Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS12083.roa
File:                     AS12083.roa (raw, json)
Hash identifier:          FZcI35QpFmw0EOgxA8HuLLVNf89ZLxaVSTDpWLB8f2E=
Subject key identifier:   7D:85:BA:74:F6:D5:66:4E:D0:68:FE:7C:A1:6F:09:75:14:1F:0B:E8
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       663677849030D5D32673EE40C42E247EB63DE201
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS12083.roa
Signing time:             Fri 23 Oct 2026 00:00:46 +0000
ROA not before:           Thu 22 Oct 2026 23:55:46 +0000
ROA not after:            Fri 22 Oct 2027 00:00:46 +0000
asID:                     12083
IP address blocks:        169.40.144.0/24 maxlen: 24
                          169.40.145.0/24 maxlen: 24
                          169.40.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:36:77:84:90:30:d5:d3:26:73:ee:40:c4:2e:24:7e:b6:3d:e2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 22 23:55:46 2026 GMT
            Not After : Oct 22 00:00:46 2027 GMT
        Subject: CN=7D85BA74F6D5664ED068FE7CA16F0975141F0BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:62:72:8e:57:56:89:70:56:49:5a:2c:f3:
                    09:56:6e:26:54:46:9b:38:b9:d9:45:e9:60:5b:39:
                    09:5f:e5:e9:fc:59:61:0c:8c:fe:41:14:a6:26:b1:
                    74:fc:46:6f:a2:fc:a3:61:df:4c:a2:92:14:98:93:
                    c5:21:8c:cc:47:ff:29:a7:ec:53:1d:d9:bf:82:0f:
                    8e:72:4f:7a:81:75:1c:43:79:fd:21:25:66:eb:8b:
                    5e:37:29:80:e4:19:09:ce:d0:d0:31:a6:85:5e:e2:
                    f0:3c:db:f7:df:59:0e:24:fc:4a:eb:fd:7e:24:4f:
                    c0:67:1b:80:d8:7e:d8:3a:c3:d9:69:83:b2:ca:13:
                    61:a8:f1:b7:ce:c4:a9:51:c9:db:d3:df:66:b3:df:
                    b1:ae:0e:7e:27:aa:40:db:b3:93:f8:6c:fa:55:62:
                    4c:00:77:e8:56:11:7b:52:bb:14:77:f5:10:c6:60:
                    b6:b3:e7:e1:f4:c2:ef:72:be:4c:28:2a:e6:d2:3a:
                    bc:de:b5:3c:66:98:3b:5d:83:ea:9d:8e:e5:bf:c1:
                    55:ee:04:a6:59:39:89:49:03:96:28:2e:73:91:34:
                    31:8f:e6:8c:fa:00:93:0e:3d:c1:2a:1f:a3:83:4e:
                    e1:20:4f:47:f3:d5:61:09:de:d5:ed:08:17:2e:2f:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:85:BA:74:F6:D5:66:4E:D0:68:FE:7C:A1:6F:09:75:14:1F:0B:E8
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS12083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.144.0/23
                  169.40.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:81:f6:c8:f8:8f:ee:b6:d6:d7:d4:e0:f4:b4:41:3d:6c:
         1d:ce:3c:a4:3c:93:40:65:06:86:f7:75:5e:9d:9c:b8:b1:18:
         0a:23:db:56:88:4e:26:10:89:12:c1:1b:4c:b9:ad:c1:55:af:
         b5:6b:16:ba:dd:b7:4f:32:ea:92:cc:46:24:b4:6b:cc:1d:86:
         85:71:e7:36:22:94:5a:12:63:74:7b:e6:3e:1f:d4:a3:6c:28:
         4c:ff:6e:7c:f6:c7:c4:f5:75:78:23:dc:f0:c9:dd:48:5e:e4:
         3d:be:95:cd:b1:2c:cc:7a:33:82:59:b0:88:34:0c:9e:3e:85:
         3d:a6:d7:63:da:5d:15:ac:2f:04:f6:54:0a:c4:99:7f:f3:55:
         47:68:94:68:6c:63:24:eb:3d:78:ee:b1:b8:3b:8a:db:39:f4:
         1c:4e:ec:32:d6:4f:02:80:19:d2:2e:af:03:92:6a:a2:db:6a:
         ba:8e:de:e5:47:3c:e5:db:d8:fe:20:91:19:98:22:2a:fb:bf:
         c3:37:c8:4e:3e:13:34:8c:ad:6b:6a:5b:ec:5d:80:1f:e6:8b:
         0e:c0:1a:f3:c2:04:60:97:cb:41:e9:9e:fd:94:4c:98:48:4a:
         49:a2:34:56:dd:f7:53:3e:f5:e1:2b:b5:ca:4a:99:33:b6:1a:
         6e:67:89:81
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZjZ3hJAw1dMmc+5AxC4kfrY94gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjEwMjIyMzU1NDZaFw0yNzEwMjIwMDAwNDZaMDMxMTAvBgNV
BAMTKDdEODVCQTc0RjZENTY2NEVEMDY4RkU3Q0ExNkYwOTc1MTQxRjBCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq2JyjldWiXBWSVos8wlWbiZU
Rps4udlF6WBbOQlf5en8WWEMjP5BFKYmsXT8Rm+i/KNh30yikhSYk8UhjMxH/ymn
7FMd2b+CD45yT3qBdRxDef0hJWbri143KYDkGQnO0NAxpoVe4vA82/ffWQ4k/Err
/X4kT8BnG4DYftg6w9lpg7LKE2Go8bfOxKlRydvT32az37GuDn4nqkDbs5P4bPpV
YkwAd+hWEXtSuxR39RDGYLaz5+H0wu9yvkwoKubSOrzetTxmmDtdg+qdjuW/wVXu
BKZZOYlJA5YoLnORNDGP5oz6AJMOPcEqH6ODTuEgT0fz1WEJ3tXtCBcuL2MlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfYW6dPbVZk7QaP58oW8JdRQfC+gwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzEyMDgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBqSiQAwQCqSi4MA0GCSqG
SIb3DQEBCwUAA4IBAQBF9YH2yPiP7rbW19Tg9LRBPWwdzjykPJNAZQaG93VenZy4
sRgKI9tWiE4mEIkSwRtMua3BVa+1axa63bdPMuqSzEYktGvMHYaFcec2IpRaEmN0
e+Y+H9SjbChM/2589sfE9XV4I9zwyd1IXuQ9vpXNsSzMejOCWbCINAyePoU9ptdj
2l0VrC8E9lQKxJl/81VHaJRobGMk6z147rG4O4rbOfQcTuwy1k8CgBnSLq8Dkmqi
22q6jt7lRzzl29j+IJEZmCIq+7/DN8hOPhM0jK1ralvsXYAf5osOwBrzwgRgl8tB
6Z79lEyYSEpJojRW3fdTPvXhK7XKSpkzthpuZ4mB
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:17:10 2026 by rpki-client