Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30042.roa
File:                     AS30042.roa (raw, json)
Hash identifier:          VchNtNyVqVcJNTxjjEsKqeo0yT3O3J54vyQ6vYstZH4=
Subject key identifier:   C4:74:24:04:FB:FE:24:59:B0:96:42:47:4E:A3:C1:3B:24:D5:9C:96
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0786400C574175A2223DE5F86AB95EC32B9AFAF2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30042.roa
Signing time:             Tue 03 Nov 2026 09:35:02 +0000
ROA not before:           Tue 03 Nov 2026 09:30:02 +0000
ROA not after:            Tue 02 Nov 2027 09:35:02 +0000
asID:                     30042
IP address blocks:        169.40.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:86:40:0c:57:41:75:a2:22:3d:e5:f8:6a:b9:5e:c3:2b:9a:fa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Nov  3 09:30:02 2026 GMT
            Not After : Nov  2 09:35:02 2027 GMT
        Subject: CN=C4742404FBFE2459B09642474EA3C13B24D59C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:60:86:d6:3f:77:e1:9c:09:ca:e6:47:b3:
                    09:50:6d:4d:14:e0:42:67:dd:c6:b8:2b:11:77:35:
                    4a:79:85:a5:d5:dd:5e:11:53:0b:40:e3:b0:72:d2:
                    1b:b5:a7:3a:79:2d:d3:95:59:16:99:57:7b:37:df:
                    08:6a:51:fa:8b:48:81:f6:6b:a9:88:d8:30:0e:e3:
                    56:18:7d:6a:7f:0f:39:9b:63:92:79:b4:3f:bc:ed:
                    c1:84:53:39:63:37:4f:22:56:e8:ba:1f:ab:5f:6f:
                    26:90:19:65:0f:5b:9f:75:f0:60:74:fd:e0:dd:e2:
                    b5:5f:e9:82:99:14:aa:72:c2:bc:c3:41:83:e2:85:
                    cf:1b:d6:6d:98:5d:68:6b:5e:7e:48:c1:99:7e:75:
                    d8:e7:5a:cd:31:57:d4:c0:8a:56:75:4a:17:c9:71:
                    f1:a0:90:5f:18:b8:d3:7d:94:51:c0:8f:03:0f:71:
                    fa:2c:30:1d:c1:36:82:98:0a:28:58:b1:f1:3a:35:
                    68:4f:ac:48:60:4f:a2:3d:30:10:c3:64:26:b9:ec:
                    2a:1c:4f:b2:3e:0c:61:99:38:62:73:67:c1:32:78:
                    4a:9a:c7:2e:b8:6a:ca:63:61:6c:30:94:bd:df:72:
                    97:b6:48:9e:56:b3:c2:e0:af:5e:33:b2:e9:d2:ba:
                    50:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:74:24:04:FB:FE:24:59:B0:96:42:47:4E:A3:C1:3B:24:D5:9C:96
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d9:42:28:0b:14:5b:85:ac:76:cc:d4:18:99:1c:aa:77:8b:
         d1:4c:3b:fa:a6:b7:a2:36:91:80:e1:2e:3b:98:51:4c:ab:b1:
         90:ee:99:86:44:d0:59:07:57:e2:be:02:0d:2f:1f:21:1c:72:
         15:98:97:e8:64:09:35:60:08:e5:73:ad:1a:8b:5d:f4:41:77:
         25:21:cb:3c:dd:3e:4b:f9:ba:2b:4a:1f:60:e5:9a:b3:98:fe:
         58:d7:c5:17:09:ee:1f:a0:ed:2a:c9:f3:35:71:47:3b:eb:00:
         9d:40:1e:81:3b:f3:05:c1:5b:5f:3f:2c:57:4c:1e:8b:f5:a9:
         41:d9:ee:08:09:c8:c1:50:eb:9c:a3:b0:1c:89:88:40:6d:41:
         cb:74:41:77:05:28:ac:eb:4e:d6:24:2f:0f:0e:62:0c:f8:23:
         93:2a:87:aa:fb:4a:56:b5:f5:34:33:69:e0:c5:e8:ae:ff:82:
         a4:dd:69:39:ad:7a:bb:12:5a:1e:fe:b6:f7:0b:af:e8:a4:29:
         57:1b:32:8e:fe:a6:08:6f:d2:13:ee:71:e1:5c:8c:09:6e:05:
         3e:53:5e:af:18:fb:31:38:e2:d1:fb:33:bb:eb:40:08:16:4a:
         33:c9:e1:e2:e8:b4:e9:b3:ae:3b:81:80:66:c1:6c:a1:4c:e3:
         c6:65:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:10:05 2026 by rpki-client