Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402671.roa
File:                     AS402671.roa (raw, json)
Hash identifier:          BfObxEqMaNv4v4CIzsVXaHf1gAvIh2negdVg10ogAFY=
Subject key identifier:   18:84:79:88:22:A7:51:CA:4F:AB:03:9D:32:FE:31:4F:7D:FF:A1:2A
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7F39B65B93FD36C3121D8868AB71516C99B3F03A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402671.roa
Signing time:             Tue 27 Oct 2026 14:10:36 +0000
ROA not before:           Tue 27 Oct 2026 14:05:36 +0000
ROA not after:            Tue 26 Oct 2027 14:10:36 +0000
asID:                     402671
IP address blocks:        13.141.8.0/24 maxlen: 24
                          13.141.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:39:b6:5b:93:fd:36:c3:12:1d:88:68:ab:71:51:6c:99:b3:f0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 27 14:05:36 2026 GMT
            Not After : Oct 26 14:10:36 2027 GMT
        Subject: CN=1884798822A751CA4FAB039D32FE314F7DFFA12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:46:8d:7d:6c:2f:43:5a:96:13:b7:3d:07:
                    b0:43:ef:91:9b:5e:89:51:00:8e:93:58:84:02:fb:
                    65:3d:c9:b4:fd:7d:70:b7:c3:29:07:f2:9e:06:87:
                    40:38:40:43:4a:0a:94:3d:43:c3:09:82:e1:44:d3:
                    12:3b:6d:9c:8c:ed:d3:60:7c:41:07:87:fd:8c:d8:
                    28:29:8d:38:d2:61:dc:f9:cb:97:4d:12:4b:fe:41:
                    a1:30:ae:42:ff:e8:fc:ee:70:8d:7f:ef:69:59:77:
                    8c:d4:3c:09:8f:a3:fa:79:c3:6e:b0:e4:3c:94:3a:
                    d1:9d:de:e0:c5:fe:a5:8e:13:da:3a:67:37:7d:d9:
                    8f:29:4d:37:96:b8:2a:c9:17:b0:55:8a:23:e7:c4:
                    72:26:5c:ab:83:25:b3:62:b6:1c:1f:70:17:16:e3:
                    38:2d:3b:0e:42:93:82:16:da:b8:cb:44:6e:07:c8:
                    2c:70:48:12:4b:b9:71:b6:4f:0d:f5:04:32:0c:cd:
                    c6:d1:73:9d:e1:2c:e9:52:68:99:7e:42:96:7a:be:
                    b0:84:f8:87:81:11:d7:57:dd:50:41:f9:0f:ea:e0:
                    4d:86:4b:9f:c5:8f:cd:64:4c:36:1d:6e:a8:d4:fa:
                    be:90:29:68:eb:3d:c0:39:f7:a7:95:4a:f5:d7:62:
                    fa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:79:88:22:A7:51:CA:4F:AB:03:9D:32:FE:31:4F:7D:FF:A1:2A
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.8.0/24
                  13.141.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:02:1e:fd:ef:ec:eb:56:44:00:55:4d:26:c8:f4:48:a5:4d:
         93:23:60:cb:e4:93:1d:20:df:e3:6b:d8:fa:1d:3f:e4:ec:4f:
         d6:70:f6:be:ce:f2:e3:21:19:dc:8f:58:98:de:d2:d6:b2:b5:
         81:e9:2a:a7:c0:25:dc:0d:73:27:1a:41:8a:e4:de:e2:75:bf:
         7d:13:fd:56:54:bd:77:8a:ff:2f:89:fb:bc:9b:b3:41:77:7f:
         15:dd:a7:6e:50:bf:a8:58:36:06:b4:6c:bf:21:be:35:e2:a9:
         2d:60:fc:d5:2e:c1:c5:83:13:68:43:96:24:3b:35:52:be:b8:
         81:fc:9e:49:20:a1:d2:25:8c:1f:02:f8:58:28:35:bb:9e:a0:
         a9:98:3f:fd:94:e1:5f:55:be:af:a0:09:13:d7:f1:2f:2e:01:
         51:ac:3d:59:ca:5d:c1:79:88:1f:55:4d:f5:48:0b:8c:5c:90:
         12:2a:5f:ae:26:ed:c3:bf:12:fa:2d:77:5a:42:43:d9:68:21:
         fd:bb:82:de:06:c8:92:57:99:95:3a:28:0a:11:97:9a:3d:67:
         e2:e9:6a:67:2d:f2:9f:0f:4a:cc:d2:80:ed:52:44:00:b3:31:
         ab:12:b3:87:a5:e3:11:e4:48:7e:26:92:cd:f2:cc:6b:19:10:
         0a:29:76:e8
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUfzm2W5P9NsMSHYhoq3FRbJmz8DowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjEwMjcxNDA1MzZaFw0yNzEwMjYxNDEwMzZaMDMxMTAvBgNV
BAMTKDE4ODQ3OTg4MjJBNzUxQ0E0RkFCMDM5RDMyRkUzMTRGN0RGRkExMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd10aNfWwvQ1qWE7c9B7BD75Gb
XolRAI6TWIQC+2U9ybT9fXC3wykH8p4Gh0A4QENKCpQ9Q8MJguFE0xI7bZyM7dNg
fEEHh/2M2CgpjTjSYdz5y5dNEkv+QaEwrkL/6PzucI1/72lZd4zUPAmPo/p5w26w
5DyUOtGd3uDF/qWOE9o6Zzd92Y8pTTeWuCrJF7BViiPnxHImXKuDJbNithwfcBcW
4zgtOw5Ck4IW2rjLRG4HyCxwSBJLuXG2Tw31BDIMzcbRc53hLOlSaJl+QpZ6vrCE
+IeBEddX3VBB+Q/q4E2GS5/Fj81kTDYdbqjU+r6QKWjrPcA596eVSvXXYvqxAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUGIR5iCKnUcpPqwOdMv4xT33/oSowHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQwMjY3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAA2NCAMEAA2NSDANBgkq
hkiG9w0BAQsFAAOCAQEAEAIe/e/s61ZEAFVNJsj0SKVNkyNgy+STHSDf42vY+h0/
5OxP1nD2vs7y4yEZ3I9YmN7S1rK1gekqp8Al3A1zJxpBiuTe4nW/fRP9VlS9d4r/
L4n7vJuzQXd/Fd2nblC/qFg2BrRsvyG+NeKpLWD81S7BxYMTaEOWJDs1Ur64gfye
SSCh0iWMHwL4WCg1u56gqZg//ZThX1W+r6AJE9fxLy4BUaw9WcpdwXmIH1VN9UgL
jFyQEipfribtw78S+i13WkJD2Wgh/buC3gbIkleZlTooChGXmj1n4ulqZy3ynw9K
zNKA7VJEALMxqxKzh6XjEeRIfiaSzfLMaxkQCil26A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:28 2026 by rpki-client