Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS199592.roa
File:                     AS199592.roa (raw, json)
Hash identifier:          vDz//sFFLOJHu9aQeYN5o0lNVDqUqxC4VGStnguzG1E=
Subject key identifier:   2B:2A:D6:01:D3:6D:A0:81:BA:A6:FD:22:E4:98:B5:3B:C2:C6:0A:58
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       76B7569B3E27C69A137E15DBF53635BBFE6309AB
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS199592.roa
Signing time:             Thu 01 Oct 2026 15:19:15 +0000
ROA not before:           Thu 01 Oct 2026 15:14:15 +0000
ROA not after:            Thu 30 Sep 2027 15:19:15 +0000
asID:                     199592
IP address blocks:        169.40.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 07:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b7:56:9b:3e:27:c6:9a:13:7e:15:db:f5:36:35:bb:fe:63:09:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  1 15:14:15 2026 GMT
            Not After : Sep 30 15:19:15 2027 GMT
        Subject: CN=2B2AD601D36DA081BAA6FD22E498B53BC2C60A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:25:6a:11:e2:d0:d1:89:bf:19:ec:72:cc:
                    d5:1a:76:ed:f6:03:5c:25:58:a3:a2:84:5f:69:4d:
                    74:d0:fb:5d:11:7f:93:98:45:95:b5:cb:c2:55:69:
                    6c:a9:60:b4:8f:e7:80:40:0e:12:a1:32:ff:2a:f3:
                    7f:a7:a6:5f:4a:7c:a6:23:dd:30:ea:49:89:d0:b6:
                    91:8e:2a:66:bb:7e:9d:06:1a:eb:6d:6e:0f:b3:28:
                    10:3d:78:b6:b4:d9:2a:3e:5a:ea:73:f4:c1:4b:32:
                    22:aa:2c:7f:e4:ec:f8:4d:bf:08:10:b6:a7:79:88:
                    f5:34:ef:75:f5:50:5e:27:51:af:2d:8d:5e:00:bb:
                    9d:11:a0:02:2b:52:bd:0a:5a:e4:d0:3a:b8:1b:3b:
                    a7:4a:fd:01:84:b9:0a:bd:cf:eb:08:df:4c:09:1d:
                    66:43:43:7f:5e:74:34:0b:65:0f:8a:17:50:6a:0a:
                    7d:cf:98:b1:e0:66:f8:d3:cc:67:4f:b3:24:1e:cb:
                    66:7c:ed:67:41:ee:00:eb:c6:dd:da:17:f6:66:ed:
                    9f:16:23:9a:5b:5d:58:5b:4c:da:ec:72:dc:bc:f7:
                    81:e5:87:ff:e5:85:51:5f:5f:aa:78:1b:a5:e1:88:
                    f8:55:8c:60:5b:ff:4b:02:7a:55:73:55:90:2e:b1:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2A:D6:01:D3:6D:A0:81:BA:A6:FD:22:E4:98:B5:3B:C2:C6:0A:58
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS199592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:df:ac:ea:fd:b3:1a:f2:4c:c5:1d:b8:3e:06:85:e5:ee:6c:
         99:07:59:9f:55:90:53:ed:51:d9:94:79:56:ec:41:a6:de:4d:
         ea:11:af:a6:57:d7:f1:c9:ec:65:65:60:ad:a9:c7:48:14:ca:
         82:3f:e3:ca:12:b6:3a:43:f5:1e:1c:88:87:f8:44:4a:93:ff:
         73:f1:63:f1:9b:13:af:18:c7:2e:ed:1f:fb:01:31:2c:12:6f:
         45:6f:23:5b:24:d4:52:07:ff:b3:e0:8f:f3:65:c2:60:64:dd:
         59:a5:46:b0:93:83:db:48:70:60:bf:1a:10:5c:f2:ae:85:a2:
         25:65:88:2b:4a:ec:7f:2f:12:2f:78:c5:8d:61:9a:d2:c4:fc:
         de:ae:15:3c:9d:19:56:80:01:35:a6:f7:46:6e:38:56:79:54:
         03:16:0c:8d:66:94:4f:da:73:51:8d:b3:b8:5a:ac:83:db:36:
         f3:cd:51:12:07:66:79:25:05:d3:9a:7d:65:b0:e6:73:84:a9:
         9a:53:fe:1b:7c:11:69:99:a0:ec:de:91:bd:77:5d:d5:30:56:
         b4:93:33:35:99:ed:e9:67:b5:03:1e:3c:cc:db:74:3a:c6:50:
         23:e4:be:c0:f4:0a:af:93:c6:4e:a0:08:6b:7d:d4:9c:77:81:
         93:25:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 23:57:12 2026 by rpki-client