Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS132479.roa
File:                     AS132479.roa (raw, json)
Hash identifier:          rXP0I+odcWJ4uLKfbeXKBT7aJKZdiTXIngZ5CR5ihz8=
Subject key identifier:   C6:6D:AB:52:7B:AE:DE:AF:48:BB:05:A5:28:1F:8E:1F:9D:8F:55:F4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       05723644EDCBA7AD021387192B1B3026E6BCA873
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS132479.roa
Signing time:             Sat 06 Jun 2026 06:45:15 +0000
ROA not before:           Sat 06 Jun 2026 06:40:15 +0000
ROA not after:            Sat 05 Jun 2027 06:45:15 +0000
asID:                     132479
IP address blocks:        169.40.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:72:36:44:ed:cb:a7:ad:02:13:87:19:2b:1b:30:26:e6:bc:a8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jun  6 06:40:15 2026 GMT
            Not After : Jun  5 06:45:15 2027 GMT
        Subject: CN=C66DAB527BAEDEAF48BB05A5281F8E1F9D8F55F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:14:06:3b:3a:48:d0:22:4a:86:bc:85:b5:
                    ac:9a:5d:90:a7:aa:e3:a6:cf:f3:8f:ee:a9:d8:72:
                    3a:13:12:48:b8:3a:0e:ab:10:e2:4b:fe:1a:84:4a:
                    b3:9e:3e:22:f1:2d:37:c1:93:1f:0b:6c:08:3c:5d:
                    6b:89:00:32:ef:a6:47:f6:c6:dc:f6:8e:ad:d8:de:
                    fd:7c:3e:79:12:54:42:40:c3:e5:ad:d2:1a:bc:ec:
                    fb:7d:1c:a9:66:4c:28:25:9d:5e:3e:21:cf:14:ef:
                    7a:e9:8d:06:74:13:e4:23:c2:42:e2:f8:19:76:09:
                    e9:92:53:bf:94:bf:3b:8c:a1:01:10:c3:91:f1:b5:
                    3f:81:6c:80:f2:f0:d9:83:f7:eb:78:b1:06:f9:78:
                    90:0b:d8:c8:89:1f:ee:c5:bc:8a:58:c7:e0:0d:9c:
                    cd:30:8c:73:76:67:b8:03:00:2a:e9:e0:b0:c4:5b:
                    1f:79:3a:2d:b9:bc:88:72:c9:ff:a7:30:95:b0:34:
                    a7:fa:39:5c:53:d7:79:45:95:f3:88:87:8f:23:09:
                    6d:95:d9:97:64:c5:0e:40:9a:d2:e3:ef:c9:5e:c9:
                    25:da:7d:25:56:66:4a:0b:7a:75:6b:89:01:23:b5:
                    30:a0:ba:6f:6c:7f:27:60:80:64:0a:75:8a:0d:96:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:AB:52:7B:AE:DE:AF:48:BB:05:A5:28:1F:8E:1F:9D:8F:55:F4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS132479.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:e7:18:2e:71:ae:a8:11:99:2e:12:e2:18:81:12:81:90:
         1b:e6:47:f0:51:1f:e9:5e:81:a2:1d:9e:b3:fd:22:85:e5:3b:
         9a:cf:5e:83:b7:2f:27:b3:ff:64:8e:e2:d4:6f:ec:c0:71:9a:
         8d:86:b3:19:24:93:9d:18:a5:67:e3:40:60:74:7b:61:e3:87:
         44:bb:d3:5f:a8:f3:a7:b0:46:d6:f0:95:6e:c8:8a:a7:ba:9d:
         35:6b:72:7a:37:fb:11:d0:0e:c6:8a:1d:7d:43:19:55:60:64:
         68:f7:33:46:e0:3a:bc:ce:42:0b:b0:06:41:e6:4f:89:66:d3:
         f6:be:2b:75:97:e6:92:79:ec:d3:9d:f1:81:24:22:60:86:d6:
         39:93:52:24:62:48:c4:11:c0:c7:3e:07:f5:4d:98:e8:fb:0a:
         c6:7e:92:8d:5e:1e:12:88:c1:6c:8a:c8:0d:74:01:07:43:4d:
         47:40:cf:21:1e:13:97:88:24:db:64:0a:9e:f5:2e:c2:c7:f6:
         d1:3d:8e:1c:3b:3d:84:67:4b:86:d3:b1:5d:b2:2f:88:01:f3:
         2d:36:23:37:49:4b:51:fc:68:b9:8b:28:d4:b2:44:b9:c6:9d:
         01:ec:15:db:86:1d:32:dd:37:eb:5d:67:e9:c8:22:88:a0:8c:
         9a:70:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:03:58 2026 by rpki-client