Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          VFeIwTjJ6xVzq2FWoUyoScVvbAnzNWiQeG/9dfZNC1Q=
Subject key identifier:   1D:A0:33:C6:8D:E5:9E:2D:84:DB:FE:4E:C4:F0:35:27:33:CA:EC:F9
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6E9189B44659E5884D0E018C4CB654804C150FB3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa
Signing time:             Tue 26 May 2026 12:41:32 +0000
ROA not before:           Tue 26 May 2026 12:36:32 +0000
ROA not after:            Tue 25 May 2027 12:41:32 +0000
asID:                     13335
IP address blocks:        169.40.40.0/23 maxlen: 23
                          169.40.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:91:89:b4:46:59:e5:88:4d:0e:01:8c:4c:b6:54:80:4c:15:0f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 26 12:36:32 2026 GMT
            Not After : May 25 12:41:32 2027 GMT
        Subject: CN=1DA033C68DE59E2D84DBFE4EC4F0352733CAECF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:a9:71:c1:89:49:90:1b:11:b0:91:5b:de:
                    6f:b1:de:67:bb:28:30:11:e2:d4:f8:00:9c:b9:ee:
                    2d:dc:e7:ba:55:a3:81:f7:9f:3b:12:ab:14:48:b9:
                    a8:1c:bd:40:3c:1b:9d:ce:82:8e:57:45:c4:5f:17:
                    1d:6c:57:79:f8:59:d9:f9:57:da:c8:02:2e:af:75:
                    b0:87:31:8b:5b:a6:7e:ed:10:12:c6:e4:9f:87:a5:
                    1f:f8:7d:1e:1c:87:15:5a:1d:89:79:39:96:6d:eb:
                    a6:4a:33:ad:e9:c5:27:4b:36:b5:b4:d7:f2:17:60:
                    f2:9a:fc:9e:d2:03:69:f7:ab:14:c7:0e:b6:8f:bf:
                    f9:4e:1f:69:0d:6b:7d:18:cf:94:f1:bb:01:6a:34:
                    e6:fc:e5:71:0d:b5:cf:aa:89:ad:25:d2:c7:eb:65:
                    43:d9:a0:73:cd:a5:74:d5:0c:06:81:e3:46:9d:70:
                    e7:7e:d4:1f:5a:45:a8:e2:b7:0c:48:34:74:d7:71:
                    2a:fa:79:28:90:74:7f:94:75:d6:8c:b5:81:b6:58:
                    f6:d8:7a:c6:9a:fe:7d:8a:cd:e5:bc:8c:68:de:59:
                    c5:e1:1f:92:47:73:1d:cd:c1:31:19:24:47:6c:b7:
                    5b:15:5c:1a:2e:d9:03:67:28:bd:ce:9c:0b:79:bd:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:33:C6:8D:E5:9E:2D:84:DB:FE:4E:C4:F0:35:27:33:CA:EC:F9
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.40.0/23
                  169.40.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2a:e6:71:0b:aa:03:a7:48:82:8c:64:ff:1c:81:02:2e:01:
         25:10:b1:2e:1e:09:ad:9f:56:a8:cb:63:0c:b8:23:2e:42:24:
         4f:7a:46:9b:df:ac:7b:64:08:d8:2d:bc:38:dc:e1:11:74:93:
         25:ea:65:e2:19:d5:9b:47:bb:5e:63:e8:07:81:5d:87:51:43:
         e9:8f:94:a9:91:f7:87:e8:4d:4a:cb:a7:9a:21:f2:11:7a:9a:
         f4:04:0e:d8:5b:e9:04:f8:69:1e:f7:6c:5d:9a:e2:93:95:6d:
         3e:66:0b:7a:2e:03:d8:21:ac:d8:50:13:7c:c6:3f:df:87:78:
         94:e9:d1:f6:8c:34:c6:23:89:ee:20:be:31:b9:8d:f3:7b:5e:
         8b:99:58:e8:ce:f4:fa:35:a1:e6:e5:77:c8:c1:b5:01:55:d1:
         b9:7a:36:c7:ca:b1:f6:4d:a1:bc:bc:20:c7:63:6b:52:ed:80:
         e1:5e:5b:a6:67:07:fb:44:38:66:0e:c6:8c:55:41:e8:10:96:
         c0:26:2b:5b:a0:14:7e:56:02:97:4f:9f:be:4b:00:9e:c7:7b:
         81:37:98:2a:65:08:3c:c3:5d:0e:d8:3c:34:17:4d:81:d0:4f:
         2d:39:d0:9d:fc:2a:39:18:05:f9:d9:fb:72:ad:de:b5:b4:c0:
         89:85:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:36 2026 by rpki-client