e:
                    b2:97:e2:6c:3b:9f:83:a8:87:7e:98:16:27:aa:87:
                    67:29:5f:2b:ac:b4:f5:d4:ce:b1:22:66:d2:77:0b:
                    81:67:be:e1:25:63:bb:69:15:b4:5d:d8:3e:0b:ec:
                    59:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:61:0D:A2:D0:A7:E4:2A:37:8C:F9:17:4C:EC:6B:F1:24:81:F8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132372e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:a0:68:42:bd:bc:f5:a8:c5:d8:ea:05:a5:ad:0b:f6:b8:
         a4:ba:08:62:32:0a:0f:56:e9:57:54:31:93:b3:80:6e:9f:71:
         a6:00:d7:ef:b9:ad:22:0b:a8:a0:e9:7b:7d:ec:e1:a8:a3:d8:
         1c:77:a9:96:8c:96:c2:c1:7a:33:3c:99:5f:de:c7:bd:18:e3:
         81:c5:f8:7a:2d:ef:45:ef:00:4a:bd:48:70:78:62:32:9c:ca:
         6d:b9:95:37:05:67:97:bf:a0:2a:f7:f4:98:7a:77:61:40:1a:
         26:2b:71:aa:46:19:c7:21:1d:d1:d8:c6:72:a5:0f:61:69:00:
         87:b3:79:fd:c2:ec:a3:50:fc:84:0c:f6:2e:09:db:88:71:9a:
         d3:19:65:8b:dc:d9:c5:b6:4f:1f:32:55:d0:b6:74:ea:6a:bd:
         11:8c:f5:8f:14:5c:57:e0:1b:37:e1:c7:36:b8:66:f8:f8:00:
         60:b1:63:e7:f7:6c:c4:5a:0b:5b:72:c1:c0:6c:42:af:7b:f8:
         f0:aa:5f:0d:fb:21:09:cd:4d:70:e5:e4:32:c1:7f:7b:61:3b:
         f1:0b:3a:88:da:c1:90:79:1f:ba:65:64:d0:ef:8a:74:79:56:
         43:66:14:35:21:f4:05:bf:58:11:fd:71:91:b4:0f:73:4e:08:
         82:12:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:45 2026 by rpki-client