Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS133639.roa
File:                     AS133639.roa (raw, json)
Hash identifier:          nY5K8yq70a9vzigUdcrLBMDuShUhg08ux5aVXUaLCLo=
Subject key identifier:   CF:74:71:50:72:D5:57:8C:93:F9:46:FC:34:AE:36:75:E3:23:F1:9F
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       77502F67746BF03E5172F863F366AF84945C8684
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS133639.roa
Signing time:             Mon 22 Jun 2026 19:03:07 +0000
ROA not before:           Mon 22 Jun 2026 18:58:07 +0000
ROA not after:            Mon 21 Jun 2027 19:03:07 +0000
asID:                     133639
IP address blocks:        169.40.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 19:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:50:2f:67:74:6b:f0:3e:51:72:f8:63:f3:66:af:84:94:5c:86:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jun 22 18:58:07 2026 GMT
            Not After : Jun 21 19:03:07 2027 GMT
        Subject: CN=CF74715072D5578C93F946FC34AE3675E323F19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:d9:1c:8e:53:a1:0c:ff:d2:03:e7:cb:f3:
                    ef:1e:c2:b7:7f:1f:6e:a1:f6:49:8f:76:e9:5b:dc:
                    1f:20:5c:a6:72:9f:af:7a:e0:5b:f5:eb:92:c9:66:
                    c5:61:e8:91:36:17:35:4b:18:66:8d:72:a4:1b:b7:
                    5f:2a:f7:48:e8:cb:49:df:ee:fd:44:72:5b:ce:04:
                    f5:2c:87:9e:75:e7:f4:d3:af:fb:e4:2e:ff:a6:74:
                    7c:f5:bf:9d:5b:5b:36:86:eb:31:50:de:bf:16:fa:
                    52:de:44:af:e0:4f:3e:9e:80:d9:67:ce:c6:7e:52:
                    24:df:b0:b1:3b:34:dc:9c:a5:ee:52:55:82:5b:12:
                    57:ea:20:b9:33:e8:a7:b5:53:f1:b2:d5:69:a7:65:
                    3f:c6:86:68:71:f3:52:ce:b7:ae:7e:6c:f1:0b:02:
                    9e:d1:d0:e1:98:79:77:c0:85:2c:39:bb:04:21:46:
                    14:7f:d5:66:60:cd:08:72:d0:89:f9:a1:cd:90:f8:
                    cc:07:09:40:ab:d5:e2:42:74:b6:50:d9:10:ee:4b:
                    e5:62:cf:c5:31:a3:1c:1e:e5:45:24:22:8e:cd:48:
                    bc:22:1e:25:f0:00:3a:61:63:8f:72:f2:4c:d3:6e:
                    a9:37:bf:d7:45:a1:1a:bd:9f:83:c2:30:fe:5e:a3:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:74:71:50:72:D5:57:8C:93:F9:46:FC:34:AE:36:75:E3:23:F1:9F
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS133639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d4:a2:cf:fd:a2:15:29:97:68:8a:b2:df:59:62:12:24:20:
         1b:bd:0a:0b:97:87:2a:05:ed:e1:67:02:78:90:d7:75:bb:79:
         90:8a:ad:1a:da:66:a7:e2:83:62:97:cc:1f:cf:6e:e9:77:85:
         ac:13:d1:7c:46:2b:73:38:44:46:5f:9b:79:76:90:f0:7b:11:
         ef:ac:6a:4c:0a:db:06:b6:3e:32:42:e1:08:1c:29:d3:83:7f:
         c5:9c:a6:b3:85:8b:d3:5e:27:6c:8e:8d:31:c4:35:97:88:3f:
         c9:a6:92:1c:cc:c1:15:2f:ce:94:34:f6:ea:67:07:10:10:9c:
         7a:81:2a:61:b4:2f:2d:69:dd:0c:31:58:6e:21:68:c5:d8:bf:
         13:4f:28:0a:19:f5:cf:6e:a1:54:bd:76:6e:5c:e4:4c:34:94:
         49:78:a9:d6:ec:2f:8c:88:53:08:3b:ef:59:d5:7a:ea:4e:08:
         b5:f0:02:62:53:d7:99:63:6f:c7:9e:cf:48:27:3a:f3:36:7e:
         15:ed:e3:ab:db:f9:bd:0d:d3:d7:18:9c:f2:1f:92:e5:f4:f1:
         e9:9b:46:6d:f3:40:6e:90:29:8e:ba:dd:90:d0:97:15:3b:bd:
         41:6d:56:a7:0e:2f:3c:76:5d:c9:c4:cd:b1:f3:53:d1:77:d7:
         dc:27:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 01:45:37 2026 by rpki-client