Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13347.roa
File:                     AS13347.roa (raw, json)
Hash identifier:          Cd92udEM7Y2t4eIXvNSTxPVMDh7HyV4nPY+Bubm8l8I=
Subject key identifier:   01:77:DB:64:EB:3C:4F:F9:FA:8A:F8:98:63:89:F4:21:71:8D:8A:A6
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       226CDD517EF54394D205977D3F3803A2838E056F
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13347.roa
Signing time:             Mon 12 Oct 2026 00:05:39 +0000
ROA not before:           Mon 12 Oct 2026 00:00:39 +0000
ROA not after:            Mon 11 Oct 2027 00:05:39 +0000
asID:                     13347
IP address blocks:        13.141.0.0/20 maxlen: 24
                          169.40.144.0/24 maxlen: 24
                          169.40.145.0/24 maxlen: 24
                          169.40.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 07:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6c:dd:51:7e:f5:43:94:d2:05:97:7d:3f:38:03:a2:83:8e:05:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 12 00:00:39 2026 GMT
            Not After : Oct 11 00:05:39 2027 GMT
        Subject: CN=0177DB64EB3C4FF9FA8AF8986389F421718D8AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:e3:92:c7:50:10:7f:05:c5:78:83:00:58:
                    a3:58:61:f7:16:53:36:63:e5:12:31:bd:ab:88:f5:
                    f6:08:a9:cd:6a:50:51:db:d2:03:69:d1:72:4c:9c:
                    c7:0b:de:cd:73:01:64:36:93:ee:b1:38:0c:e3:fc:
                    d6:c4:13:bd:b5:11:04:8c:a2:2f:d0:da:bd:66:3a:
                    f4:67:31:4e:7c:4e:64:0f:f2:41:ce:17:9c:3b:c4:
                    f5:6e:91:49:af:94:27:1d:7b:04:32:8d:fa:b3:25:
                    25:20:83:11:8d:d9:8e:88:b4:5f:22:e1:f0:a6:bc:
                    7e:1f:02:2f:b4:92:a3:ab:3c:8c:68:a9:03:2e:94:
                    dd:b2:c0:74:90:89:f6:59:f4:ab:b6:e8:cb:20:83:
                    e5:b9:3a:98:a9:d1:c2:36:b8:3e:c2:a6:6c:34:37:
                    17:e3:81:7c:f2:49:fc:69:19:37:95:85:80:e0:c7:
                    ba:01:82:0b:76:03:13:a1:b8:0f:38:31:28:f5:f6:
                    89:e0:ea:ab:f3:f4:88:4b:15:3a:65:1e:5b:97:4f:
                    4a:7f:5f:f6:c5:fa:cc:b7:67:ff:65:ea:24:f7:b3:
                    d0:9c:48:f9:bd:ce:5d:3b:73:89:40:10:c0:2a:d2:
                    80:0c:ab:ac:ee:44:6e:4c:9d:3e:2a:8f:8c:9b:58:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:77:DB:64:EB:3C:4F:F9:FA:8A:F8:98:63:89:F4:21:71:8D:8A:A6
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13347.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.0.0/20
                  169.40.144.0/23
                  169.40.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:7e:51:9b:1f:94:ac:a0:e6:7f:cf:be:a4:80:bb:8f:36:
         26:cd:59:d8:cc:ac:b7:a3:61:ab:09:50:18:b3:35:f6:aa:77:
         f2:93:7f:df:58:78:85:e9:02:0a:c5:09:d1:96:8a:22:e8:d4:
         39:fc:dc:41:c2:ef:58:2c:f2:2f:6c:df:20:79:bd:39:e4:1f:
         80:38:35:d3:8a:b9:c7:7e:3b:19:38:76:12:d3:90:cd:54:f7:
         94:f2:51:17:06:bd:7a:88:0a:8d:3c:ed:0b:e5:8a:aa:1a:1f:
         ac:23:a1:ca:45:b0:de:67:e6:96:3b:f9:17:51:ad:b2:15:67:
         6a:0a:de:9b:2d:0f:09:67:54:21:46:93:df:f0:6d:ec:65:f5:
         70:a6:d8:3c:0a:de:12:7f:2b:33:47:04:2a:3a:bb:f3:09:3b:
         40:15:3e:92:9b:57:a0:27:b2:e5:d8:9f:34:a7:5c:32:29:19:
         63:7a:cb:9b:01:f9:c1:7a:fd:d6:6c:37:92:7a:95:2c:cc:dd:
         29:10:01:d5:37:fa:d1:a7:53:4b:75:04:75:f6:37:4e:66:3a:
         5b:cd:a3:f7:b6:cc:fc:db:69:a1:a5:8a:e4:49:5c:17:e4:d7:
         72:5d:b8:1c:08:07:71:f9:35:90:0d:30:53:0a:60:d4:2e:a0:
         07:93:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:10:26 2026 by rpki-client