Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa
File:                     3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier:          PIw3LvDTO3Xu8/MyMtGzRTFA97fg2KMgkcyX+0WxH4o=
Subject key identifier:   AB:27:7C:0A:14:3F:86:7C:F4:BD:B0:22:A0:74:BE:5B:A7:B3:47:B4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       08727F33134CD287B64734FE4734F445C8BDD917
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa
Signing time:             Thu 12 Feb 2026 01:05:07 +0000
ROA not before:           Thu 12 Feb 2026 01:00:07 +0000
ROA not after:            Thu 11 Feb 2027 01:05:07 +0000
asID:                     401776
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:72:7f:33:13:4c:d2:87:b6:47:34:fe:47:34:f4:45:c8:bd:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:07 2026 GMT
            Not After : Feb 11 01:05:07 2027 GMT
        Subject: CN=AB277C0A143F867CF4BDB022A074BE5BA7B347B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:90:1c:e4:e3:7b:1a:c6:94:c4:5c:1d:05:
                    3c:b1:c1:0d:48:74:3d:ea:de:94:3a:f8:2d:be:ef:
                    51:c7:5e:36:b1:64:17:56:f6:3f:5f:39:4b:bc:a2:
                    de:2f:db:0f:b3:1d:23:e2:72:fd:8a:11:91:73:62:
                    0e:fc:8f:d3:12:50:ac:39:42:94:95:34:bd:07:20:
                    dc:d5:21:d5:62:f3:79:d7:ec:d7:a4:90:e1:59:b0:
                    4c:47:4b:7c:98:ac:96:75:0d:be:48:56:c9:b0:58:
                    5f:a3:3e:a5:25:40:49:b3:b3:9c:7f:68:3d:e3:c4:
                    67:54:61:52:a1:f5:cc:5a:c0:d0:1c:cc:50:12:8b:
                    70:df:e6:38:17:30:80:7a:b4:8f:67:00:13:c0:90:
                    06:50:14:d6:5d:a0:df:1a:83:b0:c9:d0:ae:80:66:
                    86:38:9d:d1:4b:8e:a2:f2:63:8d:3f:c3:6c:ab:6d:
                    4e:2b:50:84:9f:f8:b1:06:a4:1a:66:d7:04:2e:59:
                    e8:e2:9b:80:50:a9:86:6d:60:56:4c:09:99:00:52:
                    39:c4:19:27:95:af:14:5e:98:f2:18:8e:80:23:25:
                    8c:7c:5d:e8:7a:eb:3a:1f:5b:fb:7d:54:cf:96:86:
                    89:e9:b6:74:ad:4f:cb:32:44:3b:0a:eb:2e:fd:eb:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:7C:0A:14:3F:86:7C:F4:BD:B0:22:A0:74:BE:5B:A7:B3:47:B4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135302e302f32342d3234203d3e20343031373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:04:03:dd:43:59:4e:92:03:56:fd:bc:0d:8f:dd:8c:73:
         62:5a:f7:1b:05:74:a6:08:3b:90:0c:76:3a:45:88:3a:04:c2:
         33:5d:53:ec:98:bf:bc:6c:38:c9:2d:14:5d:c0:61:41:a5:2e:
         03:02:d5:94:2b:b1:22:97:a1:7c:4e:46:13:47:52:d7:f5:36:
         f3:ad:3a:81:d6:74:ac:0a:6b:38:40:d4:4b:df:81:77:47:0c:
         16:85:6b:1e:fa:e1:a1:b7:42:ad:80:01:4d:41:59:c4:ec:9b:
         77:79:96:cc:e3:d9:5a:59:5b:69:1f:60:d8:c0:c5:e8:90:3f:
         ab:f5:39:4c:c4:6b:11:4c:6a:5f:40:ba:21:2e:72:7f:f8:ab:
         24:c8:9c:7a:5e:2a:0f:86:25:95:43:de:25:fe:8f:6f:d7:dc:
         4a:3f:d8:81:29:b2:d5:88:d2:e6:b3:f4:80:7a:72:ac:a1:a2:
         b2:b0:33:b7:76:02:53:ad:98:9d:12:47:cc:7a:04:0d:0c:22:
         db:a7:b0:ad:33:05:90:ed:d3:e6:d3:d4:07:55:67:0d:37:6d:
         09:bf:c5:f7:18:b1:6d:28:83:f2:d0:7f:05:da:94:92:6b:81:
         a5:41:45:55:44:10:bb:43:ad:f9:fe:9c:01:99:de:81:d7:52:
         85:90:28:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:22 2026 by rpki-client