Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          DK1s8qpVvQU2Yj96+peUqI9q9CuLIxLwY2qI/9ujUhc=
Subject key identifier:   77:42:C1:49:7B:37:E4:4C:E1:18:2F:E6:8C:A8:85:A4:E8:97:55:D4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4CD771B660401AE8E80B42BAA825C432AC46099E
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212238.roa
Signing time:             Sun 25 Oct 2026 05:24:22 +0000
ROA not before:           Sun 25 Oct 2026 05:19:22 +0000
ROA not after:            Sun 24 Oct 2027 05:24:22 +0000
asID:                     212238
IP address blocks:        169.40.101.0/24 maxlen: 24
                          169.40.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Nov 2026 23:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:71:b6:60:40:1a:e8:e8:0b:42:ba:a8:25:c4:32:ac:46:09:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 25 05:19:22 2026 GMT
            Not After : Oct 24 05:24:22 2027 GMT
        Subject: CN=7742C1497B37E44CE1182FE68CA885A4E89755D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:6c:73:9e:fe:e4:6e:fe:a5:32:9b:3d:69:
                    e8:1d:bc:5b:a8:9c:03:e3:96:65:9a:07:61:0b:54:
                    5b:02:83:ec:ae:c0:c5:91:ec:73:2f:7f:04:42:17:
                    f0:a2:97:c8:1c:ec:8f:cc:d8:ce:8d:cc:dd:b6:1a:
                    14:2a:6c:ef:2d:9e:4f:65:8c:6e:5c:09:37:30:69:
                    ab:c9:46:2f:04:4f:ea:83:64:d0:53:95:ef:53:a8:
                    24:5e:3e:49:71:31:c2:da:cd:8f:66:9e:e9:84:95:
                    f5:b1:e0:05:26:b1:32:8b:50:4a:13:5f:79:64:81:
                    1e:96:29:f1:80:8f:8a:0c:0a:a7:bf:6f:94:aa:e5:
                    28:27:b6:09:c1:0e:4b:c9:95:9f:69:2e:b1:f4:9c:
                    fd:fe:f7:fb:45:d8:ea:57:dc:2a:db:d5:f0:9f:59:
                    0c:d9:c2:ef:32:9f:b6:09:58:47:96:29:1c:bf:d5:
                    a7:fa:f6:31:8b:8d:2e:28:c5:01:85:2d:c6:e3:11:
                    aa:34:73:ec:6f:8d:79:af:c3:fd:49:21:c5:c5:80:
                    49:58:7b:57:11:8c:fd:13:98:5e:94:4f:ac:8b:2b:
                    39:aa:cc:44:da:25:db:c2:ca:6b:39:ef:59:6f:c0:
                    6e:76:e5:8b:95:7b:4d:fe:6f:61:7f:ac:1c:d0:75:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:C1:49:7B:37:E4:4C:E1:18:2F:E6:8C:A8:85:A4:E8:97:55:D4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.101.0/24
                  169.40.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:02:73:7e:47:c0:b1:24:34:79:73:84:f0:d3:87:2e:38:b6:
         90:dd:47:49:18:ee:e7:ca:1b:d0:d1:42:07:5e:ff:5b:98:8e:
         65:05:c9:2d:86:45:a3:ba:66:26:57:73:a2:da:62:b4:24:30:
         22:b9:08:14:29:99:f1:2e:92:df:d8:82:b0:84:24:a5:e8:8d:
         80:d1:36:27:e2:21:89:5c:3d:f0:09:98:d1:88:d6:fd:e8:f9:
         19:30:f2:66:c0:60:34:c2:f8:d7:84:3e:1d:da:d1:8d:b7:1c:
         84:e8:fb:e6:b4:66:99:9e:3a:db:c5:98:62:76:ea:a7:54:8e:
         1e:b8:4f:6f:51:87:66:c5:76:01:93:9e:6d:86:99:fd:38:bc:
         64:f8:c5:cc:50:c2:18:ed:8d:cc:62:a5:a2:1b:92:0a:b6:8b:
         e2:56:01:c1:9e:22:14:0f:52:08:e5:c3:f7:ba:aa:3c:2c:42:
         be:e6:06:0a:0b:3c:06:ea:e8:6e:10:36:ab:67:38:05:df:a2:
         de:27:97:da:0b:28:10:05:65:5a:89:fa:4e:bf:ff:bf:4d:87:
         29:5a:69:f2:e6:5a:92:a9:73:c8:98:88:6e:90:ef:4a:1d:b3:
         eb:47:e9:20:fa:5e:55:5c:26:01:3b:5e:9b:80:7f:70:1d:52:
         50:87:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:23:23 2026 by rpki-client