Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/322e35362e3235342e302f32342d3234203d3e20313337323335.roa
File:                     322e35362e3235342e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier:          gwLW9Sps0GcCfNdhz5ghbpgEKjpuFiu00wpWx0eA1fk=
Subject key identifier:   17:32:B4:79:82:BB:31:67:0B:F3:0A:31:86:39:81:F6:8A:DA:F1:26
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       66F169A9DE55D529F53382F6D39D9F23A7E807F4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/322e35362e3235342e302f32342d3234203d3e20313337323335.roa
Signing time:             Thu 12 Feb 2026 01:05:03 +0000
ROA not before:           Thu 12 Feb 2026 01:00:03 +0000
ROA not after:            Thu 11 Feb 2027 01:05:03 +0000
asID:                     137235
IP address blocks:        2.56.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f1:69:a9:de:55:d5:29:f5:33:82:f6:d3:9d:9f:23:a7:e8:07:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:03 2026 GMT
            Not After : Feb 11 01:05:03 2027 GMT
        Subject: CN=1732B47982BB31670BF30A31863981F68ADAF126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:70:ff:ce:8d:4f:ba:2c:e9:c6:3f:99:c2:
                    7d:8f:ed:e4:a1:49:a0:10:5b:96:ed:a6:64:a3:19:
                    b6:17:62:d5:b6:da:ad:16:b5:26:2e:f0:5b:9e:3b:
                    7b:d2:d6:25:29:1e:55:96:0e:5b:87:97:b2:a9:fb:
                    46:bc:1c:d8:4a:65:5d:3c:f2:85:09:0e:19:d3:d9:
                    ab:ed:cb:12:ef:76:f9:e6:a7:eb:14:73:de:27:6c:
                    f9:40:78:71:9d:cb:10:97:fb:69:71:70:9a:e4:73:
                    9d:17:13:e4:01:ab:a3:1b:2a:31:5b:53:c9:bf:38:
                    1c:22:e2:28:8d:41:25:0c:2f:20:de:57:db:e8:8a:
                    c8:33:38:5d:58:35:f1:a2:5b:26:c3:a9:2f:61:31:
                    9a:64:4a:38:98:92:39:b6:c0:a2:b7:e6:bc:f3:5b:
                    dd:78:18:4a:65:fa:7a:88:01:3a:46:cb:2e:e2:15:
                    9a:be:7a:04:68:29:73:f4:18:eb:d6:6c:e9:32:1c:
                    ec:46:1d:5f:a8:b2:80:68:97:11:d6:d2:15:95:12:
                    9e:74:72:f6:eb:61:c1:06:1d:47:22:79:c8:96:f1:
                    ad:17:ab:43:b9:d6:f6:0d:55:80:03:5a:46:f6:9a:
                    a6:b9:d9:25:3e:e5:3a:f6:26:67:1b:91:fc:db:a7:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:B4:79:82:BB:31:67:0B:F3:0A:31:86:39:81:F6:8A:DA:F1:26
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/322e35362e3235342e302f32342d3234203d3e20313337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:21:fd:7a:c2:05:ca:92:67:98:b8:0f:12:6a:f8:a1:38:
         6f:48:f9:4a:f2:98:f1:9c:0f:82:58:3a:90:a2:04:05:8e:57:
         24:de:6c:53:57:74:8d:ef:09:f4:35:c1:4c:29:1a:e1:d1:b0:
         50:0b:3a:2a:34:94:fe:f4:9d:0c:76:1f:b8:2a:9f:a0:cc:16:
         25:09:36:db:03:53:7e:e8:3f:c7:13:12:14:a6:b0:5c:eb:68:
         ad:71:8c:1b:2a:6f:d1:dc:3e:f7:0c:86:1b:46:9f:ba:6a:83:
         6e:f5:1e:cb:36:b4:dd:44:5f:6a:76:b8:7f:f4:b4:4e:84:d7:
         90:15:86:70:ca:04:98:94:c1:df:22:1b:09:f5:43:e2:b4:f8:
         53:8b:cf:7c:dc:87:27:8a:26:2d:c8:a5:cf:67:7c:2f:68:a0:
         12:b5:db:5d:82:44:1f:c8:a9:0a:8b:df:06:df:e2:ba:36:c7:
         f1:db:22:f3:65:5d:e5:cc:52:27:3b:9c:05:7e:30:85:92:5d:
         70:a8:a8:03:2d:a2:2c:4f:0e:88:90:22:91:a5:75:b8:f9:80:
         a8:72:fd:79:5a:f5:bb:d9:c7:d4:e0:7e:97:07:da:06:7b:2f:
         9c:f6:67:24:7f:51:c3:bd:86:21:81:da:fe:13:9a:60:a5:ac:
         af:b7:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:59 2026 by rpki-client