Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS210697.roa
File:                     AS210697.roa (raw, json)
Hash identifier:          bz+5pPFzQBtgaFeMxA9NJyHHH2Ni66c1pMajl/bDKDw=
Subject key identifier:   9B:A9:A5:2E:1D:A9:D4:AC:7E:54:43:16:2D:4E:7E:5B:75:4F:4B:1F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       19EB8724A21E94E86D7471FD493B997054C0F99B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS210697.roa
Signing time:             Thu 15 Oct 2026 04:28:39 +0000
ROA not before:           Thu 15 Oct 2026 04:23:39 +0000
ROA not after:            Thu 14 Oct 2027 04:28:39 +0000
asID:                     210697
IP address blocks:        13.141.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:eb:87:24:a2:1e:94:e8:6d:74:71:fd:49:3b:99:70:54:c0:f9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 15 04:23:39 2026 GMT
            Not After : Oct 14 04:28:39 2027 GMT
        Subject: CN=9BA9A52E1DA9D4AC7E5443162D4E7E5B754F4B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:65:60:c9:6f:15:a9:33:ee:57:e1:47:43:
                    8f:a5:23:44:78:1c:0d:8a:2d:a9:96:a1:71:5e:f8:
                    78:ce:fc:c1:b9:a9:46:14:07:26:b0:d3:70:a9:03:
                    a9:bc:d2:11:3a:ee:61:47:e6:99:03:7b:33:48:3d:
                    4f:91:21:14:f1:48:0e:6e:2b:0f:d7:17:e4:a0:16:
                    39:ab:30:bd:56:b6:be:94:c1:e9:c7:04:71:24:1b:
                    9d:1b:f4:e6:cb:a0:f1:aa:9f:99:ff:e5:db:9e:63:
                    7b:5a:8f:80:e3:c9:44:4d:02:82:38:85:61:22:4f:
                    08:c6:c7:26:37:6e:07:6d:ba:15:96:5d:d1:d3:48:
                    ec:a6:71:cb:f5:47:79:9c:51:50:14:c6:93:5c:db:
                    67:94:ba:2b:78:48:18:e5:c3:ba:7a:e0:9d:0b:55:
                    96:6a:f9:2b:b3:6f:8c:00:12:53:29:2c:de:23:25:
                    b9:2c:05:9e:07:db:b6:d4:d4:40:69:36:30:f0:b9:
                    d3:4d:df:b4:26:e8:c0:70:b7:03:3d:74:95:98:63:
                    d1:e2:1d:ff:37:a2:24:53:c6:c5:8d:34:05:14:68:
                    b1:91:26:f3:50:c2:36:1c:90:86:9d:5e:a6:ab:a1:
                    90:73:72:52:78:ec:ab:0e:31:80:ad:09:38:07:46:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:A5:2E:1D:A9:D4:AC:7E:54:43:16:2D:4E:7E:5B:75:4F:4B:1F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS210697.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:72:7d:e7:da:7a:84:7f:10:b6:51:21:b3:aa:d6:d5:9c:d3:
         20:21:42:14:eb:6b:10:73:c9:e9:a0:71:b5:6d:67:9f:76:a5:
         ec:9d:d2:ce:54:91:6a:48:47:25:e8:c5:c0:4b:49:2e:31:62:
         4a:d0:3e:f0:cd:33:f8:e5:d2:be:f9:27:47:15:e0:8a:d4:12:
         28:6e:d3:29:73:8e:9b:62:19:4f:69:f0:86:75:e8:e1:e3:a7:
         b5:7b:ac:e2:a1:b1:07:da:6b:8b:df:d1:c5:7d:e4:01:f8:98:
         27:48:80:b3:c3:7b:ca:49:63:83:fc:68:7e:ed:7a:82:b4:57:
         fc:af:f7:8e:93:8d:2e:01:c9:2f:ce:ae:ca:78:34:c7:60:74:
         81:be:cc:c2:b2:8f:88:70:fd:6c:e4:6a:c7:b7:ed:0b:88:ac:
         ae:7b:43:41:60:61:de:bd:7c:ba:f7:4a:ff:5a:47:ba:72:3a:
         bd:b3:fa:04:a9:82:7c:aa:ec:7c:1d:3e:c2:9e:07:d0:65:c0:
         47:e0:d5:f5:93:14:bd:63:b2:96:c3:d4:6d:1f:17:30:30:d9:
         c1:e6:ba:38:7f:0e:60:a6:13:0a:44:bb:2d:63:a9:d6:82:04:
         85:1e:ef:26:30:12:4d:b4:7b:36:3f:de:ef:e5:d4:c7:f4:17:
         1a:02:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:06:20 2026 by rpki-client