Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323133363138.roa
File:                     3136392e34302e3134302e302f32342d3234203d3e20323133363138.roa (raw, json)
Hash identifier:          1ODkDpjy2sxihO935HPSnwQP9ANtOQhntp+YCV4M8Rw=
Subject key identifier:   0E:AC:50:FA:88:57:09:E8:1A:44:B3:22:24:FD:30:A2:8E:DC:E9:F8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3687D0C86D4C0ADB6C4EF950A056EF25121A1BA0
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323133363138.roa
Signing time:             Thu 12 Feb 2026 01:05:05 +0000
ROA not before:           Thu 12 Feb 2026 01:00:05 +0000
ROA not after:            Thu 11 Feb 2027 01:05:05 +0000
asID:                     213618
IP address blocks:        169.40.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:87:d0:c8:6d:4c:0a:db:6c:4e:f9:50:a0:56:ef:25:12:1a:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:05 2026 GMT
            Not After : Feb 11 01:05:05 2027 GMT
        Subject: CN=0EAC50FA885709E81A44B32224FD30A28EDCE9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:b4:ed:ec:a4:10:47:67:dc:89:c3:72:0d:
                    f8:8b:01:e0:9e:db:c8:08:18:f9:0b:df:9b:62:84:
                    ad:76:2b:01:39:10:f6:18:58:25:7e:0e:37:97:b6:
                    a4:d2:80:fe:fb:ab:0b:ce:83:bd:9a:15:dd:49:a0:
                    a4:f0:f4:f7:47:e9:a4:a4:75:28:48:f1:a6:a0:f0:
                    4e:71:b4:21:4e:54:a0:a7:73:d8:94:55:4e:92:9a:
                    48:28:c9:72:92:d8:ba:af:10:4c:58:3d:64:c7:14:
                    c1:8d:90:08:82:45:02:4b:69:85:76:7a:05:63:f7:
                    11:a9:14:20:bf:bc:df:0b:6d:dd:42:0f:52:b5:5b:
                    95:de:41:05:b7:57:ef:92:1e:2d:07:9d:be:25:6e:
                    25:61:df:88:60:9a:67:57:9e:9b:d6:9b:fa:53:16:
                    53:b5:a8:a7:2c:3b:06:b1:d1:b1:da:23:52:29:c8:
                    2b:dd:a4:69:53:3f:8b:e0:ac:20:7c:88:61:4f:85:
                    36:86:d2:a9:27:b0:9f:8d:ed:f7:05:78:7d:2a:40:
                    3c:df:48:6a:4b:7d:d5:59:91:19:f6:26:be:06:22:
                    21:82:f7:0c:13:e3:cc:ed:dd:00:ba:58:52:d8:53:
                    85:50:00:74:bd:19:bc:a0:53:8b:9d:a7:73:81:47:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:50:FA:88:57:09:E8:1A:44:B3:22:24:FD:30:A2:8E:DC:E9:F8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134302e302f32342d3234203d3e20323133363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:3b:b8:7f:4c:a7:19:19:be:5b:3a:c7:3f:97:9d:87:46:
         72:61:88:66:dd:df:19:d6:80:a6:22:9c:99:42:24:55:11:f3:
         d3:af:48:32:4f:22:cc:e7:d7:f9:2d:ca:e4:ab:94:29:14:14:
         a9:75:3c:19:86:ed:9c:f8:91:b8:57:3c:9b:ad:09:bb:3c:ae:
         f1:06:b4:b6:84:85:9b:05:e6:e7:13:69:87:41:bc:e6:10:44:
         2d:80:3a:b6:a2:f2:16:1a:74:19:a5:9d:2b:a9:63:f0:2f:ad:
         b8:e7:84:81:4d:63:f0:38:25:95:a1:72:fb:d4:d4:56:19:80:
         8d:7a:5f:a3:cb:6f:59:95:81:ab:ae:ed:03:bd:f2:97:9e:f7:
         a2:8f:f4:95:34:8f:63:cb:82:d6:cc:be:01:43:bd:8e:b5:a7:
         fe:1b:60:2e:56:32:8d:64:67:74:59:21:a3:fc:a1:4a:de:50:
         ff:27:51:62:8c:b1:1a:0d:3c:c1:38:b3:ea:20:fc:9f:b7:65:
         a7:16:76:3e:0c:ac:6c:83:d5:6b:ef:06:b0:1d:4c:58:80:3f:
         6a:f9:46:e2:ab:82:4a:92:22:a0:59:1f:1f:6a:bc:7c:dd:16:
         d1:fd:7c:01:28:80:8c:df:4a:f6:b6:0b:5c:ed:34:55:1d:fb:
         4d:59:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:36 2026 by rpki-client