Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198840.roa
File:                     AS198840.roa (raw, json)
Hash identifier:          +PKOK41y7Y0daVpT99GGja0WsOcClP7VNB7q+XhnYxo=
Subject key identifier:   98:84:61:08:37:D0:3C:C2:F3:42:27:11:91:54:10:17:B8:FA:34:6C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       03EF2FDBA4127233EBEE0A76B6184D8866807D73
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198840.roa
Signing time:             Mon 31 Aug 2026 14:49:55 +0000
ROA not before:           Mon 31 Aug 2026 14:44:55 +0000
ROA not after:            Mon 30 Aug 2027 14:49:55 +0000
asID:                     198840
IP address blocks:        169.40.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 00:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ef:2f:db:a4:12:72:33:eb:ee:0a:76:b6:18:4d:88:66:80:7d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 31 14:44:55 2026 GMT
            Not After : Aug 30 14:49:55 2027 GMT
        Subject: CN=9884610837D03CC2F342271191541017B8FA346C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:3c:d9:cb:fc:76:ce:ae:f7:49:5a:d2:74:
                    24:84:c5:16:24:55:e3:31:69:e7:63:72:fd:bf:a4:
                    5c:51:a3:0d:30:23:7a:0d:f6:af:c0:7a:66:22:61:
                    25:44:fb:68:b2:e2:e6:a5:e5:dd:69:70:66:b6:00:
                    e5:eb:28:52:68:53:2d:f9:d0:4d:cf:e1:e3:cf:c2:
                    75:a8:81:23:0c:52:ad:a7:4b:ca:3f:10:f5:42:32:
                    68:74:60:15:2f:45:cb:79:fc:c8:5f:b5:e6:31:7a:
                    2a:d1:58:6a:29:b0:76:ea:bd:0c:db:c3:8f:74:fb:
                    e1:32:89:7d:0c:f4:71:ee:8c:8d:d8:d7:dd:f8:e9:
                    a3:73:48:2f:94:c6:02:66:93:83:ac:ce:d4:64:76:
                    74:4c:db:42:9a:2d:7c:05:b0:8a:98:50:9a:eb:21:
                    e0:ca:f4:b6:12:ea:4e:ac:b9:cb:22:45:7d:e3:7b:
                    c3:e7:0e:01:ca:80:e3:ee:ab:ac:00:8f:13:3a:93:
                    65:5d:10:a3:10:66:6e:7a:03:70:d7:f3:f8:e2:e6:
                    ef:f3:49:4e:d1:32:1e:f0:52:4e:68:d4:ed:70:f6:
                    72:9e:02:fe:6c:12:ae:2c:f4:39:dc:53:73:7f:67:
                    75:1f:38:f3:0c:f8:7d:3d:28:4c:04:22:ee:8d:8c:
                    ee:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:61:08:37:D0:3C:C2:F3:42:27:11:91:54:10:17:B8:FA:34:6C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS198840.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:53:77:4b:a9:5e:00:4a:5b:db:d6:2e:6f:f8:6b:36:f2:
         87:94:0d:67:c7:ea:36:b6:b3:cf:68:bb:68:bf:bf:7b:6b:91:
         5b:20:a5:8c:81:42:6b:08:7b:9f:57:c0:28:bd:f8:c4:eb:aa:
         1e:0c:46:2c:a6:05:a6:e3:85:57:15:ad:57:bc:80:aa:f7:90:
         47:17:7a:1c:fe:ca:65:5e:d4:2d:e0:6d:80:95:6c:1b:c3:77:
         c8:3d:8e:81:8e:38:79:ef:39:2e:dd:7e:cb:33:59:f9:c3:08:
         58:9d:b9:78:c8:30:3a:f1:2c:9a:21:8a:4b:ce:96:55:b1:3e:
         51:7c:e7:77:bd:0c:0b:05:b6:39:ce:b5:2b:74:b8:1b:4c:47:
         71:c2:6d:56:41:d6:4b:aa:21:8e:d8:bf:23:b7:de:7f:e5:f6:
         e3:2a:37:3b:9e:d2:29:ad:2f:46:37:94:41:6d:e7:e3:47:2c:
         0f:0d:a9:78:5e:b8:71:01:d7:b5:3a:41:d6:38:87:e2:48:2f:
         be:74:64:5b:60:ae:14:ac:1e:99:56:e9:0b:af:c8:45:7e:00:
         41:51:53:4d:61:ed:35:d9:95:67:fa:98:3f:e9:65:2a:bc:21:
         51:b0:fd:4d:b6:dc:99:bf:03:a6:29:5f:07:a8:c7:0d:9b:01:
         62:93:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 15:00:50 2026 by rpki-client