Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS11404.roa
File:                     AS11404.roa (raw, json)
Hash identifier:          9ZynR2ax9Jg4yxHb2VkFQ7PcO2/oOxqsFXCKWHd1C7I=
Subject key identifier:   3F:EC:1B:9C:F7:C7:7C:BD:67:2A:DE:6F:7D:48:ED:4F:85:75:B9:CE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3E3515679A61E188F730DE5418E27670E9A50BB8
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS11404.roa
Signing time:             Wed 29 Jul 2026 22:11:30 +0000
ROA not before:           Wed 29 Jul 2026 22:06:30 +0000
ROA not after:            Wed 28 Jul 2027 22:11:30 +0000
asID:                     11404
IP address blocks:        13.141.80.0/20 maxlen: 24
                          13.141.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:35:15:67:9a:61:e1:88:f7:30:de:54:18:e2:76:70:e9:a5:0b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul 29 22:06:30 2026 GMT
            Not After : Jul 28 22:11:30 2027 GMT
        Subject: CN=3FEC1B9CF7C77CBD672ADE6F7D48ED4F8575B9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:49:18:42:a7:d8:48:ca:5e:5c:f2:ed:b6:
                    81:4d:64:7a:85:22:df:c2:80:71:11:b7:92:24:f8:
                    34:41:8c:fb:41:83:69:3f:d8:84:62:f0:6e:03:cb:
                    66:a0:1f:fe:8a:2a:60:fb:59:e5:8d:f9:4f:d3:25:
                    16:c1:50:32:c4:f4:c9:b2:2c:f6:3d:91:b4:90:4b:
                    87:5a:50:6f:4a:95:a0:51:3d:af:91:b7:be:c7:b8:
                    16:65:93:f1:eb:af:86:23:60:ec:b4:0f:6c:87:c2:
                    cc:28:05:f1:95:da:ac:ba:3a:18:ad:e3:98:c1:fa:
                    bb:dd:6b:41:30:00:0c:88:fc:5b:23:6e:f0:24:c0:
                    d4:f4:eb:50:c0:e3:b3:bb:7a:c2:5d:3b:a5:99:21:
                    50:60:ff:b4:d6:f1:38:62:c3:79:0f:6b:76:d4:e0:
                    3e:24:d1:3e:b6:13:e4:43:5b:d2:8d:64:cf:cf:85:
                    01:bd:d5:79:92:08:fc:99:07:37:68:7d:51:2b:1d:
                    9b:f0:eb:4c:3e:9b:5a:b2:50:f1:4b:95:46:b7:3c:
                    23:a7:c2:3e:61:e7:27:da:b8:05:e7:27:d8:ae:3e:
                    8e:8a:89:2d:3e:6b:e0:81:63:b5:3c:01:e4:7c:50:
                    0a:0e:80:1b:df:59:f9:36:95:bd:83:64:32:ff:09:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EC:1B:9C:F7:C7:7C:BD:67:2A:DE:6F:7D:48:ED:4F:85:75:B9:CE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS11404.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.80.0-13.141.111.255

    Signature Algorithm: sha256WithRSAEncryption
         73:22:91:10:82:8a:b8:8f:ed:de:28:07:3a:66:c5:d4:23:84:
         85:e5:d4:db:26:48:f9:e1:f8:02:b1:86:fd:f0:a7:07:ea:fd:
         a1:97:a4:3c:db:69:f1:4a:2c:a5:8a:69:a7:b9:b3:56:2a:3c:
         fd:fc:dc:e8:44:e4:16:38:03:a4:86:43:fd:29:5b:7c:6b:f4:
         ef:b0:01:16:66:06:5f:84:51:6d:52:28:8c:09:b8:0b:39:9a:
         15:47:60:6e:82:33:85:8d:d8:4d:68:12:ad:5b:ab:72:4b:82:
         95:6c:53:52:96:2a:01:1e:9c:39:d8:58:1e:6a:67:b3:0f:4b:
         d1:a0:50:f6:c6:71:e4:c1:f8:b1:67:bf:a3:30:32:6d:3c:b3:
         f0:38:93:3a:23:07:c0:dc:8f:66:89:04:cb:0c:94:98:95:8f:
         83:79:a5:94:cd:41:2b:64:b9:9f:26:15:97:dd:8e:00:04:46:
         74:6b:b3:fb:12:3b:57:de:a3:46:2c:6c:65:ac:32:91:25:3d:
         ca:0c:b1:c1:04:fa:c3:11:d2:2a:c5:57:9e:8f:6a:48:67:20:
         48:88:b6:d9:0f:74:2a:e6:21:6f:9b:8f:5a:12:bf:33:c2:f4:
         57:38:85:1e:e2:43:fc:f9:42:68:e0:06:9a:a0:75:0c:da:64:
         63:b0:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:12 2026 by rpki-client