Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa
File:                     3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          FD/QK35zZPmIBJB98bg83p+9gsYDEt5hX6qZdyFDeHE=
Subject key identifier:   C9:DC:5C:1E:0A:97:BD:12:2B:64:50:28:1C:71:A3:30:BB:36:8B:0D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       546EC2DD2C7DD9393B4C431A8A8D6922AFDCC5C4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     205886
IP address blocks:        169.40.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6e:c2:dd:2c:7d:d9:39:3b:4c:43:1a:8a:8d:69:22:af:dc:c5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=C9DC5C1E0A97BD122B6450281C71A330BB368B0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b4:3d:a0:18:02:21:7f:1c:27:bf:3d:6c:77:
                    a0:ef:d5:14:c4:d3:47:73:52:ee:1a:21:e0:33:f0:
                    78:12:3f:bf:af:54:e2:56:c0:e2:65:55:8f:2c:59:
                    81:26:9f:1a:00:9a:88:6a:86:0c:40:3c:12:49:58:
                    f0:2e:73:e0:ff:19:3b:9a:16:29:0e:60:fa:fa:91:
                    7d:47:05:75:2b:82:ee:99:b7:19:36:74:08:ee:af:
                    18:3f:67:50:d4:be:8f:73:b8:35:cc:e0:1a:be:f6:
                    8b:04:97:95:d9:a0:81:b1:55:ac:80:f8:34:b6:6a:
                    9d:16:aa:35:7b:70:46:b6:a8:4e:6c:1a:76:38:ef:
                    f6:16:68:65:95:d5:fb:f8:9f:2e:ca:72:82:b5:8c:
                    25:95:81:bf:f8:70:4d:fa:85:7e:70:f6:5e:02:72:
                    9d:98:19:22:c0:cd:65:72:68:a8:7d:81:14:13:ff:
                    df:a5:1c:3e:64:91:a2:27:cd:ab:7e:a0:c4:d2:7e:
                    00:b8:60:8e:23:aa:39:0c:36:6d:40:1b:d6:db:25:
                    27:2c:3d:b0:da:55:5e:05:a3:8a:6c:a0:b5:d6:47:
                    b5:a1:88:dd:13:0d:2e:df:10:63:ce:fd:81:3f:a9:
                    aa:a4:25:72:6c:84:13:be:5f:0e:a1:2e:6a:f8:dd:
                    40:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DC:5C:1E:0A:97:BD:12:2B:64:50:28:1C:71:A3:30:BB:36:8B:0D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3135382e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:e6:11:e1:e4:87:eb:8e:b2:85:44:54:fa:94:6e:11:13:de:
         b6:ec:f0:93:df:6e:25:50:72:dd:52:38:b9:59:f7:b5:99:99:
         5c:4f:e7:55:54:f8:55:e6:65:7d:00:e4:7b:97:74:ae:3a:36:
         9e:bb:df:7c:cd:7d:8a:e9:76:bf:8c:73:af:5a:fd:e4:70:05:
         47:5f:97:91:12:e3:4e:dd:69:bb:e8:9b:ff:e6:d9:8a:c6:cb:
         fc:92:22:ec:9a:74:5e:fa:72:3d:0d:c7:7d:10:ad:53:27:ed:
         66:8a:2e:7e:1e:49:5f:9b:bc:6c:d4:f8:f4:b6:16:71:47:13:
         df:33:9e:e0:ee:0f:20:eb:e1:a5:4d:ac:b8:bf:89:ac:60:98:
         9b:cb:8e:c0:6c:f3:2c:86:d7:13:54:f9:ed:a4:d6:e2:da:a6:
         4a:d7:05:69:62:f7:98:46:b2:3a:24:8f:c1:0a:0a:7f:f7:4d:
         95:45:30:3c:ae:15:bb:94:b3:15:14:73:72:ef:ef:75:bf:f9:
         e8:41:a3:40:df:14:31:88:49:93:48:1c:0e:87:a9:3d:6a:24:
         88:60:d7:c9:1d:9f:8a:9d:58:bc:71:d7:ad:63:55:ae:d5:70:
         32:f4:45:e1:4c:f2:9c:dd:07:9e:a8:80:ca:b6:72:8a:6f:8d:
         11:71:d4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:03:42 2026 by rpki-client