Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS149978.roa
File:                     AS149978.roa (raw, json)
Hash identifier:          6uU/I5DpRYh3yX/v+vZnaNuW5Kwh3SzaDIieqqQlcbU=
Subject key identifier:   98:7A:8F:95:97:87:60:A5:78:62:7F:18:D4:98:37:84:6F:5B:79:EE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       608B85EA19B47C68CADD3C3DBBC6CFFF75506367
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS149978.roa
Signing time:             Fri 29 May 2026 12:27:38 +0000
ROA not before:           Fri 29 May 2026 12:22:38 +0000
ROA not after:            Fri 28 May 2027 12:27:38 +0000
asID:                     149978
IP address blocks:        169.40.52.0/22 maxlen: 24
                          169.40.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:85:ea:19:b4:7c:68:ca:dd:3c:3d:bb:c6:cf:ff:75:50:63:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 29 12:22:38 2026 GMT
            Not After : May 28 12:27:38 2027 GMT
        Subject: CN=987A8F95978760A578627F18D49837846F5B79EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d4:f0:2c:7c:ff:0f:ed:a5:33:47:b0:6e:e8:
                    f2:f5:fa:56:46:27:3f:9b:a4:6a:b5:55:e8:83:f5:
                    d8:e3:ac:43:81:29:fb:00:82:3f:ae:77:05:9d:81:
                    cd:a3:24:89:af:dc:cc:bc:ee:48:46:96:37:c0:4c:
                    b8:d4:25:f2:ac:4a:ba:80:4a:80:14:16:04:94:3b:
                    08:78:4a:dc:a9:61:ac:83:e7:b5:b2:d8:6e:6b:b7:
                    87:57:0d:5d:a2:6e:0b:de:04:5a:17:58:42:95:7b:
                    80:2c:3d:58:98:6a:d8:e7:03:b5:35:46:fe:34:fe:
                    34:52:ca:ab:35:f5:e2:b4:1d:cb:9c:a5:32:b4:b9:
                    28:bb:97:52:66:02:16:f5:a7:fc:cc:ab:e6:36:76:
                    e9:ef:51:97:28:08:b2:bf:38:db:22:5d:d0:61:13:
                    ef:de:49:9d:f9:27:2f:30:34:42:0e:3f:b2:42:ab:
                    0f:da:f8:6f:ce:a4:2f:d5:40:31:3c:1f:04:b8:e8:
                    25:74:44:0d:60:46:b5:3c:e3:ba:dc:c1:ed:96:bb:
                    c9:fe:d3:e1:2f:ea:25:4c:37:4a:22:95:ec:24:fb:
                    11:d9:4c:8a:b7:46:14:c3:10:66:29:e8:22:f2:c5:
                    4e:cf:8e:c3:22:72:32:5e:7a:d9:3b:73:c1:ce:3e:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7A:8F:95:97:87:60:A5:78:62:7F:18:D4:98:37:84:6F:5B:79:EE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS149978.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.52.0/22
                  169.40.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:01:6a:0e:81:64:97:24:3d:41:af:81:58:ed:5a:0c:5b:
         88:0d:c8:58:14:c6:6a:18:cb:54:9a:5c:e5:3a:1e:2f:6c:3d:
         c9:46:24:08:0c:24:7a:a6:42:7f:bd:16:47:55:bd:16:b7:db:
         65:73:83:31:25:7b:6d:81:f0:bc:61:92:05:e4:96:32:ed:19:
         0f:97:95:ca:1e:58:c6:67:9b:45:7f:85:38:48:85:d1:bd:ac:
         d8:d0:b7:04:b4:80:72:60:7d:f6:3b:c0:0d:9e:53:b9:93:e0:
         5e:a2:84:66:2c:0b:8b:7a:76:35:a1:11:e9:e3:f6:40:3c:6e:
         33:12:9c:5e:09:0b:73:9e:d3:e3:26:aa:0c:9b:11:e7:0e:10:
         65:56:16:fe:91:30:95:ea:f8:c4:8e:9f:76:7e:1d:a5:dc:42:
         db:92:28:24:93:a8:70:4a:56:e9:75:27:ed:b5:dc:a7:ba:b2:
         c0:b0:dd:1d:c5:35:12:73:84:6f:52:d3:6a:d9:ac:9a:03:06:
         a9:13:d2:bf:b5:84:0b:c1:66:51:d8:95:be:d8:e9:c2:18:17:
         ff:2e:2a:05:63:ad:7c:91:06:70:5f:75:a2:73:62:3c:55:68:
         d7:b3:97:cb:09:dc:d8:6a:8e:73:2f:da:36:e1:98:9a:61:60:
         62:69:d7:83
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUYIuF6hm0fGjK3Tw9u8bP/3VQY2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA1MjkxMjIyMzhaFw0yNzA1MjgxMjI3MzhaMDMxMTAvBgNV
BAMTKDk4N0E4Rjk1OTc4NzYwQTU3ODYyN0YxOEQ0OTgzNzg0NkY1Qjc5RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1PAsfP8P7aUzR7Bu6PL1+lZG
Jz+bpGq1VeiD9djjrEOBKfsAgj+udwWdgc2jJImv3My87khGljfATLjUJfKsSrqA
SoAUFgSUOwh4StypYayD57Wy2G5rt4dXDV2ibgveBFoXWEKVe4AsPViYatjnA7U1
Rv40/jRSyqs19eK0HcucpTK0uSi7l1JmAhb1p/zMq+Y2dunvUZcoCLK/ONsiXdBh
E+/eSZ35Jy8wNEIOP7JCqw/a+G/OpC/VQDE8HwS46CV0RA1gRrU847rcwe2Wu8n+
0+Ev6iVMN0oilewk+xHZTIq3RhTDEGYp6CLyxU7PjsMicjJeetk7c8HOPksfAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUmHqPlZeHYKV4Yn8Y1Jg3hG9bee4wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzE0OTk3OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAqkoNAMEAqkoPDANBgkq
hkiG9w0BAQsFAAOCAQEARPEBag6BZJckPUGvgVjtWgxbiA3IWBTGahjLVJpc5Toe
L2w9yUYkCAwkeqZCf70WR1W9FrfbZXODMSV7bYHwvGGSBeSWMu0ZD5eVyh5Yxmeb
RX+FOEiF0b2s2NC3BLSAcmB99jvADZ5TuZPgXqKEZiwLi3p2NaER6eP2QDxuMxKc
XgkLc57T4yaqDJsR5w4QZVYW/pEwler4xI6fdn4dpdxC25IoJJOocEpW6XUn7bXc
p7qywLDdHcU1EnOEb1LTatmsmgMGqRPSv7WEC8FmUdiVvtjpwhgX/y4qBWOtfJEG
cF91onNiPFVo17OXywnc2GqOcy/aNuGYmmFgYmnXgw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:34:36 2026 by rpki-client