Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS57043.roa
File:                     AS57043.roa (raw, json)
Hash identifier:          pKVyi7vPIPx/43wXKGCPL5/Ah3C+dZvkly4XCir5WD8=
Subject key identifier:   FB:9E:80:25:CE:C2:B2:D2:BF:49:0C:21:AE:A6:74:78:70:BB:4E:9F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0D543821E8E12DD131A38F9665F75774DC286CB1
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS57043.roa
Signing time:             Fri 30 Oct 2026 02:24:41 +0000
ROA not before:           Fri 30 Oct 2026 02:19:41 +0000
ROA not after:            Fri 29 Oct 2027 02:24:41 +0000
asID:                     57043
IP address blocks:        169.40.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:54:38:21:e8:e1:2d:d1:31:a3:8f:96:65:f7:57:74:dc:28:6c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 30 02:19:41 2026 GMT
            Not After : Oct 29 02:24:41 2027 GMT
        Subject: CN=FB9E8025CEC2B2D2BF490C21AEA6747870BB4E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:8a:05:37:45:6b:58:16:f8:9b:09:57:01:
                    58:c0:72:72:1b:13:c9:ab:81:15:5f:7c:3f:c5:c5:
                    b9:17:8e:5e:3d:b1:47:c4:62:0b:a2:f6:0b:0e:1c:
                    cb:a9:64:96:5f:92:bd:f6:03:73:2e:a9:15:87:4e:
                    7c:7b:b4:ae:b0:de:1a:82:13:87:02:57:50:28:15:
                    14:3e:3a:e4:7f:f4:b1:1f:73:e6:81:b4:26:a0:5d:
                    03:0b:ad:15:78:59:cb:8d:08:20:f9:72:92:c5:7c:
                    b8:7d:98:26:cf:00:b0:90:df:03:72:54:1a:54:aa:
                    6e:72:78:e8:b1:ae:4c:e8:4f:42:f8:df:04:88:d6:
                    59:1b:00:b1:de:da:c6:9b:64:a2:ff:d5:3a:fa:5f:
                    17:1b:29:a2:fd:23:fe:51:6e:95:09:df:14:54:74:
                    10:69:b2:2a:84:65:5d:74:81:03:93:70:18:99:b1:
                    33:88:65:fa:a0:67:fd:71:a1:66:68:80:50:9e:6b:
                    23:d3:80:41:5d:3a:ea:76:9d:b2:a6:08:52:6d:2a:
                    b2:a0:82:82:0e:47:13:68:54:67:43:a3:1c:06:3e:
                    51:d6:3a:02:b1:e7:d5:5d:85:8d:c1:9d:6f:f2:cf:
                    b5:3b:23:7d:7a:83:9f:5b:ec:c1:6a:aa:09:61:a5:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:80:25:CE:C2:B2:D2:BF:49:0C:21:AE:A6:74:78:70:BB:4E:9F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS57043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:1d:9d:12:1a:fd:8e:88:5c:60:01:99:c8:39:7c:32:b3:dc:
         e9:26:13:8b:db:e5:32:8a:84:18:0a:8e:db:ea:3c:23:14:34:
         c3:48:28:3d:fe:a4:3c:a2:92:cf:6d:b4:06:74:cb:28:25:55:
         ae:e6:9b:eb:78:8b:de:e2:06:5b:46:b8:59:28:e6:d6:65:a1:
         2c:25:39:0c:ab:4a:c3:82:ec:00:ca:f3:c1:f9:b4:3c:10:c6:
         a9:be:b7:87:e5:ed:18:8f:ab:01:46:05:c7:c2:04:a9:02:89:
         e9:28:aa:a9:de:40:b0:39:c2:fe:27:5c:c4:0a:36:ea:49:b1:
         46:2e:40:dd:fa:18:e7:41:70:d9:c0:71:db:cb:c1:8e:29:70:
         8b:c2:d7:25:60:cf:86:f1:81:c8:30:cd:5b:be:a9:d3:be:ad:
         e5:f2:a0:b1:9b:bd:45:9e:f4:50:01:de:3a:7d:ab:8c:a3:a6:
         c9:53:2a:d2:f0:59:cb:e6:62:13:50:85:f1:fe:de:02:1d:66:
         d6:a7:4d:ee:cc:32:1e:7d:ec:98:2e:54:f7:6a:7e:8c:4a:85:
         3e:2a:33:8f:c9:d3:78:f7:08:fb:c9:27:01:55:f6:5b:57:f1:
         37:6c:19:7e:d1:32:b8:2a:f0:53:f0:6a:fa:a6:ce:73:7c:0a:
         91:d8:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:07:30 2026 by rpki-client