Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134332e302f32342d3234203d3e20383334.roa
File:                     3136392e34302e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          V6qfLIySrAnv1ySXH7RnYM9CGZr31aUvju3CN1CFJko=
Subject key identifier:   0E:04:1B:37:D3:6E:D6:81:14:4A:C7:E4:FB:39:23:86:68:6D:57:FF
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       585A18D9D7982567531F464B3D615CD283D6A34E
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134332e302f32342d3234203d3e20383334.roa
Signing time:             Sun 01 Mar 2026 07:24:49 +0000
ROA not before:           Sun 01 Mar 2026 07:19:49 +0000
ROA not after:            Sun 28 Feb 2027 07:24:49 +0000
asID:                     834
IP address blocks:        169.40.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5a:18:d9:d7:98:25:67:53:1f:46:4b:3d:61:5c:d2:83:d6:a3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar  1 07:19:49 2026 GMT
            Not After : Feb 28 07:24:49 2027 GMT
        Subject: CN=0E041B37D36ED681144AC7E4FB392386686D57FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:a6:e8:01:aa:ed:ec:e0:7b:d6:0a:88:53:
                    96:b1:2f:96:34:f5:34:76:d4:23:36:18:b4:1a:20:
                    c7:50:26:04:fc:8f:6d:de:cc:07:5d:d3:17:46:52:
                    4e:25:29:d6:ad:c5:fb:c3:bb:d5:e1:a3:c0:1e:ee:
                    85:12:ee:7a:36:e6:10:19:a3:ce:08:37:da:0e:e5:
                    29:1c:3a:af:20:2c:b8:6c:cb:64:42:37:3f:79:ad:
                    14:7f:5e:66:35:fe:07:ec:3e:77:87:16:a3:48:b6:
                    ba:c8:ea:04:f1:39:7e:09:6a:49:19:d9:59:08:32:
                    d6:8c:34:12:50:4f:9b:95:42:b1:35:5a:39:4e:af:
                    01:87:ca:be:4f:dd:1f:1d:c2:c4:c5:db:37:20:c6:
                    47:a4:1c:a4:2e:c3:87:0e:e2:77:dc:45:57:b7:7b:
                    4d:8e:ed:b0:c0:4a:f2:95:e2:eb:95:b9:48:9f:44:
                    36:12:21:7d:99:8f:4e:0c:75:bc:ed:f7:8f:fc:e6:
                    72:bb:7d:e8:18:ac:96:b1:83:9e:0f:92:63:be:a3:
                    72:3d:96:16:48:2d:a0:b1:e3:d3:8b:31:3d:5e:8d:
                    04:36:ff:bd:61:ce:3f:87:a8:ac:7f:aa:a4:13:cb:
                    4f:33:3c:03:d1:e5:e7:49:77:c1:e4:0e:18:06:2b:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:1B:37:D3:6E:D6:81:14:4A:C7:E4:FB:39:23:86:68:6D:57:FF
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:49:31:59:3e:c9:d0:1d:cf:6a:ea:d4:1b:e9:d8:62:03:e6:
         bf:e4:ad:03:3a:81:85:23:a4:23:b8:f1:36:14:a3:cb:76:be:
         5a:77:db:24:88:36:0a:32:82:82:2f:ae:ac:a8:c8:34:e3:af:
         91:71:a5:95:59:9d:f5:c8:be:2f:a2:73:d1:6d:50:50:08:46:
         86:40:87:d1:1a:40:9d:85:78:78:12:05:9e:a2:01:95:38:78:
         4e:c6:f0:97:8a:a2:6d:28:1e:35:f2:ce:c2:a3:60:eb:18:d7:
         a4:38:cb:1b:ea:43:38:22:13:9a:2b:2e:98:de:fe:59:5c:ba:
         33:c0:53:40:47:f1:07:f0:b1:97:01:b5:fd:99:d9:30:59:b6:
         a9:e5:71:ed:11:d7:1a:82:5e:d1:2c:f5:9a:1d:f4:42:be:6e:
         74:5f:9c:11:95:d1:67:d6:6d:5f:b0:61:02:11:09:9b:15:ae:
         38:2a:db:f3:92:d3:2e:06:a4:c4:2e:0f:f5:56:5f:36:3c:c0:
         06:79:fe:c4:72:ec:73:0f:4c:e4:30:89:9a:6e:51:57:5e:ac:
         17:73:a7:bf:ec:65:4b:88:00:ef:7d:91:2c:3b:5d:0f:89:7d:
         bd:a2:0e:79:cc:b2:fe:d1:3f:89:03:68:64:89:d2:7d:5b:ef:
         3d:53:fd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:48 2026 by rpki-client