Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa
File:                     3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa (raw, json)
Hash identifier:          ePGt41DrtLJCpmbku60nHz3urKyoTVgbNHDfBnfRZWg=
Subject key identifier:   E2:96:78:C0:FD:0C:E3:3F:C9:FB:F2:20:3E:23:69:7B:2D:12:31:CB
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       30AEFB7A3B7C957BBEB9E3D0055DF98AD77FD468
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa
Signing time:             Thu 12 Feb 2026 01:05:03 +0000
ROA not before:           Thu 12 Feb 2026 01:00:03 +0000
ROA not after:            Thu 11 Feb 2027 01:05:03 +0000
asID:                     205896
IP address blocks:        169.40.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ae:fb:7a:3b:7c:95:7b:be:b9:e3:d0:05:5d:f9:8a:d7:7f:d4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:03 2026 GMT
            Not After : Feb 11 01:05:03 2027 GMT
        Subject: CN=E29678C0FD0CE33FC9FBF2203E23697B2D1231CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:af:06:4d:9b:27:45:86:84:2b:81:c2:67:
                    02:72:92:b5:ad:3e:d5:13:2a:56:bb:47:f0:f9:35:
                    d3:1e:57:8d:6f:07:ba:27:61:e1:ae:f4:1e:cb:e8:
                    d8:75:ff:fd:21:52:19:38:43:56:8b:e0:f9:cb:3b:
                    5f:cd:e9:32:f7:e0:e9:67:b5:fd:5f:fc:64:d0:79:
                    62:ce:9b:cf:b7:c3:3d:bb:83:fe:ef:4f:c7:e1:38:
                    64:92:3a:54:d3:25:ad:85:fe:c6:58:8e:0d:41:c1:
                    f2:3e:c9:38:15:0b:6d:52:80:e1:c4:a5:a6:1c:be:
                    53:f9:cb:c5:b9:36:db:91:70:ce:72:f1:ac:d4:98:
                    e1:6b:e4:b1:42:a8:94:a8:f9:5c:88:ff:26:f6:64:
                    51:48:19:54:a0:da:77:d3:42:47:fe:a2:b4:f3:c7:
                    e8:c6:dd:cf:83:cf:da:0b:a0:29:45:30:a3:f1:d9:
                    a6:df:9d:98:a3:93:b5:67:fc:4c:cd:43:7b:94:ba:
                    0f:fe:e4:b8:52:45:94:b1:cc:71:cc:21:06:b8:8a:
                    1c:32:e3:d5:ab:6c:ae:bf:67:7f:38:88:74:50:e2:
                    f8:82:77:a8:6a:d3:e3:f2:e3:11:85:74:94:af:b1:
                    9b:2c:e0:08:0b:44:64:87:9e:9d:88:0d:77:6c:d8:
                    01:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:96:78:C0:FD:0C:E3:3F:C9:FB:F2:20:3E:23:69:7B:2D:12:31:CB
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323035383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:44:a6:f3:a9:05:8a:72:36:6b:bb:b0:2c:79:48:78:36:16:
         b1:3b:31:5b:e0:a9:a4:10:65:99:93:59:af:f6:25:5b:e7:3b:
         ad:8b:db:25:07:2c:46:0a:34:77:48:6e:a4:10:31:43:1b:52:
         34:c2:16:5f:ed:c6:d0:c1:34:a6:2a:93:c1:a6:e2:a9:42:c6:
         85:4e:d8:53:68:e9:36:a0:b2:cf:2a:1f:cb:54:0e:a2:5a:38:
         dc:4f:11:cb:76:ce:1a:1b:77:83:89:44:d4:23:2a:d6:df:2b:
         49:dc:50:dc:a2:ef:6d:8b:64:8a:b3:5e:2e:93:90:de:e1:10:
         cc:a8:3d:8f:2a:77:f4:c6:aa:7c:f0:5d:10:19:05:8f:3a:71:
         95:0a:c2:9d:9d:ac:f0:56:6a:12:e1:7c:46:bb:16:fc:ac:b0:
         3f:b8:c3:9e:60:50:21:90:3c:92:af:e9:aa:a0:d1:f7:bf:d9:
         6e:9a:6e:47:5c:9d:01:37:c2:8b:ee:a4:e1:25:01:1e:e0:71:
         8b:21:67:67:b7:43:69:22:1b:4a:8e:3a:b8:a0:a5:22:22:be:
         45:d5:66:b0:6b:fa:19:ef:f2:e7:5e:5d:b5:76:47:25:34:77:
         0e:6d:59:fc:96:0d:91:af:4f:6a:69:72:31:fd:ec:f9:1c:ee:
         37:da:59:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:57:52 2026 by rpki-client