Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20323035383836.roa
File:                     3136392e34302e3135302e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          JiWd76b9U77jT54t//gV2XcG0kHv95jpQ78tK2flO+g=
Subject key identifier:   E4:ED:1E:23:0B:40:79:AE:F6:18:50:5D:87:33:2A:6D:ED:8A:3B:7E
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       219AC49582B95C1D13617C48C9B5B76B2842D2EC
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20323035383836.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     205886
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9a:c4:95:82:b9:5c:1d:13:61:7c:48:c9:b5:b7:6b:28:42:d2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=E4ED1E230B4079AEF618505D87332A6DED8A3B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:f9:87:d3:b5:85:21:c3:a6:8e:77:98:38:
                    e4:91:c2:4d:45:c1:c4:29:7b:2e:09:1b:92:c7:0c:
                    e1:45:d3:c3:49:2e:28:d9:a3:37:b5:89:ed:ab:3e:
                    fa:5d:9c:63:52:28:89:15:3a:7c:da:2d:3b:b9:fa:
                    be:c9:0f:23:b8:44:94:f8:ba:14:de:2d:b3:d0:28:
                    02:6b:44:4a:b4:33:97:20:c3:a8:4e:c5:3c:4a:e8:
                    2a:2d:6b:db:f5:35:1b:ad:78:fd:8a:42:4a:13:a3:
                    ad:7e:ac:b3:aa:33:75:3c:6d:a3:d9:97:84:cf:54:
                    84:95:ae:84:74:f7:4a:10:44:d9:70:02:90:56:76:
                    c5:d2:d8:4b:58:61:47:3b:0b:a7:10:2a:64:55:f4:
                    f2:e9:d1:2e:f1:46:50:95:d0:6c:11:ff:ea:b0:21:
                    53:ec:22:5c:73:ff:40:32:c2:59:ae:2c:84:c9:48:
                    5d:b1:9c:ec:ee:fc:70:12:24:27:d9:5f:d1:81:83:
                    90:8a:f1:c2:b4:61:20:76:75:b1:e8:fe:c4:02:75:
                    33:ac:cb:9b:36:18:64:d4:5d:5d:0b:21:64:ff:58:
                    2f:97:9e:08:85:94:5a:b0:bf:6f:1a:55:c9:b9:fe:
                    b2:64:82:b6:8e:12:ee:ae:ea:2c:48:2f:2e:ee:e1:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:ED:1E:23:0B:40:79:AE:F6:18:50:5D:87:33:2A:6D:ED:8A:3B:7E
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:bd:c1:71:2c:6a:c0:70:45:fb:dd:aa:84:d0:47:b5:53:
         e5:dc:81:2c:9b:42:8b:57:8b:ea:7d:98:9e:4b:ae:f4:2f:4f:
         ab:82:89:e3:be:60:21:a7:4e:d6:5f:f0:a6:ad:e6:64:77:42:
         27:ac:0a:5f:8e:8c:66:53:68:c7:4d:ae:25:b1:fb:44:81:48:
         e8:4f:df:01:57:b4:cd:77:2a:5d:82:9e:11:18:4f:97:df:a8:
         ef:c7:d1:6f:18:be:b7:0b:2e:f3:9d:1c:41:50:42:1c:bb:d2:
         9a:af:8f:4c:df:62:d9:6a:6c:12:4c:08:5c:e0:54:07:38:63:
         53:b3:c5:4c:fd:b3:a2:4e:5b:64:08:59:fe:64:65:70:a3:c0:
         21:9b:1e:f9:bd:67:43:8b:21:c3:7c:bc:48:0a:5a:6e:92:61:
         8d:9a:5c:93:2e:5c:42:31:4b:50:c3:3e:3c:bd:47:dc:6b:d7:
         03:ce:f8:47:0b:8d:c4:fa:72:d7:48:d9:9d:a1:30:1f:36:b3:
         f3:25:16:97:09:73:16:32:8e:96:19:62:31:52:87:9b:f3:84:
         e4:75:5a:6b:3c:18:92:ab:32:d8:3e:9e:a0:07:23:3d:29:23:
         93:6f:15:f2:bb:1a:8d:42:b7:16:ce:9c:f7:a3:5a:f7:61:58:
         0a:ab:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:41 2026 by rpki-client