Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131332e302f32342d3234203d3e20313734.roa
File:                     3136392e34302e3131332e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          2Knl1ivnLGEaV78am4POLEWl3KZTYGadTPrKc4NLb/Y=
Subject key identifier:   E1:4A:EA:95:14:17:A7:32:0E:DD:1F:DA:1B:BF:A5:A5:33:A6:D8:5D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6C273AFE42E529338A27E36B71CAC36838315937
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131332e302f32342d3234203d3e20313734.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     174
IP address blocks:        169.40.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 22:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:27:3a:fe:42:e5:29:33:8a:27:e3:6b:71:ca:c3:68:38:31:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=E14AEA951417A7320EDD1FDA1BBFA5A533A6D85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:70:8f:1e:13:38:7d:a8:65:04:17:05:23:
                    ee:ba:52:a8:17:b9:57:b4:e0:f3:8a:9b:b7:ed:75:
                    9c:38:92:b2:01:93:56:d6:62:cf:8f:5c:e1:90:67:
                    80:ea:ee:4c:f7:3a:54:3e:93:ba:fc:75:67:09:c2:
                    c3:da:88:be:17:be:32:70:ee:59:2e:47:bb:5f:4a:
                    41:d9:93:a5:e1:72:95:ba:58:86:87:e8:6f:b6:02:
                    70:be:1b:58:45:82:b5:f1:1e:cb:28:3d:a9:dd:70:
                    9b:35:87:7c:41:e4:c1:e3:c8:85:91:ad:41:76:8c:
                    37:2d:a0:4d:d9:e7:a0:b2:b2:7c:77:29:8d:22:19:
                    72:04:ef:0a:05:80:5e:6d:ee:dd:7d:0c:14:b0:86:
                    0f:9b:fc:b9:eb:54:89:33:f6:f2:10:60:48:4d:69:
                    aa:df:1e:cc:d4:c6:39:c5:2c:b0:79:07:38:71:1b:
                    e7:16:82:c4:d3:41:0e:61:9b:f9:63:5f:88:97:9a:
                    dd:fa:ed:2f:89:ca:98:28:60:e6:3c:21:3e:90:d5:
                    f6:5e:bc:e0:53:ae:6b:37:81:02:32:73:1e:21:0d:
                    26:5f:22:ec:77:50:1e:ff:a3:99:1f:61:2a:e0:df:
                    1d:d4:62:17:ad:6f:ee:9d:a4:41:39:f3:31:e9:12:
                    cd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4A:EA:95:14:17:A7:32:0E:DD:1F:DA:1B:BF:A5:A5:33:A6:D8:5D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3131332e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:d7:d5:bb:14:66:1d:4e:17:da:5a:92:e0:1f:fd:72:8f:
         d5:a4:41:fd:38:1f:b5:41:ef:cc:60:4b:c4:02:57:05:fa:e6:
         ed:ad:7c:40:cd:ab:13:23:49:14:63:4d:b5:76:5f:9f:9b:e4:
         4a:e6:e7:da:50:e1:77:27:54:e5:c5:3a:b3:f5:eb:83:c4:1f:
         41:67:5a:20:c1:d2:e6:09:03:e9:b2:8a:e3:a5:12:9f:0f:0f:
         4a:a9:21:07:6d:43:97:55:3e:c5:21:19:57:1a:ff:b2:98:f4:
         08:a6:24:59:49:17:5a:80:49:f8:4d:e7:54:3e:18:48:40:25:
         70:95:a4:50:da:0e:31:f8:76:b1:7a:bc:a2:5c:77:f4:88:bc:
         74:76:c7:03:13:c6:9c:b1:5c:44:b9:35:27:ae:4a:d5:96:59:
         33:2e:78:d4:0a:e8:8a:75:f2:36:3a:11:1b:dc:d2:ed:09:34:
         11:5a:03:b1:14:0c:df:12:d0:7d:58:82:2c:bb:d9:69:3c:a2:
         e7:65:7f:47:79:1d:2a:c2:d2:e4:36:e5:53:8e:68:82:11:0b:
         ef:f6:f9:d4:20:42:c4:55:3e:3c:12:ae:de:15:48:fd:42:10:
         00:84:c2:7d:82:94:02:32:98:79:4d:26:75:30:9d:f6:7c:c9:
         c9:af:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:33:04 2026 by rpki-client