Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13347.roa
File:                     AS13347.roa (raw, json)
Hash identifier:          BKEYMghGWw6a7GOxs3hiCaMPE4MagWcMlAxivCOySUk=
Subject key identifier:   6C:BC:BE:FE:44:66:18:4E:74:EC:1D:E2:6F:2F:56:6F:97:06:65:11
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0B3DFDBF0DC5C5B09C1E84EEFA96E37A02D4FAC4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13347.roa
Signing time:             Fri 10 Jul 2026 20:25:19 +0000
ROA not before:           Fri 10 Jul 2026 20:20:19 +0000
ROA not after:            Fri 09 Jul 2027 20:25:19 +0000
asID:                     13347
IP address blocks:        13.141.0.0/20 maxlen: 24
                          13.141.16.0/22 maxlen: 24
                          13.141.40.0/22 maxlen: 24
                          169.40.144.0/24 maxlen: 24
                          169.40.145.0/24 maxlen: 24
                          169.40.184.0/22 maxlen: 24
                          169.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 19:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3d:fd:bf:0d:c5:c5:b0:9c:1e:84:ee:fa:96:e3:7a:02:d4:fa:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul 10 20:20:19 2026 GMT
            Not After : Jul  9 20:25:19 2027 GMT
        Subject: CN=6CBCBEFE4466184E74EC1DE26F2F566F97066511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:29:77:8d:bf:2e:70:17:19:6e:ba:29:b1:
                    21:ef:cb:9c:9a:3c:db:b9:04:4a:ae:8e:50:9d:7c:
                    f3:49:44:2e:55:b1:ae:24:cb:88:7b:69:17:83:5c:
                    94:45:cf:6c:e0:ed:37:81:a8:3e:1e:17:8e:e9:5a:
                    22:45:18:95:16:a6:e6:7e:30:d5:51:9b:6f:77:46:
                    4a:e7:9e:1b:33:62:8c:ad:8b:3f:8f:3d:87:25:b5:
                    9b:41:50:a8:3f:6c:1d:57:07:32:b1:28:82:a5:11:
                    56:19:65:f2:58:fc:80:a0:3b:28:3b:ce:bf:6b:05:
                    dd:6b:8a:af:27:21:b5:b8:cd:5b:87:1e:27:1a:f3:
                    01:13:eb:7e:3a:4c:ad:c9:3c:1a:fc:44:8e:38:d2:
                    a4:52:f1:f5:49:51:ab:fb:73:b4:84:ef:50:ce:7d:
                    fe:5e:83:6f:95:e7:92:bc:d4:f9:0d:26:0c:34:6c:
                    5b:d2:ad:58:a9:30:51:dd:e8:a9:a6:ae:f5:67:d4:
                    2e:eb:12:01:39:81:fb:a6:6b:38:37:aa:f0:93:17:
                    e2:81:47:c0:fc:d7:06:e2:b8:6d:0f:75:c4:f4:c0:
                    20:04:ee:96:6a:90:d0:7c:c7:9f:ef:5d:dd:96:19:
                    10:44:0a:e7:82:cd:3a:52:23:a9:c6:20:6d:00:9a:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:BE:FE:44:66:18:4E:74:EC:1D:E2:6F:2F:56:6F:97:06:65:11
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13347.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.0.0-13.141.19.255
                  13.141.40.0/22
                  169.40.144.0/23
                  169.40.184.0/22
                  169.40.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:8e:1d:f9:de:ce:57:4e:3f:e6:92:41:cc:ea:95:49:68:93:
         e2:b4:fd:7a:b5:65:dc:2a:53:a0:e5:84:62:0d:4d:fc:af:93:
         b6:93:25:b5:7b:b6:8a:2e:f3:33:fc:09:b1:da:41:fd:e9:f1:
         dd:28:5d:ac:2f:6d:bd:26:20:33:c2:b4:12:2e:bf:4c:a6:38:
         b6:99:b7:f6:89:d7:b6:26:ad:20:09:04:4a:9c:8a:e7:ef:06:
         91:75:df:16:cf:49:c9:6c:bc:00:a6:0a:a4:f9:7a:d9:db:3b:
         8d:20:99:28:9a:49:ef:16:66:f9:2b:cf:08:a0:19:10:1f:e7:
         ca:0d:47:4d:66:8a:cd:0b:20:ed:e8:84:c4:5e:38:36:fd:2d:
         60:51:9f:4d:00:a2:82:2b:ec:8d:39:f0:40:20:37:0b:aa:75:
         fa:b8:0c:8c:7e:c0:91:ed:3c:bc:f7:f1:0c:2a:f3:20:3e:4f:
         6d:86:0d:51:b5:b9:dd:9a:23:53:8c:c8:73:f1:6c:13:0c:b9:
         62:50:66:b1:26:66:aa:74:7e:3b:5d:40:34:9b:90:1c:2d:49:
         aa:57:62:67:93:45:59:0c:aa:93:c1:e5:06:18:38:b8:9c:53:
         f0:43:ad:95:67:77:37:20:f4:f6:7b:67:15:00:dd:a5:e5:a6:
         a8:65:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:10 2026 by rpki-client