Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          xvu6pxg3xEk0w0s64hU9sV5ZO1kdF1jOqFGY9wZrUMY=
Subject key identifier:   E4:B8:2A:6D:CB:0F:D3:7F:B9:76:96:F2:67:04:8C:DA:1C:54:85:ED
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3A2F51842B8B191D2884F0D6AD47EAD5E5743CE2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS174.roa
Signing time:             Thu 16 Apr 2026 08:29:12 +0000
ROA not before:           Thu 16 Apr 2026 08:24:12 +0000
ROA not after:            Thu 15 Apr 2027 08:29:12 +0000
asID:                     174
IP address blocks:        169.40.97.0/24 maxlen: 24
                          169.40.99.0/24 maxlen: 24
                          169.40.108.0/24 maxlen: 24
                          169.40.113.0/24 maxlen: 24
                          169.40.118.0/24 maxlen: 24
                          169.40.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:51:84:2b:8b:19:1d:28:84:f0:d6:ad:47:ea:d5:e5:74:3c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr 16 08:24:12 2026 GMT
            Not After : Apr 15 08:29:12 2027 GMT
        Subject: CN=E4B82A6DCB0FD37FB97696F267048CDA1C5485ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:af:5d:b4:0b:bc:1f:09:94:4e:95:40:af:eb:
                    7c:af:bc:4e:60:26:3b:2d:b6:00:39:15:e8:32:93:
                    f4:0d:55:1b:db:a5:6d:3f:2f:12:24:71:bf:26:20:
                    dd:c5:cf:0b:8f:01:4c:05:d1:97:c9:c5:ac:34:0f:
                    3e:c3:e3:e2:d7:30:29:12:e1:f6:a5:6b:74:08:c7:
                    84:42:4c:7c:ac:d4:dc:fc:43:c4:4a:d5:97:9e:9b:
                    60:ec:00:03:a2:18:bc:03:96:e2:4e:72:b9:ad:91:
                    02:39:20:d1:cc:25:98:6f:84:66:df:24:68:01:c3:
                    57:df:8d:de:65:46:33:89:d1:0b:7a:91:35:fe:e8:
                    2e:00:5b:33:98:9a:06:51:af:df:13:66:d2:01:03:
                    2c:ad:27:b9:c2:4e:72:71:e7:68:aa:67:90:44:be:
                    72:e9:d2:85:b2:3e:31:14:68:93:90:c2:e3:4e:27:
                    3c:ff:ae:35:8b:87:a8:2b:13:32:c7:01:c1:ba:03:
                    2d:aa:f6:6b:07:7d:5a:5f:30:ae:64:56:52:2b:b2:
                    c9:a6:d5:a1:04:1d:0d:fa:5f:44:d1:72:fa:2d:af:
                    10:ed:86:9d:4e:cc:46:7a:25:81:31:f9:76:c1:3a:
                    b6:e4:69:3a:01:51:c1:61:f1:9e:ea:6b:31:6a:8e:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B8:2A:6D:CB:0F:D3:7F:B9:76:96:F2:67:04:8C:DA:1C:54:85:ED
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.97.0/24
                  169.40.99.0/24
                  169.40.108.0/24
                  169.40.113.0/24
                  169.40.118.0/24
                  169.40.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:d9:79:1f:d6:f1:b6:ca:d6:e1:12:e3:62:c0:33:4f:8e:
         c9:2b:f4:6b:dd:d4:77:8d:f7:ad:47:28:6b:72:f2:04:7e:50:
         6e:ac:ce:70:d0:8b:df:9b:1d:a6:01:43:28:c1:ff:58:3c:c9:
         60:12:f0:b5:b3:9b:fc:ee:9f:67:ab:ff:43:12:e1:1d:d7:ce:
         a1:62:43:a6:0b:08:6e:e0:b3:9e:87:b9:ee:08:77:c6:f4:2e:
         60:96:e9:be:73:51:2f:34:28:77:33:ec:6c:87:4c:88:59:5e:
         86:c4:ef:23:7b:ee:eb:a7:74:61:8a:1f:08:88:43:72:9c:65:
         ce:3a:6b:93:4d:9b:89:03:fb:3d:4a:45:be:96:8d:3e:7e:89:
         00:d5:43:27:67:e9:c8:da:7e:00:ab:1d:15:a3:4e:82:b2:35:
         21:3f:3d:b3:19:3a:72:f5:f6:12:e9:c3:b5:6f:03:a6:9b:40:
         68:a7:d5:30:ce:72:35:7d:76:81:c4:0e:57:33:ca:b0:c4:e5:
         e4:fe:da:be:56:9d:6d:c9:ed:11:96:1b:99:2c:06:99:a6:1b:
         42:8f:5c:d0:8f:55:ad:1e:67:31:ac:b4:9f:43:13:b2:8e:b8:
         5b:cb:5b:33:a3:39:4a:e4:2b:5d:85:f7:ef:e4:dc:ec:97:31:
         90:76:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:35:22 2026 by rpki-client