Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          TaYwiKmbPyXTbdARfb+e1DxRQuWkRQ/MXOZifSveR30=
Subject key identifier:   0F:00:AF:6C:5C:96:99:13:D8:41:98:76:99:61:ED:88:4D:DA:17:51
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       281EAA6423D8EFF7A381E1A8AADA3CDB801692B2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS14618.roa
Signing time:             Thu 15 Oct 2026 04:21:49 +0000
ROA not before:           Thu 15 Oct 2026 04:16:49 +0000
ROA not after:            Thu 14 Oct 2027 04:21:49 +0000
asID:                     14618
IP address blocks:        13.141.40.0/23 maxlen: 24
                          13.141.66.0/23 maxlen: 24
                          13.141.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1e:aa:64:23:d8:ef:f7:a3:81:e1:a8:aa:da:3c:db:80:16:92:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 15 04:16:49 2026 GMT
            Not After : Oct 14 04:21:49 2027 GMT
        Subject: CN=0F00AF6C5C969913D84198769961ED884DDA1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:ad:c4:7d:a8:f3:58:0c:e4:94:67:3e:b5:
                    d9:55:3c:75:4a:e3:d5:18:a1:71:77:72:31:43:da:
                    52:e3:da:e2:83:8f:27:02:4c:85:4c:be:38:1f:13:
                    bb:38:90:78:07:a6:7a:22:dc:44:7c:a3:b7:d7:0e:
                    32:c8:f5:8a:99:b1:91:84:24:6a:ac:47:ab:dd:b3:
                    63:18:04:a0:d2:39:6a:a7:12:9b:36:3a:fd:33:6d:
                    2e:67:e6:bb:5e:de:71:cb:d7:b1:c5:a2:2e:15:6b:
                    85:c4:c7:9c:c7:fc:9a:a7:e7:bd:a2:14:87:c6:3a:
                    31:bf:92:40:34:c0:59:00:19:9e:99:d7:d7:e9:12:
                    ce:b7:3b:29:8d:6e:d9:ba:43:da:f5:8f:57:97:f7:
                    24:9d:c2:1d:80:1d:42:bc:87:e4:c5:62:95:c7:29:
                    19:f5:da:ff:80:22:46:61:26:12:1b:8c:1a:bb:4e:
                    5e:3c:71:f2:c4:4e:6c:44:af:a9:0a:be:14:55:7c:
                    7c:52:03:8c:66:70:f1:50:a7:e7:35:cb:e3:fb:d9:
                    93:cb:0b:85:0f:87:23:bc:87:04:4d:8e:7c:2b:38:
                    7b:bc:b9:06:18:27:d0:05:b8:4b:39:03:7f:bf:3c:
                    de:d0:2a:c6:93:8b:0e:63:b3:f2:e4:25:26:37:e6:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:AF:6C:5C:96:99:13:D8:41:98:76:99:61:ED:88:4D:DA:17:51
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.40.0/23
                  13.141.66.0/23
                  13.141.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:7d:ed:fb:ae:c6:ab:51:e9:27:b2:5a:0b:44:e8:4d:95:
         03:e1:6b:7c:ef:db:96:14:1d:9b:57:4e:c9:c3:2f:b0:ad:61:
         04:cd:6f:42:c7:8a:f8:31:55:9d:6a:d2:ab:2c:4a:b9:71:58:
         3c:ae:0f:00:c5:cd:5c:79:9e:66:23:9b:67:65:6a:01:db:66:
         85:17:6c:b5:5e:a3:a9:24:71:d3:2f:5b:25:e5:f8:29:1d:60:
         47:8b:8a:bb:e9:1c:d2:5b:46:69:8d:22:53:21:fb:2c:18:1c:
         cf:97:f5:4a:ed:ec:e8:0a:84:d1:e7:38:ae:3f:e8:9f:7e:b1:
         27:3b:91:aa:3e:9d:68:a9:22:80:bf:a4:a2:1b:d5:ae:3e:5f:
         28:10:9a:98:4e:59:76:36:18:dd:1b:c0:91:3c:75:88:83:7e:
         9b:0e:61:ce:db:c3:3b:07:72:c2:5c:e8:ba:51:f5:0e:5a:6b:
         15:2b:13:18:54:d3:37:10:ad:c1:5e:63:7a:2f:26:28:dd:78:
         27:18:40:ea:1d:66:af:c1:e3:0b:c3:77:6a:83:a5:18:39:74:
         66:b2:13:8f:88:d5:66:fb:75:35:d4:55:cf:d4:56:ae:5a:48:
         f6:ee:df:a0:f2:24:60:5d:08:3c:eb:58:4e:48:c4:3a:68:d1:
         86:c7:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:30 2026 by rpki-client