Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS54004.roa
File:                     AS54004.roa (raw, json)
Hash identifier:          H+F4Z63IuJAfe/sne8nbUSjOHACFLHwtkKUBWESHQcg=
Subject key identifier:   F0:59:6F:17:ED:69:88:95:DC:40:45:BE:02:39:D1:09:EE:1D:9D:FF
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3A4BCDB237869C71B339A42DE4ED0C77A0655F03
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS54004.roa
Signing time:             Thu 14 May 2026 06:58:01 +0000
ROA not before:           Thu 14 May 2026 06:53:01 +0000
ROA not after:            Thu 13 May 2027 06:58:01 +0000
asID:                     54004
IP address blocks:        13.141.128.0/17 maxlen: 24
                          13.141.152.0/22 maxlen: 24
                          13.141.156.0/22 maxlen: 24
                          13.141.160.0/20 maxlen: 24
                          13.141.176.0/20 maxlen: 24
                          13.141.192.0/20 maxlen: 24
                          13.141.208.0/20 maxlen: 24
                          13.141.224.0/20 maxlen: 24
                          13.141.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4b:cd:b2:37:86:9c:71:b3:39:a4:2d:e4:ed:0c:77:a0:65:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 14 06:53:01 2026 GMT
            Not After : May 13 06:58:01 2027 GMT
        Subject: CN=F0596F17ED698895DC4045BE0239D109EE1D9DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:e4:ec:7f:16:19:43:ad:19:5a:69:fe:a1:
                    c0:fe:9c:33:af:bc:d6:32:11:37:99:e8:f5:35:22:
                    05:0b:1d:30:b8:47:5a:c8:d3:ce:bb:27:4f:fe:50:
                    8b:e3:1f:f7:53:7e:2b:5f:22:3c:b3:81:c7:b1:03:
                    d8:86:1a:b5:ee:4b:35:f6:74:63:f8:68:38:04:b1:
                    8a:f0:13:98:05:18:e6:96:de:0b:02:51:c9:0d:ff:
                    ac:f9:4d:b0:32:06:13:66:e2:14:ed:4f:9a:c7:a1:
                    34:1d:b8:35:d0:b4:bc:01:07:67:4a:57:73:c3:f1:
                    0e:ac:21:59:23:42:ae:fc:80:bf:44:f4:6f:78:52:
                    02:56:95:86:3e:51:85:1c:5c:cd:9c:30:db:04:b9:
                    dd:0b:fc:9f:c8:62:03:9b:b1:66:8a:31:f1:a3:48:
                    fd:3f:58:0a:9d:d9:e0:e7:4f:ca:84:d9:bf:bd:f2:
                    57:1c:16:05:be:8f:56:9a:2d:71:22:14:5c:de:61:
                    68:7d:a5:74:8f:09:8d:97:9f:19:b8:e8:74:c5:81:
                    51:6d:35:80:1d:0b:1a:96:63:05:3e:b3:0d:c4:38:
                    bf:42:50:09:5a:d5:bf:3a:a0:a3:c9:d7:bf:c8:88:
                    d7:71:23:f9:00:49:a3:a9:3e:3b:bd:8d:77:95:9a:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:6F:17:ED:69:88:95:DC:40:45:BE:02:39:D1:09:EE:1D:9D:FF
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS54004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:a5:0a:49:6a:bc:16:af:dc:77:a9:03:d2:b3:54:d3:4b:
         59:e8:ee:ca:60:f6:73:4b:6d:73:b7:25:a4:98:12:9b:aa:20:
         a8:4b:16:fe:68:13:ba:93:1d:7c:a4:fd:32:47:63:4a:b4:8e:
         43:23:48:e2:4c:a3:06:52:28:55:4d:c1:b3:59:0e:c4:f4:f3:
         b5:5c:b7:5e:c0:b6:f9:07:d7:a4:bb:52:f2:9a:bf:39:f1:31:
         72:e6:51:15:c2:ab:6d:a2:31:49:a8:86:df:71:c6:01:61:47:
         f8:99:f4:78:62:86:60:59:92:21:d7:65:df:54:9d:70:0b:9c:
         d4:9f:83:71:58:b8:7f:98:03:6e:99:f6:7f:13:23:fd:2d:50:
         60:10:f7:91:e4:01:60:24:84:4b:45:3a:5d:ee:a9:22:ce:81:
         ef:7e:24:b5:a9:51:4b:de:bc:fb:34:04:b7:07:e3:31:ea:0c:
         a6:84:63:f1:66:39:8e:8f:a7:87:59:8b:cb:0c:44:c5:8c:ff:
         f6:de:0c:bf:4f:68:74:ec:29:a8:98:15:3d:ac:17:ed:2a:fa:
         8e:ed:34:da:14:1d:b0:44:a7:10:af:f8:da:af:e5:cc:43:b8:
         70:26:a2:ae:83:4a:21:d4:20:7e:5c:42:24:e4:7b:e0:50:9f:
         33:f4:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:05 2026 by rpki-client