Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205886.roa
File:                     AS205886.roa (raw, json)
Hash identifier:          20MaUG27OKETrP/vlQjopdyTMX6RF5FiopBINMsr3gc=
Subject key identifier:   7E:85:64:F7:9F:FC:E3:9D:5C:68:27:FC:0E:79:8A:DD:18:10:22:62
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5D6BA718888A09569202ECEFC6AAF60BC031604B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205886.roa
Signing time:             Thu 02 Apr 2026 05:48:40 +0000
ROA not before:           Thu 02 Apr 2026 05:43:40 +0000
ROA not after:            Thu 01 Apr 2027 05:48:40 +0000
asID:                     205886
IP address blocks:        169.40.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6b:a7:18:88:8a:09:56:92:02:ec:ef:c6:aa:f6:0b:c0:31:60:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr  2 05:43:40 2026 GMT
            Not After : Apr  1 05:48:40 2027 GMT
        Subject: CN=7E8564F79FFCE39D5C6827FC0E798ADD18102262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:de:9a:c8:3c:9b:a0:34:00:d2:0a:e2:49:f4:
                    8d:3a:1e:5a:6b:73:df:0e:b6:53:e8:2d:9d:8a:d5:
                    b6:ab:80:78:69:96:77:0f:00:c8:69:5e:57:29:ea:
                    bc:ff:bd:94:90:97:00:7f:2a:38:30:f8:c3:b1:47:
                    91:5c:28:7d:2d:ab:e0:4b:a6:f4:4c:e2:b6:44:97:
                    18:82:0a:6f:77:db:22:fe:1d:25:21:f0:2c:78:6a:
                    f6:89:ed:42:ea:aa:2f:23:a3:3f:60:1d:54:c9:8c:
                    71:ff:98:8b:f4:ad:4d:cc:ec:f0:f3:44:9c:74:b9:
                    dc:44:1b:e4:5c:aa:7e:83:b2:e3:00:02:05:61:f3:
                    a0:62:f8:6a:be:07:22:5f:b9:7c:f6:6e:e6:fb:ed:
                    0a:c4:b4:72:82:de:38:31:5a:13:dd:59:51:42:e0:
                    76:03:76:a0:16:04:7e:3c:90:f2:c7:80:3e:55:68:
                    c3:1f:6e:4a:2a:16:29:7e:bd:51:27:6a:59:e6:cf:
                    34:31:1b:1c:ea:5f:24:f5:55:83:3b:db:f3:68:13:
                    c5:03:9d:95:8c:57:18:ad:51:cc:2e:7a:78:f5:29:
                    1a:5d:aa:fb:37:95:4c:80:61:04:61:6c:db:70:61:
                    cb:ec:27:7e:c3:5b:5f:39:26:15:0f:8c:f3:76:ec:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:64:F7:9F:FC:E3:9D:5C:68:27:FC:0E:79:8A:DD:18:10:22:62
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:3d:3b:13:ae:28:b2:2d:37:17:90:6a:3f:3e:f5:df:bb:
         d3:10:93:d0:c1:b3:73:7f:bd:97:44:3b:2c:5a:ed:a8:05:9f:
         ca:e4:cd:77:8f:3a:69:81:0a:b7:79:87:a5:75:57:e2:b0:b9:
         e2:d0:ca:f9:88:43:46:ba:bd:ed:30:cc:89:4e:8e:51:83:f2:
         ae:dc:02:79:92:5d:df:16:dd:1d:5f:d1:47:8f:44:e4:df:95:
         94:07:28:5b:32:1a:87:70:e2:c0:2c:5e:d8:d8:dd:13:cf:bc:
         f1:df:cb:6f:82:75:71:17:fc:3f:35:e5:90:ff:33:ed:b3:f5:
         91:b2:dd:31:ba:a2:bb:8d:a6:ef:dd:c3:4b:d5:13:7f:47:71:
         3d:1e:69:6a:7e:a7:0f:27:62:0d:c9:90:99:ca:c5:c7:11:81:
         e3:f8:dc:5e:60:be:65:63:35:3d:1f:bc:fa:b2:b7:5a:d0:98:
         f2:31:4d:e9:e3:74:e0:ac:95:ff:8d:1b:9a:e4:92:56:42:60:
         00:e1:c3:12:af:7a:10:9d:46:92:9e:af:7e:cc:cb:46:b7:ec:
         86:d0:9c:3d:5f:8a:3f:7d:6d:6e:e0:15:f2:50:54:01:ca:e6:
         43:66:cc:1f:4d:a9:08:7c:72:76:f4:c6:6d:4f:b3:28:2b:d9:
         6b:05:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:55:23 2026 by rpki-client