Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS211392.roa
File:                     AS211392.roa (raw, json)
Hash identifier:          MIUTN85XldgdGRgoMNeCKsydc8kN9S2tM81A4Hb8n+4=
Subject key identifier:   BC:A6:73:A7:D5:EB:DC:2E:74:7A:0F:6D:51:8E:9F:2B:DC:1D:13:03
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5239A0A680B7C542B0CFEF705AF97D02EC369875
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS211392.roa
Signing time:             Sat 22 Aug 2026 05:29:44 +0000
ROA not before:           Sat 22 Aug 2026 05:24:44 +0000
ROA not after:            Sat 21 Aug 2027 05:29:44 +0000
asID:                     211392
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:a0:a6:80:b7:c5:42:b0:cf:ef:70:5a:f9:7d:02:ec:36:98:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 22 05:24:44 2026 GMT
            Not After : Aug 21 05:29:44 2027 GMT
        Subject: CN=BCA673A7D5EBDC2E747A0F6D518E9F2BDC1D1303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1b:63:af:0f:2c:af:68:7e:cb:97:c7:d8:f1:
                    26:67:db:8b:88:d2:a9:56:95:90:96:88:40:4e:41:
                    29:3b:f0:34:ba:15:6e:77:44:5a:a7:c8:e7:88:b2:
                    6b:19:3d:c1:7b:e4:8c:a5:ea:47:28:82:b1:32:ca:
                    b5:b7:58:5a:90:3f:58:90:ba:54:0f:b2:8f:68:c6:
                    32:88:74:56:8d:ce:ff:bf:0a:86:f4:69:e6:59:60:
                    05:a6:20:1f:92:ad:2e:76:aa:c1:53:4f:eb:29:3d:
                    cb:a3:f3:a1:fb:44:b7:9e:fc:a8:53:a8:7d:68:b8:
                    28:e0:d1:66:d5:6c:0c:05:9a:2c:3d:8e:c6:24:aa:
                    37:47:e3:13:72:e2:58:22:27:3f:03:85:3f:fe:4a:
                    70:ca:fe:dc:db:db:30:10:60:77:a9:1e:df:79:d7:
                    15:c9:b2:68:6a:5c:7d:d4:b3:83:0d:4a:b5:39:3b:
                    47:c0:e8:27:12:2f:5c:52:b5:c1:7d:2a:85:7b:a2:
                    e2:8d:35:30:bf:16:27:ed:b4:36:d5:c9:93:97:95:
                    43:d8:02:f0:b9:53:66:4b:1c:53:48:82:18:60:95:
                    2e:d3:8b:a5:c9:20:1e:f0:1c:a2:d7:fd:8f:13:98:
                    1c:dd:a2:a2:70:a3:a9:75:18:f2:09:2a:ad:77:0b:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A6:73:A7:D5:EB:DC:2E:74:7A:0F:6D:51:8E:9F:2B:DC:1D:13:03
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS211392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:db:f8:b3:ac:74:9b:84:66:00:78:30:8e:17:8f:40:41:7a:
         4b:74:f8:8b:f1:28:73:fe:8b:15:52:fa:7c:0f:c9:a4:48:f2:
         cf:e1:43:93:25:b3:d2:43:0f:67:e0:e4:69:1a:2f:1f:88:2f:
         c7:92:cb:c3:a9:47:37:c0:b6:a4:b2:aa:5a:d9:69:81:a2:d3:
         a8:26:56:90:0e:3f:fe:2b:9f:49:85:86:99:ce:8e:56:f1:17:
         ff:cb:bf:b6:e1:49:51:15:9f:b0:4f:5c:3d:02:15:d2:7d:15:
         7c:a5:8a:27:aa:47:e7:19:0a:55:4c:fb:d1:eb:0d:7d:56:4b:
         3f:93:a9:45:0c:85:e1:2c:2a:80:9c:f4:68:a7:5a:d6:35:86:
         d3:9d:f0:8b:8a:30:d1:33:d8:9d:b8:88:01:67:30:31:54:fc:
         8f:e3:65:71:60:bb:db:8b:30:36:d3:4f:b3:b1:23:6f:1d:4c:
         d0:56:6b:0f:29:e6:4d:86:48:a9:51:d2:40:47:18:84:59:20:
         7b:d5:f4:65:26:fa:89:27:ee:b6:3e:f5:5e:1a:aa:72:6d:ec:
         44:d7:b1:e5:76:14:27:40:81:e8:16:97:fe:3e:c8:48:35:15:
         e5:37:ae:8f:c5:10:1c:60:a5:e4:67:a2:d8:84:60:88:a6:17:
         0c:01:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 11:39:35 2026 by rpki-client