Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134342e302f32342d3234203d3e2035363530.roa
File:                     3136392e34302e3134342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          3QftBqQWcRgbHsDotaUpLNFynbMXMcKw72rpcHikKwg=
Subject key identifier:   E5:FE:B4:B7:4A:7F:38:8D:44:D7:F5:46:E3:EF:5A:6E:6D:69:5F:74
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5324E21F9EA845BEEC41D0AEB6BDB482DD85E79C
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134342e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 12 Feb 2026 01:05:03 +0000
ROA not before:           Thu 12 Feb 2026 01:00:03 +0000
ROA not after:            Thu 11 Feb 2027 01:05:03 +0000
asID:                     5650
IP address blocks:        169.40.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:24:e2:1f:9e:a8:45:be:ec:41:d0:ae:b6:bd:b4:82:dd:85:e7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:03 2026 GMT
            Not After : Feb 11 01:05:03 2027 GMT
        Subject: CN=E5FEB4B74A7F388D44D7F546E3EF5A6E6D695F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:76:70:7d:61:2f:c2:fb:00:a5:c2:82:18:
                    0e:22:5b:f4:36:70:d0:e2:7d:ed:35:d1:06:54:41:
                    be:40:08:7b:d4:6e:91:0a:ee:80:42:b7:05:d4:5e:
                    98:c8:79:05:f6:77:c5:e8:d9:ca:f7:0b:69:b9:40:
                    fd:fa:83:e6:d6:29:8a:ca:a2:85:df:1b:ab:f8:70:
                    9b:ea:f5:2d:d9:fd:cc:cb:ba:03:54:3d:2a:66:31:
                    84:54:3c:8f:dc:d4:a2:22:d8:d6:91:a2:45:2e:4d:
                    56:36:76:3a:59:d5:f9:fb:af:24:f6:68:fb:61:b6:
                    c1:23:63:47:96:71:ae:cf:9c:ea:24:96:79:54:cd:
                    53:62:96:04:79:cb:dd:a1:2b:d4:9c:f0:4d:51:c5:
                    15:de:e8:bc:27:52:c9:a2:ce:4a:a2:41:9b:80:e5:
                    91:11:d9:7b:19:77:96:02:c5:77:90:44:3d:41:65:
                    a9:c1:d2:a9:32:01:20:cd:5b:2d:28:92:9f:f8:1e:
                    e6:ec:30:84:6d:2c:f0:d8:d1:fd:7d:9b:a3:b8:4f:
                    cf:69:44:88:8f:b4:72:77:c2:f1:e8:52:c9:bf:08:
                    66:06:e3:2f:9d:8a:5e:e0:70:3c:9c:cf:5c:40:43:
                    74:e2:61:de:e7:31:41:b2:a4:72:39:65:1a:55:86:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:B4:B7:4A:7F:38:8D:44:D7:F5:46:E3:EF:5A:6E:6D:69:5F:74
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:87:78:ba:48:df:b6:3d:05:5b:dc:ca:d8:8c:fc:24:b1:
         5b:78:78:04:1c:c2:03:6b:c8:72:25:0c:e0:94:d3:c7:84:44:
         a9:da:7f:75:9b:38:0f:a4:6d:e1:34:e3:e6:30:31:8a:90:08:
         28:5c:57:a6:e4:ee:ed:67:aa:64:af:bd:f3:a8:22:e5:6d:c5:
         b1:8a:48:7d:39:ad:cf:1b:29:ee:5e:4c:f8:ee:4e:b8:c9:1f:
         b2:53:f3:2e:ba:f0:22:59:c1:a4:b7:f8:84:8b:56:5c:f2:77:
         3d:05:fd:7b:07:5b:97:81:86:b1:77:13:33:83:2b:6b:82:4e:
         db:3a:c8:d6:f6:ce:f1:dd:4a:8e:ff:f9:3a:a2:7f:d1:91:c0:
         e0:a3:10:e4:89:37:0b:34:b1:72:a7:06:01:ed:a5:a8:94:46:
         1b:0c:60:0e:43:7a:a9:a8:a1:22:da:a6:68:24:53:59:a6:db:
         b3:39:00:d9:d0:11:c1:b5:58:92:f9:05:aa:bb:fd:7d:ef:25:
         4f:69:f7:a1:60:01:5a:b1:ea:4b:91:ca:28:d6:dc:5e:bf:f6:
         ef:71:62:a4:c3:4c:ec:f8:bd:3c:a0:58:ef:f5:09:80:ff:b2:
         f8:12:0b:40:2c:7a:b1:ce:9b:4d:f6:1c:36:bc:50:3f:fd:8b:
         23:88:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:49 2026 by rpki-client