Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          Rxb6a5GAHSqhscHqZxBVKa6UW0UXalASjOGdmlLflSs=
Subject key identifier:   93:A1:97:5B:1F:54:30:BD:AA:51:63:E6:E9:23:EA:14:6B:AB:42:A4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       23F7B2E79E941024017D85447708ED6543E46F56
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS10753.roa
Signing time:             Thu 14 May 2026 06:55:54 +0000
ROA not before:           Thu 14 May 2026 06:50:54 +0000
ROA not after:            Thu 13 May 2027 06:55:54 +0000
asID:                     10753
IP address blocks:        13.141.128.0/17 maxlen: 24
                          13.141.140.0/22 maxlen: 24
                          13.141.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f7:b2:e7:9e:94:10:24:01:7d:85:44:77:08:ed:65:43:e4:6f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 14 06:50:54 2026 GMT
            Not After : May 13 06:55:54 2027 GMT
        Subject: CN=93A1975B1F5430BDAA5163E6E923EA146BAB42A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:ce:29:c0:98:f7:0f:14:d1:31:88:e9:fd:
                    4f:b9:4f:2b:00:43:a8:75:4a:7a:ed:c5:01:29:cf:
                    89:83:28:15:67:e6:52:b5:ba:8e:c6:ac:38:db:be:
                    49:8f:06:16:f8:71:65:d3:26:26:85:47:b6:67:bb:
                    06:68:bd:af:b6:c5:ac:a4:93:11:60:74:67:69:b2:
                    6f:5f:11:e9:54:38:62:16:ff:5c:d0:df:ac:59:5f:
                    00:6f:6f:36:b7:05:97:b0:d8:32:4c:3f:2e:43:93:
                    17:4f:22:ba:fb:71:b2:5b:d4:22:65:f0:e1:e8:06:
                    9e:e8:e7:6d:c8:3e:cd:2c:77:b5:c2:a6:c8:df:6c:
                    ea:ed:13:14:1a:c8:10:1b:e2:f6:af:16:44:a5:77:
                    b5:37:7a:1a:02:1f:cb:f5:f0:e8:bc:17:08:cd:16:
                    8e:93:b7:ea:e5:a3:79:13:a7:41:36:99:57:d3:20:
                    81:88:ed:df:72:7f:92:b3:d4:8d:6c:b2:6b:0b:82:
                    00:0b:df:dc:90:d6:e1:0a:18:c5:ea:92:6b:1b:99:
                    47:a9:27:3c:9c:f9:a5:cf:3a:f4:9e:49:6d:5e:0d:
                    b7:d2:1b:61:7e:b7:cd:c7:98:d1:e4:ae:21:52:d5:
                    ca:97:41:8b:c4:96:01:79:11:97:92:5d:ba:18:60:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:97:5B:1F:54:30:BD:AA:51:63:E6:E9:23:EA:14:6B:AB:42:A4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         92:47:24:da:31:75:83:3d:4f:74:92:ea:f7:97:56:ff:62:80:
         64:98:ef:7a:8e:a2:cf:7b:70:1d:ac:a9:67:80:69:55:e0:5a:
         41:8f:a2:f8:78:f7:2c:20:4d:a8:96:13:9c:91:d0:a6:1b:e3:
         21:74:0d:a0:a4:56:9e:ae:75:e7:63:1c:90:15:30:85:ca:eb:
         c8:61:0c:30:4d:89:60:d3:f2:4c:00:ab:a1:04:cc:43:d3:a9:
         a5:d5:57:64:23:9e:62:ad:bd:09:a1:42:6e:90:53:92:60:fa:
         59:0a:35:5f:e8:a1:4f:fe:33:5b:a1:f9:f6:15:a1:e7:d1:fc:
         9b:44:ba:2c:ac:16:e5:10:49:aa:e4:c0:78:84:a1:19:66:c5:
         dd:eb:f3:47:4e:8d:b4:ed:54:0b:38:cb:d2:68:ab:ce:df:1e:
         d6:77:e1:76:e0:b7:01:b2:a4:28:38:2b:d7:ff:a3:16:93:20:
         be:cc:5b:49:60:ae:6f:2a:78:a3:fb:98:c1:03:06:7e:a9:a9:
         f2:c0:67:15:a0:48:69:3a:b4:e4:11:a5:fa:0b:54:b2:8b:bf:
         47:71:b5:a9:82:55:0b:71:55:4a:38:9f:52:6d:44:8f:67:62:
         ca:2a:f6:67:2b:7a:43:27:dd:62:99:a7:ab:7d:47:0c:2d:6c:
         33:d8:8d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:49 2026 by rpki-client