Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2037303239.roa
File:                     3136392e34302e3135332e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          FLDrhj0lyNgZHgLN0oQMJx1tyAfQl2w+LfOLSvpsn28=
Subject key identifier:   6A:B7:F6:33:B3:96:83:15:38:25:DE:38:60:42:33:62:F9:DA:35:8B
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2EDA7BCD61C57D67F7A93B828D0C71F542C82C64
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     7029
IP address blocks:        169.40.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:da:7b:cd:61:c5:7d:67:f7:a9:3b:82:8d:0c:71:f5:42:c8:2c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=6AB7F633B39683153825DE3860423362F9DA358B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:6a:17:4e:e4:0a:61:1a:65:82:90:c8:28:
                    65:be:a7:d8:1b:be:8d:33:32:19:8e:d8:79:04:c6:
                    24:f1:2d:10:85:ec:c5:76:67:e9:15:3d:65:50:45:
                    27:b9:8e:84:bb:c3:ff:7a:ac:33:40:6f:50:5c:0c:
                    e0:51:02:48:60:c9:73:5a:75:ec:52:e5:f4:ce:41:
                    13:29:12:46:1b:83:a3:34:38:38:b7:79:f7:0f:8c:
                    e0:c4:0b:0c:94:88:f3:9e:1f:9f:44:e4:61:52:4d:
                    92:25:90:d9:fc:b5:61:81:2e:a6:4b:d7:3f:1f:62:
                    e0:25:70:8e:8b:f1:e7:c5:9f:9f:0a:11:03:e3:58:
                    d3:b8:75:54:5d:7c:49:d0:1f:2e:5b:a5:76:c1:a2:
                    1d:77:b6:10:85:89:48:65:3b:c6:31:69:9d:35:25:
                    6c:e2:1a:28:80:2f:a7:3d:13:be:44:32:83:b9:76:
                    b7:49:23:81:1b:92:eb:ad:28:a7:05:32:29:0e:c6:
                    54:30:e2:73:a9:66:19:c0:6b:0a:44:09:64:09:fc:
                    1e:d1:6d:ac:43:ed:57:cb:f5:99:37:f8:cf:76:a0:
                    60:06:7c:cf:82:a4:f3:8d:71:df:85:d6:7e:38:43:
                    96:84:84:6b:dd:47:43:99:0e:fd:55:ce:7e:a9:86:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B7:F6:33:B3:96:83:15:38:25:DE:38:60:42:33:62:F9:DA:35:8B
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135332e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:54:be:76:91:97:98:f6:10:0e:b4:1c:8e:b9:e7:cb:38:99:
         25:28:57:4e:c6:e3:76:5a:b9:55:fd:bb:ed:d5:80:73:4a:cf:
         8e:d1:19:a2:ff:2f:01:2c:02:27:94:5d:be:d8:e8:29:44:91:
         c0:12:ea:7a:1c:dd:da:4a:0d:4c:77:4c:e5:a3:a9:d5:76:51:
         68:2a:13:55:73:2e:1a:4c:dc:7c:49:6f:aa:f4:9b:ef:5b:84:
         93:39:e7:db:dd:b5:4d:97:2a:91:93:b5:4d:a4:a1:dd:0c:c8:
         3f:3e:00:ee:ae:4b:12:dd:56:d8:ab:0f:46:c6:e5:86:57:f2:
         ee:ba:c6:8e:38:5a:df:53:93:19:9f:37:95:57:e6:4f:35:88:
         cf:50:e3:20:f5:af:55:30:36:a8:7a:7a:4b:43:57:67:0b:d4:
         fe:bb:ad:66:4a:48:c7:6b:f0:7f:d0:ed:3a:8f:21:d9:6c:58:
         ee:69:6f:39:c3:69:44:cb:32:cb:0c:88:41:be:a9:a0:9f:af:
         90:d9:89:df:63:cf:17:29:9c:56:b2:0b:06:26:e1:5d:87:7b:
         1d:d7:84:d2:6d:6d:39:40:1e:a9:98:71:d9:46:72:0b:99:8d:
         ab:7c:f8:75:01:9a:03:52:30:9b:eb:fb:35:b2:5d:85:f1:61:
         e5:ca:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:16 2026 by rpki-client