Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402899.roa
File:                     AS402899.roa (raw, json)
Hash identifier:          oD/HOKys9vO8xBq7p93uHJXPmUWKpZiURn2G0DSl6Gc=
Subject key identifier:   0F:C5:EF:8C:F3:CA:6C:88:84:65:AE:47:1E:B0:67:F9:E5:92:6D:5C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       44E366EF608A2984A2F245F3DB95A18A101E09B5
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402899.roa
Signing time:             Sun 25 Oct 2026 16:09:24 +0000
ROA not before:           Sun 25 Oct 2026 16:04:24 +0000
ROA not after:            Sun 24 Oct 2027 16:09:24 +0000
asID:                     402899
IP address blocks:        13.141.6.0/24 maxlen: 24
                          13.141.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e3:66:ef:60:8a:29:84:a2:f2:45:f3:db:95:a1:8a:10:1e:09:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 25 16:04:24 2026 GMT
            Not After : Oct 24 16:09:24 2027 GMT
        Subject: CN=0FC5EF8CF3CA6C888465AE471EB067F9E5926D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6f:c5:a0:25:57:59:e8:45:61:ea:fc:4f:2b:
                    81:72:c2:db:f5:45:f3:d5:7d:83:2f:c8:cb:ff:85:
                    10:a8:46:f3:5a:b1:d4:81:99:dd:0a:4d:db:cc:00:
                    43:1a:5d:35:23:e0:e9:f3:8b:d8:db:7b:c8:64:4a:
                    33:a5:28:67:1b:94:73:1a:bf:65:77:09:79:c0:a0:
                    ce:2c:65:17:44:76:bc:98:e3:36:de:ac:f7:58:cb:
                    cd:d5:2d:69:fa:39:76:4a:f1:cf:c3:14:83:3d:95:
                    16:42:b8:87:a2:cd:b0:83:46:0f:8d:ca:13:b7:e1:
                    0c:2b:fe:38:0a:b6:98:ae:d7:35:6f:4c:45:ea:81:
                    b1:66:d1:5b:32:cf:18:3a:19:08:54:84:0a:c1:43:
                    c8:03:a5:46:36:d4:1d:e7:9f:f6:db:3f:0c:4c:a9:
                    8f:09:59:cc:24:b5:d6:73:79:e9:f6:93:45:d5:43:
                    25:26:22:a7:8f:32:9f:68:57:5c:59:60:d1:8b:28:
                    82:1c:2c:d6:36:80:3e:7e:b9:1c:41:44:b5:fe:85:
                    a1:87:f1:bd:c0:0d:d8:d7:8e:cc:8c:ba:21:3b:8f:
                    31:5f:5b:c4:1b:e3:c0:18:f5:7f:a3:c7:b5:c7:eb:
                    fa:44:84:b6:8f:59:0b:06:13:44:fa:53:11:5c:b2:
                    fe:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C5:EF:8C:F3:CA:6C:88:84:65:AE:47:1E:B0:67:F9:E5:92:6D:5C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402899.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.6.0/24
                  13.141.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:53:40:30:58:fe:2b:37:78:2e:0b:64:c1:92:1f:53:44:b2:
         31:e5:5b:c4:9a:4b:1b:38:b9:a4:d1:8f:a4:f2:4b:71:4e:1e:
         ac:58:ad:40:76:5f:ec:0b:75:ba:3e:51:54:38:cb:95:18:ed:
         17:f0:b2:eb:08:e9:9e:97:1d:5a:d7:3f:05:21:f1:85:9d:2d:
         03:42:d8:01:ea:7f:94:9e:a6:da:d6:5d:72:f4:2d:4e:fb:95:
         40:f9:92:2e:a9:d4:b0:ed:06:96:71:ad:11:68:36:c8:7a:f3:
         78:53:bc:8a:31:5f:aa:6c:e7:05:1c:02:b5:ac:4a:42:aa:5a:
         f0:94:4f:0b:20:b5:7b:65:c5:3e:c1:8b:96:a3:1c:47:8f:07:
         25:12:e8:97:1d:95:81:31:49:09:9c:56:96:02:06:53:cf:59:
         2e:55:da:79:55:3c:9a:80:77:a1:69:fd:05:b1:37:7f:2e:4b:
         d3:d9:c8:44:3e:d1:8e:fd:bb:5e:f1:de:c8:df:25:b4:83:87:
         d4:53:dc:ec:f4:6b:3b:0a:dd:f1:d5:d9:a9:b1:53:d7:3b:66:
         cf:b0:6f:6f:fa:b2:38:55:5e:96:4c:ec:fd:5c:fe:42:d3:14:
         64:df:0e:94:2f:ee:62:40:60:d2:35:df:7e:8c:d8:97:c4:2b:
         8d:8a:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:06:55 2026 by rpki-client