Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS147281.roa
File:                     AS147281.roa (raw, json)
Hash identifier:          IphPz8JXXrfse6++G4YDEDG7A2kyhxg0MIvUk9IRy8w=
Subject key identifier:   F5:1B:8C:D5:E5:E2:BF:48:1C:B8:22:CF:47:87:0D:4C:AC:F1:BB:CE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       729A924B5EAE3128A33386610C968ED4B14FACB7
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS147281.roa
Signing time:             Sat 03 Oct 2026 13:23:53 +0000
ROA not before:           Sat 03 Oct 2026 13:18:53 +0000
ROA not after:            Sat 02 Oct 2027 13:23:53 +0000
asID:                     147281
IP address blocks:        169.40.48.0/24 maxlen: 24
                          169.40.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9a:92:4b:5e:ae:31:28:a3:33:86:61:0c:96:8e:d4:b1:4f:ac:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  3 13:18:53 2026 GMT
            Not After : Oct  2 13:23:53 2027 GMT
        Subject: CN=F51B8CD5E5E2BF481CB822CF47870D4CACF1BBCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:17:3e:41:20:2c:8a:b9:2d:25:2d:37:e1:
                    6f:49:dd:e1:6b:27:27:e1:56:c1:87:15:25:37:f6:
                    3c:d8:d2:21:c7:b9:66:dc:10:09:b0:83:b0:91:37:
                    b9:ee:55:84:ee:17:01:4b:02:df:56:28:07:ef:24:
                    b9:e9:fc:71:28:f0:20:15:94:42:4a:56:bb:e5:38:
                    d9:04:72:64:44:0f:6f:bd:f6:4c:3a:63:0a:f4:4a:
                    fc:98:05:9b:44:4e:e4:20:fc:6a:0d:7e:ad:f7:16:
                    e7:5c:b6:03:cb:9b:31:65:81:d6:18:68:be:31:d8:
                    f5:00:0d:4f:13:91:84:d9:e3:82:76:e9:cf:93:69:
                    af:9d:da:29:be:3b:6a:2d:4b:f3:5c:37:2f:51:8f:
                    39:21:ea:20:3f:fb:aa:3f:ba:b3:5a:83:c9:42:2b:
                    1b:15:a8:51:88:2f:a3:1f:02:a8:81:28:a9:64:cc:
                    3e:42:ea:7a:05:f3:cd:ce:a6:f9:db:64:3f:f3:74:
                    ef:e1:bc:10:3e:57:2a:0c:16:73:59:6f:b2:b2:93:
                    6b:f1:52:e9:93:fc:52:04:d4:16:bc:d6:e8:2e:63:
                    93:2e:1d:71:03:40:6d:f9:c3:9a:77:7e:32:5e:51:
                    dd:7a:e0:45:5b:e6:08:39:63:bf:f5:88:81:bf:b9:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:8C:D5:E5:E2:BF:48:1C:B8:22:CF:47:87:0D:4C:AC:F1:BB:CE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS147281.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.48.0/24
                  169.40.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:16:97:e2:92:07:44:6d:bb:6f:04:62:8c:91:d2:4e:1e:9b:
         b8:ba:00:92:97:47:5c:ee:9e:63:3c:45:6d:f4:06:3e:ff:d0:
         ea:6c:6e:2a:79:d0:82:a5:d2:f0:63:c6:50:14:33:83:13:39:
         3e:7b:7f:42:fd:90:c9:ac:16:f2:86:07:db:16:08:69:bc:a3:
         2a:89:ed:cb:ef:39:6d:a8:05:b1:61:b9:a0:e7:4b:37:b5:ba:
         06:b6:f3:4b:e3:b8:a6:a0:28:63:59:d7:b6:c3:0f:63:33:84:
         c6:ea:bb:11:36:80:73:10:ca:3c:20:7c:43:03:5e:bf:2f:33:
         30:36:1c:5a:42:1b:c8:45:6a:88:ce:58:b3:4a:44:4c:b0:99:
         7d:0b:23:84:d7:e9:12:e3:d3:8d:78:14:19:3e:ac:3c:67:85:
         d3:5e:1a:34:4f:64:01:0a:eb:98:bb:c1:74:b6:62:e2:56:99:
         e6:1a:ad:34:ea:63:cc:23:eb:5c:e6:f2:db:29:0f:4c:34:63:
         35:e7:e3:a4:0d:8f:f6:d7:3d:af:db:9a:db:46:8e:2f:e6:89:
         79:3c:73:85:5f:4e:12:b2:ef:ed:05:fa:4b:ab:95:10:ee:00:
         5a:31:7a:d1:af:e8:be:be:31:e5:27:0c:23:96:76:32:2a:89:
         ca:a3:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:46:32 2026 by rpki-client