Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          SuPAnQlNG0cJhPD9mu8/1cSKyE/lief85QRlfzodkO8=
Subject key identifier:   01:B0:9C:39:4B:B1:A4:1F:7B:FB:8F:5F:94:F1:F0:77:39:58:B4:C5
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       51CF310428B12EDF080C9AE82642358FA8C53526
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa
Signing time:             Fri 02 Oct 2026 22:38:09 +0000
ROA not before:           Fri 02 Oct 2026 22:33:09 +0000
ROA not after:            Fri 01 Oct 2027 22:38:09 +0000
asID:                     13335
IP address blocks:        169.40.38.0/24 maxlen: 24
                          169.40.40.0/23 maxlen: 23
                          169.40.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 20:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:31:04:28:b1:2e:df:08:0c:9a:e8:26:42:35:8f:a8:c5:35:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  2 22:33:09 2026 GMT
            Not After : Oct  1 22:38:09 2027 GMT
        Subject: CN=01B09C394BB1A41F7BFB8F5F94F1F0773958B4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:b6:bb:bf:87:4d:6e:db:e2:2b:23:b4:55:
                    d6:41:23:68:c7:87:a0:94:93:d2:81:33:bc:7a:cd:
                    e5:52:0c:a0:6a:f1:32:43:be:41:a7:db:61:51:95:
                    0a:b1:69:05:d1:e4:1c:fc:87:55:f8:1a:98:37:3d:
                    b1:42:41:f4:c1:19:23:b5:a0:cd:3f:be:c5:80:f8:
                    4e:c8:67:b9:4d:62:2d:76:0b:12:5f:73:62:d3:7e:
                    fa:a1:06:f5:b0:66:8d:58:42:84:c5:f5:70:63:dd:
                    88:62:a6:74:99:37:bd:82:6a:4f:94:69:c9:b1:71:
                    c5:91:4b:e4:ed:c2:cc:bb:d6:25:35:1f:76:d6:aa:
                    63:6d:ab:06:02:21:ba:03:ba:37:3f:83:b0:be:ee:
                    6e:69:d1:c4:20:1f:e4:2c:8a:26:e7:c8:fd:0e:dc:
                    81:63:fd:eb:ed:15:fa:14:f6:f9:95:e2:26:76:c2:
                    51:50:d8:5b:7f:9c:42:6a:ee:86:d7:ad:4e:fb:02:
                    d4:81:b0:81:fd:b8:24:4d:2d:bc:6d:3e:50:ab:c8:
                    0e:4f:be:7b:f3:63:d9:5e:a3:7a:47:a4:1b:b5:55:
                    fc:0d:e2:9c:8a:75:a9:bb:58:fe:1f:71:2d:84:ee:
                    b2:0e:a8:11:85:22:3a:52:af:97:84:69:b4:94:cd:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:9C:39:4B:B1:A4:1F:7B:FB:8F:5F:94:F1:F0:77:39:58:B4:C5
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.38.0/24
                  169.40.40.0/23
                  169.40.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:6d:7b:c4:27:45:bb:86:c2:2d:68:44:d7:79:3d:c5:f4:
         ab:cf:dd:44:72:40:a2:29:67:18:38:73:28:d6:65:32:22:d6:
         31:90:c6:f7:72:ef:1a:65:69:4a:48:fd:d2:6a:83:82:4f:b6:
         cc:62:d7:6b:2e:70:ec:9f:39:e8:8d:3c:07:fa:2d:8e:ef:5e:
         63:04:71:11:3a:79:68:41:8c:03:f2:35:b1:14:e5:f7:b0:26:
         48:7b:f1:00:c1:64:39:8f:57:08:92:46:da:54:0a:c5:8a:72:
         b8:0b:57:68:43:b8:0d:1a:1f:b0:fc:d6:ee:95:11:cb:50:db:
         d9:3c:82:c2:78:7e:56:74:f0:33:13:4e:41:64:01:ec:ff:64:
         e6:60:71:ea:15:f4:9a:f2:44:44:ee:7b:e4:df:f2:3f:91:48:
         12:b4:8a:55:f2:f5:ea:bf:5e:0a:b3:65:01:75:be:8e:31:f2:
         75:22:aa:80:29:29:38:90:aa:50:5b:e0:24:f0:18:d8:a6:c2:
         f2:6b:be:fb:23:85:46:4d:b7:2c:64:15:19:f6:b5:f3:30:60:
         bc:31:98:8d:89:76:b3:a1:1a:d6:16:55:7d:51:ee:3c:e2:e9:
         f8:27:9e:7d:46:01:8d:ff:ae:08:bb:b5:d3:fb:cb:5c:52:2c:
         ab:1a:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:36:42 2026 by rpki-client