Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS219315.roa
File:                     AS219315.roa (raw, json)
Hash identifier:          PujxEb5snScXyqYlkMxGKPdQljh/N1Kt9NJoPcTDn5U=
Subject key identifier:   E7:D1:7D:5B:08:5D:67:2B:5D:73:75:59:3B:A2:76:3A:A7:D4:FE:E4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5B55C9C51967D34C65EA07BC2254D4347E45E4D3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS219315.roa
Signing time:             Sun 23 Aug 2026 08:57:12 +0000
ROA not before:           Sun 23 Aug 2026 08:52:12 +0000
ROA not after:            Sun 22 Aug 2027 08:57:12 +0000
asID:                     219315
IP address blocks:        169.40.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:55:c9:c5:19:67:d3:4c:65:ea:07:bc:22:54:d4:34:7e:45:e4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 23 08:52:12 2026 GMT
            Not After : Aug 22 08:57:12 2027 GMT
        Subject: CN=E7D17D5B085D672B5D7375593BA2763AA7D4FEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:3a:b3:89:24:3c:b9:7b:df:e8:eb:bc:64:
                    60:6e:95:62:fa:2b:fd:61:60:41:9a:b5:fb:4d:de:
                    8d:a0:bd:dd:cd:f8:35:52:df:53:00:11:61:27:28:
                    70:73:b2:20:50:c5:09:39:b1:18:2d:c3:b7:a8:41:
                    0f:74:a8:0b:3a:79:4a:73:34:3e:e8:50:cb:a5:45:
                    d7:8c:6a:52:a5:cc:da:d0:eb:84:db:0f:c5:33:cd:
                    6a:f9:ec:53:67:88:9f:0c:8a:15:d9:84:0c:22:58:
                    8d:30:84:6d:89:f8:0e:5b:dd:da:c1:ce:5b:01:3a:
                    ab:15:c0:6f:69:e6:33:30:63:71:41:7f:bd:1a:36:
                    1f:d1:90:e2:58:f3:70:23:03:af:d8:c4:b9:a3:6b:
                    65:31:16:8a:36:d7:55:66:ba:30:9c:e4:14:b3:ba:
                    92:a4:d5:9f:83:2c:30:c1:62:b6:9e:da:2f:c8:d5:
                    aa:bd:f1:74:46:47:53:78:32:de:3e:6d:c9:dc:e9:
                    c9:93:cf:72:fd:c0:20:d0:4d:37:56:cf:cf:23:e3:
                    6d:fc:7a:e2:26:f5:03:5a:47:19:3e:1b:66:0f:e8:
                    ad:f6:a7:b9:1c:24:1c:de:d4:ab:de:08:00:e7:d9:
                    1d:9c:91:f8:d5:4f:36:0d:ec:65:6e:77:f5:67:a1:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:7D:5B:08:5D:67:2B:5D:73:75:59:3B:A2:76:3A:A7:D4:FE:E4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS219315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:9b:83:32:51:5f:25:6e:f6:03:eb:07:1a:7a:44:04:7e:
         f6:93:78:86:92:56:5b:41:d7:11:08:d9:34:a6:a6:83:a1:05:
         ae:ff:ed:df:4a:07:0a:bb:4f:5e:c7:02:e9:c7:82:5c:48:86:
         bb:39:49:ca:47:d8:6e:58:ed:90:de:0c:8d:c1:96:37:82:2c:
         1c:e8:fc:8e:06:63:31:eb:b6:ae:56:be:7f:a5:b7:fd:a5:dc:
         d5:ea:61:f9:c3:40:3d:c1:ef:7e:24:bc:ce:52:70:d9:74:df:
         2f:41:5a:0e:c0:8c:19:aa:6b:12:4f:d0:b7:ac:9c:52:fa:c4:
         ae:fd:4e:49:bb:cf:48:59:16:71:8e:0c:eb:2f:01:e6:89:f1:
         11:38:22:a8:0e:4d:ea:ac:31:f1:40:8a:50:a2:b6:6a:d6:5c:
         15:47:bb:50:21:25:0b:f2:42:fa:99:38:d9:ac:04:ad:3f:6f:
         1c:77:5c:13:e2:31:99:6d:31:61:32:0a:7f:bf:91:a1:a2:ff:
         7b:e7:3d:de:19:c0:73:fb:d0:dd:b7:9a:c8:59:cd:9a:a4:93:
         b6:5e:bd:22:0a:b4:fa:e1:7c:aa:ef:1f:f7:0a:88:e0:41:9d:
         62:2f:8f:71:db:31:d4:3d:67:03:33:42:f1:d5:10:60:7f:64:
         20:e3:b6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:42:18 2026 by rpki-client