Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132382e302f32342d3234203d3e2039333138.roa
File:                     3136392e34302e3132382e302f32342d3234203d3e2039333138.roa (raw, json)
Hash identifier:          Hgrw3fkhPCcZjYO7aNQUZk+8gUQHlVs4m7sOGS5Tb6Y=
Subject key identifier:   35:BE:04:0C:31:BE:A8:81:98:2A:8A:DA:E7:82:F0:FF:80:20:E7:A8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       26B5B824548E5FA5C58EE30207E756A7A18DA0D6
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132382e302f32342d3234203d3e2039333138.roa
Signing time:             Thu 12 Feb 2026 01:05:05 +0000
ROA not before:           Thu 12 Feb 2026 01:00:05 +0000
ROA not after:            Thu 11 Feb 2027 01:05:05 +0000
asID:                     9318
IP address blocks:        169.40.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b5:b8:24:54:8e:5f:a5:c5:8e:e3:02:07:e7:56:a7:a1:8d:a0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:05 2026 GMT
            Not After : Feb 11 01:05:05 2027 GMT
        Subject: CN=35BE040C31BEA881982A8ADAE782F0FF8020E7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:a2:3b:ac:ca:8e:44:5b:fd:26:d4:b7:fb:
                    b5:9c:b9:9f:2e:95:69:78:c7:17:f4:36:b8:5b:b8:
                    d2:0d:46:36:a4:c4:85:bc:97:e8:4f:54:18:0a:c9:
                    f6:e7:f7:6c:b0:72:89:ca:f3:18:68:03:34:fc:32:
                    d3:77:f0:53:07:b7:51:bb:bc:56:e8:ad:7e:cb:09:
                    f2:0a:35:48:19:cb:b9:ee:c3:87:96:29:db:1b:9b:
                    de:00:f1:1d:2c:70:06:b0:88:6d:e2:32:f1:5d:85:
                    fc:b7:b9:9b:45:a6:16:41:8c:2e:bb:bb:b8:38:95:
                    15:0d:6a:c1:b5:ae:55:71:46:7e:6a:83:ee:5b:2e:
                    b5:80:65:68:55:80:f6:bb:a8:e8:f8:08:be:a5:07:
                    39:4a:78:0f:55:77:c3:a7:18:1f:14:00:a9:cf:af:
                    33:39:24:38:93:de:a8:1c:f8:e7:d9:e8:7e:b2:60:
                    ea:fc:1b:19:21:08:20:61:19:8c:86:22:28:19:49:
                    94:3a:99:37:18:72:b6:35:67:d0:f7:77:46:76:c1:
                    66:d2:25:eb:98:db:6d:2d:89:7d:ed:76:3a:19:e2:
                    c9:c8:85:be:14:5e:eb:5b:96:d3:62:6c:7f:76:c8:
                    54:30:f0:31:d6:86:31:24:a0:50:75:bb:5f:b9:26:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:04:0C:31:BE:A8:81:98:2A:8A:DA:E7:82:F0:FF:80:20:E7:A8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3132382e302f32342d3234203d3e2039333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:89:ce:82:4e:10:5a:79:6d:ff:b0:d6:97:7c:db:37:f2:
         4b:bb:69:09:bc:87:70:d1:ee:b0:86:4f:e2:45:36:46:dc:40:
         74:ab:20:c7:e9:df:34:bf:7b:4e:d5:e2:76:d8:f2:88:e1:aa:
         f7:d0:23:2b:ac:5c:b7:13:59:e2:1a:13:4b:9f:03:b4:7b:2a:
         f1:8e:eb:52:ec:9c:f0:a9:ad:b1:eb:ec:9a:29:b9:fc:c3:0b:
         34:e8:4f:d3:1d:dc:e1:4f:cd:4e:52:63:e8:84:ad:de:ee:16:
         77:a3:c6:ff:e0:e4:d8:95:27:91:60:cd:33:6d:b4:59:b2:41:
         2d:b2:15:1c:6c:f6:d1:2d:c6:76:a5:73:ef:32:84:35:c5:39:
         7b:11:df:97:ac:ed:72:59:47:fd:51:52:f1:9c:53:bb:36:2e:
         c4:79:0c:b2:f6:57:a0:97:37:40:b9:4c:0a:64:72:cd:eb:b1:
         cb:a6:81:62:6a:e3:06:1e:9e:74:82:95:34:90:42:27:1c:31:
         48:a6:33:e0:94:41:3b:6b:38:23:f5:be:4c:37:42:61:8c:c6:
         f9:e4:32:61:66:a4:0a:fb:a7:06:81:dc:89:69:ad:61:ed:8b:
         64:c8:f6:ea:f6:78:15:4e:d9:15:ce:7c:7d:b1:38:24:db:3f:
         9d:af:da:7b
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIUJrW4JFSOX6XFjuMCB+dWp6GNoNYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDVaFw0yNzAyMTEwMTA1MDVaMDMxMTAvBgNV
BAMTKDM1QkUwNDBDMzFCRUE4ODE5ODJBOEFEQUU3ODJGMEZGODAyMEU3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJaI7rMqORFv9JtS3+7WcuZ8u
lWl4xxf0NrhbuNINRjakxIW8l+hPVBgKyfbn92ywconK8xhoAzT8MtN38FMHt1G7
vFborX7LCfIKNUgZy7nuw4eWKdsbm94A8R0scAawiG3iMvFdhfy3uZtFphZBjC67
u7g4lRUNasG1rlVxRn5qg+5bLrWAZWhVgPa7qOj4CL6lBzlKeA9Vd8OnGB8UAKnP
rzM5JDiT3qgc+OfZ6H6yYOr8GxkhCCBhGYyGIigZSZQ6mTcYcrY1Z9D3d0Z2wWbS
JeuY220tiX3tdjoZ4snIhb4UXutbltNibH92yFQw8DHWhjEkoFB1u1+5Jg6JAgMB
AAGjggJgMIICXDAdBgNVHQ4EFgQUNb4EDDG+qIGYKora54Lw/4Ag56gwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACpKIAwDQYJKoZIhvcN
AQELBQADggEBACsjic6CThBaeW3/sNaXfNs38ku7aQm8h3DR7rCGT+JFNkbcQHSr
IMfp3zS/e07V4nbY8ojhqvfQIyusXLcTWeIaE0ufA7R7KvGO61LsnPCprbHr7Jop
ufzDCzToT9Md3OFPzU5SY+iErd7uFnejxv/g5NiVJ5FgzTNttFmyQS2yFRxs9tEt
xnalc+8yhDXFOXsR35es7XJZR/1RUvGcU7s2LsR5DLL2V6CXN0C5TApkcs3rscum
gWJq4wYennSClTSQQiccMUimM+CUQTtrOCP1vkw3QmGMxvnkMmFmpAr7pwaB3Ilp
rWHti2TI9ur2eBVO2RXOfH2xOCTbP52v2ns=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:06 2026 by rpki-client