Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
File:                     AS49453.roa (raw, json)
Hash identifier:          2VyjowO20isUKNaA7hcRxxDzdIABXr60cQzsHPxHM2Y=
Subject key identifier:   64:D9:73:44:D3:46:72:93:D6:92:2A:8B:E2:12:54:73:96:F6:B1:0F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2F75D85C555BB7F8E76499830A59691FBAD5B911
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
Signing time:             Wed 20 May 2026 18:41:29 +0000
ROA not before:           Wed 20 May 2026 18:36:29 +0000
ROA not after:            Wed 19 May 2027 18:41:29 +0000
asID:                     49453
IP address blocks:        13.141.36.0/22 maxlen: 22
                          13.141.52.0/22 maxlen: 22
                          13.141.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:75:d8:5c:55:5b:b7:f8:e7:64:99:83:0a:59:69:1f:ba:d5:b9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 20 18:36:29 2026 GMT
            Not After : May 19 18:41:29 2027 GMT
        Subject: CN=64D97344D3467293D6922A8BE212547396F6B10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:e1:fc:e1:ed:2c:f3:ae:5a:d7:18:fd:e8:
                    85:77:08:41:7f:a9:33:c7:16:db:67:ea:90:73:f5:
                    17:38:fd:77:c4:2e:e0:d7:3b:ff:3c:08:56:d0:91:
                    9c:5a:2e:20:86:0c:5b:93:2f:9c:50:4c:76:d0:d7:
                    1f:36:74:8d:1c:cd:f9:2e:99:b1:7c:b0:00:cb:d2:
                    8d:94:65:31:37:08:0c:25:cd:f3:7b:55:b8:af:9b:
                    01:22:00:45:b3:bb:dd:28:83:d3:cb:41:b4:ab:91:
                    bf:60:fc:7f:42:6a:da:c5:7a:cb:7a:1a:38:0b:c9:
                    3a:0a:7a:28:6b:a2:57:20:b3:30:64:ab:0f:b8:e7:
                    ef:72:19:7c:d6:fa:9f:25:85:95:9f:d2:39:af:b7:
                    48:ca:e2:47:20:18:cd:4d:50:e7:70:d1:75:0b:ef:
                    37:4c:6e:23:26:da:57:01:c3:1b:ee:fe:df:8f:90:
                    d7:08:e3:29:a3:12:16:67:ee:c4:23:ca:3c:94:20:
                    d7:b8:cf:b2:ce:dc:47:3d:0b:96:30:a1:a0:fa:d2:
                    35:0d:e5:f2:31:7f:30:56:5b:b0:3a:96:76:0e:72:
                    74:51:da:dc:6a:22:7a:70:87:b0:db:be:3c:7f:c3:
                    00:7e:61:70:cd:bf:cd:7b:3c:7c:5a:ef:04:9b:eb:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:73:44:D3:46:72:93:D6:92:2A:8B:E2:12:54:73:96:F6:B1:0F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.36.0/22
                  13.141.52.0/22
                  13.141.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:d5:d6:fb:64:85:6d:50:19:38:7e:e7:44:22:07:a5:7d:
         88:2a:ad:89:0c:31:6a:9e:fa:97:c5:8f:35:3e:87:8e:4b:c1:
         6d:04:56:e8:7f:dc:63:ef:f4:30:57:f6:dc:26:e1:5d:77:60:
         b3:43:f4:5a:03:2d:71:c3:93:df:17:94:4a:7a:1a:b1:16:03:
         4d:aa:c8:f8:e3:1c:2b:37:2c:68:95:ad:37:bd:24:19:b0:8c:
         62:3c:9c:8e:db:25:e6:6d:b4:68:b4:13:79:c1:a4:04:8c:60:
         84:f5:38:96:d9:59:f8:26:ea:c0:44:94:e8:34:d7:98:04:ef:
         f7:11:95:4d:f3:c2:90:42:5c:8a:30:c9:9e:54:57:6c:93:f6:
         51:13:a3:4d:bb:0c:da:ce:13:3c:eb:08:5a:e8:43:66:a7:99:
         d2:6d:0e:b5:7e:ed:54:4e:ae:3c:cb:d2:8e:d7:64:45:d5:b2:
         8c:f1:66:61:d7:33:22:87:c9:43:a6:55:52:ea:14:c6:ca:9f:
         47:77:f0:d4:82:6c:ad:f6:d6:d2:17:7e:8c:59:27:48:dc:24:
         8a:f1:05:a6:c9:6a:c3:e2:d9:be:59:a4:df:97:1f:4a:c6:0a:
         2c:5b:89:9c:9f:57:a7:9d:c7:00:f6:3c:1b:34:12:a9:4e:85:
         2e:42:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:34:02 2026 by rpki-client