Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198250.roa
File:                     AS198250.roa (raw, json)
Hash identifier:          jBHmsYbc+Pi5aSbhJLoJ1bUo8RTzYKe3RZ/FvF01RqI=
Subject key identifier:   35:06:25:93:F0:6F:8A:7E:D0:3C:94:B2:FD:E7:63:4D:D9:2A:04:16
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0813F449932E80F8A3E2E567287930546B6D3089
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198250.roa
Signing time:             Thu 16 Apr 2026 02:46:43 +0000
ROA not before:           Thu 16 Apr 2026 02:41:43 +0000
ROA not after:            Thu 15 Apr 2027 02:46:43 +0000
asID:                     198250
IP address blocks:        169.40.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:13:f4:49:93:2e:80:f8:a3:e2:e5:67:28:79:30:54:6b:6d:30:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr 16 02:41:43 2026 GMT
            Not After : Apr 15 02:46:43 2027 GMT
        Subject: CN=35062593F06F8A7ED03C94B2FDE7634DD92A0416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:dc:4a:47:be:fd:92:3e:0e:4d:ca:fd:03:
                    c7:fa:b2:ba:d0:b3:81:a1:2c:be:7d:67:18:a3:c7:
                    02:9d:46:a0:42:4d:c6:e9:e7:e2:d1:9c:de:7b:c5:
                    12:a9:85:c4:5a:d4:31:3f:37:2d:d5:4c:4e:9b:5a:
                    6c:c6:a3:ef:bd:54:df:bb:ea:67:07:f2:96:74:a9:
                    b0:3c:a1:b3:36:e2:14:8d:4b:f3:a0:ea:5c:d1:4b:
                    9b:35:5c:d8:3b:33:d6:ab:cc:3b:f9:ea:c4:3d:40:
                    53:df:bc:1d:e4:02:df:26:d4:b8:4a:1b:27:9e:23:
                    ea:2c:b9:61:f4:05:35:fd:c3:d6:fc:21:ab:b8:7d:
                    ba:26:f5:ce:00:41:ff:35:0b:74:cd:75:91:ef:72:
                    05:ea:26:46:74:42:52:b6:d1:be:90:b9:79:45:9f:
                    cf:a5:3f:65:39:c4:37:17:bc:4c:7e:a0:10:db:44:
                    a9:2d:bc:d7:18:ad:45:95:74:a3:37:57:1a:f7:93:
                    c5:96:0c:03:f1:05:49:1e:b6:70:ee:82:04:f6:c5:
                    8f:d0:04:04:42:9c:26:3a:de:89:3f:dd:f6:a8:8e:
                    38:0e:0a:03:93:c3:2f:26:a2:9e:31:38:9d:5f:31:
                    c5:89:27:63:a2:6d:3a:90:3a:cc:aa:0d:24:79:7a:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:06:25:93:F0:6F:8A:7E:D0:3C:94:B2:FD:E7:63:4D:D9:2A:04:16
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198250.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:11:be:1c:6a:fc:a4:10:0d:74:e3:25:2b:c7:19:3d:74:bc:
         c1:1c:9e:a4:97:60:8a:0c:b8:ad:aa:74:6f:f5:0d:00:9a:0e:
         19:56:14:3d:82:3d:64:0e:b4:09:90:7a:89:e6:14:84:12:5e:
         d3:96:50:c7:0a:56:7d:54:0e:36:bf:52:ca:fa:a0:49:b7:9e:
         7b:9a:7b:a9:c2:7d:85:6b:18:f3:44:55:be:bf:c4:44:ee:d9:
         b0:22:cd:ca:64:4f:a9:5e:9a:86:cb:92:c5:4e:02:72:7a:5a:
         89:f8:82:12:c1:49:de:31:66:1e:3e:c8:6e:84:ca:37:8b:e8:
         c0:b9:b1:b8:85:2e:c1:0b:de:30:3e:63:19:15:eb:43:34:08:
         f4:06:14:fa:af:fb:d1:65:13:2e:dc:03:30:4d:54:d7:80:6c:
         d3:79:c3:5c:8c:86:e9:bd:2a:af:ac:7f:83:0e:c6:4b:78:dd:
         26:9e:60:c3:fe:28:5a:9f:4b:b8:be:d6:5b:0b:b6:d2:72:0d:
         75:d1:14:81:c8:bd:6f:da:9b:29:30:44:86:8e:28:a2:b6:70:
         0f:92:94:6f:4d:95:69:01:22:fa:0d:15:23:00:8e:0f:1f:3d:
         3a:b7:9d:42:20:44:8a:3f:31:29:9a:aa:4a:db:0f:39:75:a1:
         2a:b3:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:54:46 2026 by rpki-client