Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230382e302f32302d3230203d3e203230333236.roa
File:                     3136392e34302e3230382e302f32302d3230203d3e203230333236.roa (raw, json)
Hash identifier:          J+kDJ9LguOnm2u8QhHaINtp8V8QCks12x684Qb8DnY8=
Subject key identifier:   07:AD:AC:C5:85:69:A6:66:43:4A:7F:6C:4A:8E:97:C7:2F:94:91:11
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       507875BA1C5F726A4B750BD5988F78AA542EAD71
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230382e302f32302d3230203d3e203230333236.roa
Signing time:             Thu 12 Feb 2026 01:05:04 +0000
ROA not before:           Thu 12 Feb 2026 01:00:04 +0000
ROA not after:            Thu 11 Feb 2027 01:05:04 +0000
asID:                     20326
IP address blocks:        169.40.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:78:75:ba:1c:5f:72:6a:4b:75:0b:d5:98:8f:78:aa:54:2e:ad:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:04 2026 GMT
            Not After : Feb 11 01:05:04 2027 GMT
        Subject: CN=07ADACC58569A666434A7F6C4A8E97C72F949111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:03:9f:74:0c:03:f9:1d:9a:27:1b:f5:38:
                    c2:7d:c0:2f:9f:0a:88:e1:04:5a:0f:f8:98:3f:13:
                    d0:a1:87:57:e8:12:89:46:93:92:e7:38:47:5d:7d:
                    78:ad:da:74:ea:fb:85:93:5b:bc:28:a5:75:ed:a0:
                    be:09:b8:d8:50:f3:9d:4a:dc:07:ef:90:3d:8c:8c:
                    92:da:61:38:e2:51:31:07:df:03:ab:81:ad:47:be:
                    f8:54:5d:62:7a:b3:a4:d9:d4:75:54:65:53:b4:2c:
                    7d:23:e8:c9:3c:8a:ad:dc:43:cf:28:9e:43:11:e2:
                    8d:e5:8d:7d:69:de:ee:e8:1b:07:e2:bc:74:56:5f:
                    3d:f0:ca:3d:f0:43:13:54:f2:1e:02:54:c8:b1:ab:
                    64:9f:a6:c1:22:e3:2f:17:7b:c1:12:35:6b:bd:62:
                    56:54:03:5f:81:e4:55:86:7c:39:56:c7:80:99:b9:
                    fe:af:59:52:9c:28:6a:e4:ee:0c:44:01:94:97:05:
                    59:ab:7a:89:85:85:dd:e4:74:a9:b5:6b:63:8d:8b:
                    f2:d2:47:78:37:51:9f:2b:e2:78:70:b5:17:c0:23:
                    cc:c5:02:21:99:62:c3:c9:c9:e6:ef:64:1e:45:b2:
                    bc:7a:77:e8:4b:12:34:2f:29:cb:85:45:26:26:ec:
                    ac:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AD:AC:C5:85:69:A6:66:43:4A:7F:6C:4A:8E:97:C7:2F:94:91:11
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3230382e302f32302d3230203d3e203230333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:a8:d5:9e:b7:6f:69:e6:a2:54:56:58:79:63:02:b5:f8:
         55:b6:39:5c:98:69:a0:1c:f2:20:c6:76:d6:39:5e:42:53:21:
         99:fc:ff:61:0b:82:a4:d5:a3:82:f0:41:6f:c6:32:7e:81:8c:
         f3:04:cb:96:ad:8a:1d:31:04:e8:db:ea:16:3f:f0:51:18:55:
         42:07:b7:3a:5b:62:eb:f1:30:6a:08:94:6c:5d:38:51:4e:ef:
         e5:77:bf:a0:b8:2a:1e:43:29:ba:0c:a2:73:3f:35:96:2f:1c:
         a6:51:74:0f:ab:c4:6e:45:e1:c6:07:6a:1f:ab:9f:64:b2:bb:
         1f:e6:6a:5a:e3:3a:ba:74:19:ff:b5:34:4d:d4:a9:cd:4c:27:
         b9:8d:a8:76:98:8e:6f:d0:04:67:65:5a:3b:15:4d:9c:a9:7f:
         1d:e6:f8:50:f2:26:80:e0:d4:41:30:01:da:a0:ed:cd:84:7b:
         46:3d:c1:b7:92:a3:19:eb:03:d9:1d:45:76:9c:23:f0:35:b3:
         65:4a:c6:28:76:66:1f:ba:8a:88:e2:76:f6:ea:ee:9b:21:36:
         d9:aa:f1:32:d2:c3:fd:ef:38:22:cf:e2:3f:40:3a:9a:71:42:
         98:8f:7f:1b:de:ad:6d:39:cb:22:d7:a6:b5:d4:5d:0a:9b:c7:
         21:df:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:23:04 2026 by rpki-client