Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402187.roa
File:                     AS402187.roa (raw, json)
Hash identifier:          iXvKr8sEAYKN3IQJFJa+hWCEMm205fHL5kSoXbLTR/k=
Subject key identifier:   24:BA:13:E7:E5:C4:77:F7:8C:19:6E:0E:84:10:BC:22:B9:7D:73:D3
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2EF2BC960C59312C44F7D045324676F219F7D57E
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402187.roa
Signing time:             Wed 08 Apr 2026 07:13:08 +0000
ROA not before:           Wed 08 Apr 2026 07:08:08 +0000
ROA not after:            Wed 07 Apr 2027 07:13:08 +0000
asID:                     402187
IP address blocks:        169.40.48.0/24 maxlen: 24
                          169.40.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:bc:96:0c:59:31:2c:44:f7:d0:45:32:46:76:f2:19:f7:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr  8 07:08:08 2026 GMT
            Not After : Apr  7 07:13:08 2027 GMT
        Subject: CN=24BA13E7E5C477F78C196E0E8410BC22B97D73D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:e7:c6:21:60:af:ce:65:44:95:75:4c:c8:
                    e4:89:88:5d:cb:08:c8:90:22:c4:bc:fa:ae:b6:0b:
                    fc:39:b1:b3:11:5b:f7:91:37:93:bc:39:24:06:f8:
                    7b:45:cd:6a:e0:d4:2c:1b:12:3d:5b:6e:eb:60:33:
                    4a:5e:7e:03:d9:10:48:af:93:37:6c:75:97:02:b2:
                    0d:48:f5:7b:20:8a:cb:3b:76:b4:94:a9:33:ae:87:
                    f5:8e:65:b9:9c:e5:d1:e6:ef:25:a0:d1:72:65:7e:
                    0b:26:28:52:e3:cf:a2:68:23:76:14:83:b2:2e:d2:
                    44:f3:60:36:95:d1:be:5f:58:aa:5f:06:c8:eb:01:
                    6b:39:e1:02:63:01:da:cd:ae:1a:51:a3:e7:9c:cd:
                    f5:40:61:cf:a3:6b:7e:e5:3c:8c:3e:f8:cb:ba:f2:
                    cc:b6:f3:e6:e5:17:5e:71:92:7d:f9:54:89:7d:58:
                    46:b0:92:ab:cd:cb:fa:dc:4a:b3:55:e0:20:48:ea:
                    46:98:98:c4:ba:22:5c:06:cf:ff:6f:92:2e:6d:d4:
                    32:3a:3c:4b:19:ea:33:54:d6:27:b0:ea:fb:81:48:
                    46:c2:51:71:5f:23:23:10:32:d2:cc:d8:c6:f0:70:
                    b2:0f:46:27:cb:18:a6:6f:55:00:bd:2a:e2:fb:b0:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BA:13:E7:E5:C4:77:F7:8C:19:6E:0E:84:10:BC:22:B9:7D:73:D3
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402187.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:e4:50:1d:bc:09:75:8d:6f:38:72:84:30:f0:4d:2f:4a:
         86:f0:6c:37:b7:e6:e0:9a:0f:2e:df:1d:38:c3:27:57:aa:e9:
         0d:c2:e1:dd:12:b4:eb:6f:ed:0e:4a:d1:59:14:ae:1d:9c:17:
         a1:e8:86:db:ad:89:51:06:a3:3c:70:06:a2:4c:40:a1:0f:d4:
         4a:54:1f:fc:57:f9:84:8f:c3:29:0b:c8:15:df:4b:8b:b1:1d:
         94:99:85:94:31:2f:0c:5f:d5:bf:ab:2f:2e:33:d3:11:7a:45:
         a9:4e:9d:34:a5:ff:f0:df:8e:0e:73:69:91:91:04:b9:58:b6:
         d9:f1:88:39:c5:e5:23:78:cd:fe:a3:19:c5:7e:9c:fb:9c:3b:
         d9:cc:61:c8:14:b1:ca:70:03:24:a0:1f:e1:db:25:71:7e:15:
         58:39:8b:4d:47:37:28:ba:c5:03:b4:c4:ba:94:73:11:eb:05:
         0e:c1:df:5d:41:47:7e:87:ca:d3:60:fe:fa:9f:5c:c6:b2:16:
         ae:5f:51:e5:54:59:0e:00:f4:39:b6:fc:de:3f:22:78:cf:89:
         17:a3:df:7e:e9:5b:60:36:9e:ed:9b:1b:24:c6:0c:da:94:b0:
         d4:f4:82:00:f3:ed:bb:a9:e6:1f:21:6a:71:77:97:83:53:1a:
         72:03:7d:44
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIULvK8lgxZMSxE99BFMkZ28hn31X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA0MDgwNzA4MDhaFw0yNzA0MDcwNzEzMDhaMDMxMTAvBgNV
BAMTKDI0QkExM0U3RTVDNDc3Rjc4QzE5NkUwRTg0MTBCQzIyQjk3RDczRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj++fGIWCvzmVElXVMyOSJiF3L
CMiQIsS8+q62C/w5sbMRW/eRN5O8OSQG+HtFzWrg1CwbEj1bbutgM0pefgPZEEiv
kzdsdZcCsg1I9Xsgiss7drSUqTOuh/WOZbmc5dHm7yWg0XJlfgsmKFLjz6JoI3YU
g7Iu0kTzYDaV0b5fWKpfBsjrAWs54QJjAdrNrhpRo+eczfVAYc+ja37lPIw++Mu6
8sy28+blF15xkn35VIl9WEawkqvNy/rcSrNV4CBI6kaYmMS6IlwGz/9vki5t1DI6
PEsZ6jNU1iew6vuBSEbCUXFfIyMQMtLM2MbwcLIPRifLGKZvVQC9KuL7sJJdAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUJLoT5+XEd/eMGW4OhBC8Irl9c9MwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMjE4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAakoMDANBgkqhkiG9w0B
AQsFAAOCAQEAP6LkUB28CXWNbzhyhDDwTS9KhvBsN7fm4JoPLt8dOMMnV6rpDcLh
3RK062/tDkrRWRSuHZwXoeiG262JUQajPHAGokxAoQ/USlQf/Ff5hI/DKQvIFd9L
i7EdlJmFlDEvDF/Vv6svLjPTEXpFqU6dNKX/8N+ODnNpkZEEuVi22fGIOcXlI3jN
/qMZxX6c+5w72cxhyBSxynADJKAf4dslcX4VWDmLTUc3KLrFA7TEupRzEesFDsHf
XUFHfofK02D++p9cxrIWrl9R5VRZDgD0Obb83j8ieM+JF6PffulbYDae7ZsbJMYM
2pSw1PSCAPPtu6nmHyFqcXeXg1MacgN9RA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:35:56 2026 by rpki-client