Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218736.roa
File:                     AS218736.roa (raw, json)
Hash identifier:          8FJ5K6/rWqyTVo/Q3ZA4GaKnYSWGZKwPnb3HH1mXb6w=
Subject key identifier:   AD:5A:0F:33:A0:86:BF:6B:DC:51:7C:10:75:7D:56:5E:8B:C3:67:7E
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2E5267F9E71DE0FF19D786A9CDF05CC88D546CCC
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218736.roa
Signing time:             Tue 03 Nov 2026 02:50:57 +0000
ROA not before:           Tue 03 Nov 2026 02:45:57 +0000
ROA not after:            Tue 02 Nov 2027 02:50:57 +0000
asID:                     218736
IP address blocks:        13.141.51.0/24 maxlen: 24
                          169.40.37.0/24 maxlen: 24
                          169.40.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:67:f9:e7:1d:e0:ff:19:d7:86:a9:cd:f0:5c:c8:8d:54:6c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  3 02:45:57 2026 GMT
            Not After : Nov  2 02:50:57 2027 GMT
        Subject: CN=AD5A0F33A086BF6BDC517C10757D565E8BC3677E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7d:42:b6:d2:86:8e:23:ad:b6:bd:48:b9:cc:
                    55:1f:bd:b6:f8:1e:99:90:b6:56:4b:30:6c:16:8b:
                    c0:67:7b:62:a5:a2:47:5f:eb:d6:7d:bc:6b:bb:25:
                    fb:80:a9:4e:c4:84:cb:8b:73:2b:e2:5a:23:e5:8a:
                    bc:86:c5:a3:13:22:a7:4a:db:36:c7:31:9f:f0:97:
                    ec:14:21:55:1f:85:21:7c:c0:f9:40:01:ea:46:3d:
                    5f:75:69:dc:e8:9c:a3:d0:31:ed:94:38:64:48:74:
                    e6:1f:12:17:b5:bd:a8:fa:1f:c6:ae:5c:4a:09:6f:
                    a7:b4:44:f7:64:67:91:f5:bf:35:6c:a9:79:46:84:
                    33:4b:00:73:90:19:18:7c:f1:bd:d8:e0:0f:02:db:
                    92:2c:ad:c3:96:85:58:27:94:3e:bc:a1:e0:3c:3a:
                    3d:7f:c2:d6:20:b7:de:ec:b9:3d:54:ea:d3:94:2a:
                    ea:e5:b1:8f:e7:4f:ae:18:16:88:5b:14:6f:69:82:
                    84:c0:3b:17:61:3c:50:23:23:9c:fd:7e:10:b1:96:
                    5d:aa:d8:6e:ee:60:a4:fe:37:42:04:dd:86:61:d2:
                    cd:f0:a5:c4:9b:6f:94:39:30:1e:69:38:46:00:c9:
                    66:b8:6a:5d:92:aa:c2:35:84:30:2d:a1:a0:d4:70:
                    27:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5A:0F:33:A0:86:BF:6B:DC:51:7C:10:75:7D:56:5E:8B:C3:67:7E
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.51.0/24
                  169.40.37.0/24
                  169.40.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:3c:6b:ea:a7:c8:2f:aa:5d:ff:63:7a:e3:9d:2b:d5:97:
         ee:97:08:34:a9:ff:da:4c:93:f3:f2:a6:a5:1d:c1:ec:f5:57:
         05:03:4c:96:dc:bd:f6:38:c1:4d:86:34:18:c2:ed:1e:5b:99:
         84:1c:6e:a3:43:e1:be:93:ce:67:37:a1:08:5f:43:51:ba:b5:
         9a:47:cc:a2:81:df:f9:19:9a:06:ee:78:60:1f:d7:28:64:3d:
         ee:cd:70:ad:5c:09:99:46:fe:4a:17:b5:5c:ca:df:36:9f:42:
         1b:a0:4a:bf:3f:67:9b:dc:58:22:05:9a:f1:d2:f7:36:a8:ad:
         4a:ae:77:20:bc:f1:76:ee:0c:fb:4b:79:78:fc:f0:40:9f:a3:
         98:c8:5e:2a:cd:8d:95:4c:92:e2:d8:91:51:ad:5b:62:6d:0c:
         fc:80:56:df:11:ce:50:64:f2:4b:78:3e:a4:29:ad:ca:72:42:
         a7:91:36:ac:5a:89:27:d8:04:24:d0:38:36:bb:00:0e:cf:00:
         92:cd:55:39:ca:41:ea:93:aa:9b:00:77:05:bb:e3:d0:9e:47:
         cd:1b:a8:d3:34:1e:28:c3:e3:75:f6:ce:9c:91:b2:3d:1a:a3:
         e1:d6:8a:45:0d:57:94:a9:97:86:19:88:81:f7:e4:84:1d:4b:
         a2:a1:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:28 2026 by rpki-client