Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218981.roa
File:                     AS218981.roa (raw, json)
Hash identifier:          OKRRyyv0UT6rYZwLEiCz0wsRnNauHX+w7ug0Nv6l5hw=
Subject key identifier:   38:2E:9D:BD:2E:BA:1D:4D:79:98:86:89:FE:EE:22:B3:59:E1:2A:2D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2B1CEDF61CC1A6AEF8E10DB3358540FA544B4646
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218981.roa
Signing time:             Thu 01 Oct 2026 15:19:15 +0000
ROA not before:           Thu 01 Oct 2026 15:14:15 +0000
ROA not after:            Thu 30 Sep 2027 15:19:15 +0000
asID:                     218981
IP address blocks:        169.40.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 08:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1c:ed:f6:1c:c1:a6:ae:f8:e1:0d:b3:35:85:40:fa:54:4b:46:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  1 15:14:15 2026 GMT
            Not After : Sep 30 15:19:15 2027 GMT
        Subject: CN=382E9DBD2EBA1D4D79988689FEEE22B359E12A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:f1:f9:97:f8:f4:eb:15:71:9b:d8:fc:d0:
                    31:b5:4b:e3:8a:11:7c:14:be:96:b1:ad:9f:59:65:
                    4a:b2:e5:c6:53:42:9a:e4:a6:e6:bf:71:9d:80:8c:
                    79:28:c9:f5:f9:f1:fc:0f:0f:4c:e3:c8:36:4a:f4:
                    e6:9e:75:62:c9:5b:83:61:54:44:31:ee:19:3c:f0:
                    dd:fc:d4:c8:6c:9d:8a:1e:57:1c:a7:51:09:65:50:
                    11:bd:1e:ea:f7:ed:77:60:cb:25:50:c4:0b:7e:36:
                    dd:b1:0a:70:ed:30:72:13:9b:d3:f3:db:b1:3b:d9:
                    17:b5:dd:68:ea:e3:b9:75:3d:ac:e2:3f:21:94:48:
                    6a:37:b5:91:14:67:22:bc:7a:8a:6f:7b:7e:ff:2e:
                    98:1f:70:c1:6b:04:40:85:8a:55:c7:b8:84:a8:ff:
                    0c:71:33:c2:3b:34:6e:85:b0:6a:1f:f1:03:e7:21:
                    2b:96:f1:21:54:76:e7:f0:44:0f:8d:71:e9:fa:52:
                    48:25:8f:94:1f:c7:f4:6c:39:f3:20:30:02:da:e4:
                    57:19:d6:03:dc:d7:75:84:a2:99:ca:40:f7:18:f0:
                    d8:51:62:a3:a5:da:70:8c:88:63:a3:45:03:d5:69:
                    ac:0a:6c:d4:c7:0c:0e:27:e8:72:b8:9f:3e:c6:5e:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2E:9D:BD:2E:BA:1D:4D:79:98:86:89:FE:EE:22:B3:59:E1:2A:2D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:d2:cc:50:d5:ee:ad:24:27:1a:a6:bd:09:a6:91:5e:b5:
         82:10:a2:a9:4d:0c:09:17:78:46:5c:82:31:77:b1:9f:16:5b:
         a1:26:e1:a9:bd:06:1f:6e:fe:cf:28:8b:d3:53:df:93:2e:61:
         48:f4:88:7d:04:3d:89:7f:a9:e2:15:6b:ce:70:6f:c1:8d:d2:
         0a:9d:e3:5b:7e:7c:a1:af:d4:a0:2a:b8:ce:cd:3b:35:13:b6:
         f3:ef:fa:9a:0c:b6:fe:a1:8d:1c:c0:99:6c:63:a0:81:55:74:
         f9:54:b2:82:c6:d9:75:af:17:a0:c3:d1:8d:97:3b:a0:66:b9:
         03:9d:2c:6d:50:cb:0a:af:e0:04:ce:0a:55:e9:12:5b:22:a7:
         89:7d:18:86:c6:52:79:dd:15:62:16:bd:87:7a:e2:40:da:c5:
         f7:94:d9:f4:ae:93:8a:93:07:f8:9c:a6:0a:e4:d8:f2:2b:14:
         dd:df:c7:32:55:a8:17:f0:b9:c8:e8:9e:c6:c5:db:18:76:db:
         73:1c:56:b3:9d:8f:10:ad:a7:3d:4c:6a:8c:17:16:21:a4:63:
         24:c7:ec:b6:2b:fd:65:08:98:cb:b6:57:b4:35:e4:10:13:a3:
         0c:4e:bd:2e:0d:f1:1a:4f:b0:b8:b2:2d:7a:7c:ec:24:75:a3:
         de:c2:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:12:48 2026 by rpki-client