Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
File:                     AS49453.roa (raw, json)
Hash identifier:          J9/EkmokV2sSSe3pbH8MOV95EoaBSaoxZhC+Eul62QQ=
Subject key identifier:   E9:A4:A2:EB:96:D7:78:69:8E:AB:AD:F8:C6:F3:94:3B:D3:5F:2E:A4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0E40ED00067277386A91D683DBA22071DE05E014
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
Signing time:             Wed 08 Apr 2026 21:47:30 +0000
ROA not before:           Wed 08 Apr 2026 21:42:30 +0000
ROA not after:            Wed 07 Apr 2027 21:47:30 +0000
asID:                     49453
IP address blocks:        13.141.36.0/22 maxlen: 22
                          13.141.52.0/22 maxlen: 22
                          13.141.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:40:ed:00:06:72:77:38:6a:91:d6:83:db:a2:20:71:de:05:e0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr  8 21:42:30 2026 GMT
            Not After : Apr  7 21:47:30 2027 GMT
        Subject: CN=E9A4A2EB96D778698EABADF8C6F3943BD35F2EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:1f:41:a4:ba:bd:77:95:2a:1b:5c:7b:93:
                    41:5a:0e:78:2f:bd:ec:7a:16:d7:f0:18:5e:92:a2:
                    7c:5e:cc:f2:6d:b3:17:a9:85:cc:d4:65:31:d3:67:
                    c7:c4:24:37:46:5f:24:07:d2:9b:15:fb:0d:da:53:
                    0c:ee:8c:ba:32:f8:7f:1b:2f:e4:0f:20:7b:44:22:
                    cd:78:f1:11:57:d5:f9:55:89:d9:cf:a2:86:14:4c:
                    0b:27:fc:81:b4:ba:9c:2b:c2:e0:a9:de:17:bb:d9:
                    30:7c:6a:d2:d8:f7:6c:a6:d5:6e:d5:19:eb:4f:f8:
                    43:81:2d:d1:ea:92:cc:a0:11:3d:00:18:5d:3b:6f:
                    39:b3:40:94:86:48:5c:2c:2d:a5:51:b9:61:4a:3f:
                    2f:50:2a:8f:d1:e6:73:0b:10:8f:a4:25:ef:8b:fd:
                    89:8c:84:ce:ea:53:0a:d1:69:d3:a7:57:fe:c9:75:
                    61:92:57:9b:40:24:c0:67:59:dd:d2:49:fd:bb:6c:
                    21:02:a4:4d:a6:42:d0:e3:d1:57:7c:ac:41:07:39:
                    a5:aa:45:2b:44:b5:40:cb:86:a8:99:0f:a6:a2:44:
                    c7:4e:e7:e7:e3:2f:ef:6f:61:4b:32:38:19:4f:c9:
                    2f:28:5a:e3:5d:4b:67:f1:0d:05:14:ed:8f:05:6f:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A4:A2:EB:96:D7:78:69:8E:AB:AD:F8:C6:F3:94:3B:D3:5F:2E:A4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.36.0/22
                  13.141.52.0/22
                  13.141.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:56:7b:1e:ec:31:be:0d:2e:37:50:cb:3f:7e:c4:45:60:
         a0:9b:18:41:75:fd:2b:ba:29:87:37:33:66:dd:79:5c:e4:8a:
         1b:b2:52:90:d9:e9:a9:cf:8a:21:45:c4:d4:35:46:8d:08:e0:
         5f:5d:8a:b3:0d:40:99:6c:e8:9f:cc:0a:00:3a:a1:1d:cc:3e:
         c6:05:49:6c:0a:d7:a9:17:e9:13:99:7f:29:59:88:f0:d0:d1:
         13:0a:37:bd:8e:c4:22:c7:b1:4b:1d:df:91:9a:3d:f5:e0:38:
         91:f2:a7:e0:11:74:2a:7e:6e:df:99:72:81:00:d6:6f:1f:2d:
         ec:8f:fa:db:85:1e:31:83:ac:b0:72:b7:02:d4:9f:12:f7:28:
         b1:16:13:34:a4:73:a5:f8:53:44:d1:f4:75:50:cf:3b:c1:0a:
         bb:a5:4f:9b:ed:a2:b2:a0:4f:ff:a8:b5:ce:e8:f8:fd:9f:8d:
         37:ac:47:36:04:9b:24:1b:5a:9e:d9:b5:50:07:36:65:27:15:
         e3:ae:d6:a9:7e:28:9b:db:6c:87:ad:db:a1:e9:6f:d3:0d:f7:
         e4:04:92:da:9d:1c:da:46:bc:f6:b5:1e:80:a2:1a:01:ba:b8:
         31:ad:9c:f1:1a:36:9d:3b:98:df:c5:40:e9:e3:dd:6e:a1:55:
         3d:91:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:54:37 2026 by rpki-client