Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS213618.roa
File:                     AS213618.roa (raw, json)
Hash identifier:          pEXEZGL+4dyr2K1yrlrY94Mni9cAPaKQB0BDmwKbWOA=
Subject key identifier:   24:4E:F4:4A:26:B1:EE:75:33:0E:B2:7D:BE:97:BD:B0:E4:65:7E:34
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1F9ACB2AB974B38CB078BC27609ECB4659137CDD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS213618.roa
Signing time:             Thu 12 Mar 2026 15:11:01 +0000
ROA not before:           Thu 12 Mar 2026 15:06:01 +0000
ROA not after:            Thu 11 Mar 2027 15:11:01 +0000
asID:                     213618
IP address blocks:        169.40.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 10:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9a:cb:2a:b9:74:b3:8c:b0:78:bc:27:60:9e:cb:46:59:13:7c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:01 2026 GMT
            Not After : Mar 11 15:11:01 2027 GMT
        Subject: CN=244EF44A26B1EE75330EB27DBE97BDB0E4657E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:1b:5f:27:cb:04:f0:db:9f:18:57:cb:2c:
                    d8:d9:c0:d6:15:b4:4f:20:36:a2:4a:14:7d:d2:da:
                    cb:7d:58:e4:03:db:60:fc:db:29:97:90:03:55:d6:
                    eb:8c:02:7d:ce:0d:70:9f:87:e0:65:c2:2d:e1:5b:
                    51:36:c2:84:7f:ce:e7:3a:4b:b9:11:90:65:bf:a5:
                    87:f8:e5:e0:8c:73:62:11:8f:d4:70:da:9d:bc:51:
                    3c:9b:3b:c5:33:04:9e:65:98:60:c9:8e:9c:58:a8:
                    40:74:8b:40:e2:54:3e:cb:69:f6:56:0d:9a:8f:57:
                    8c:7f:88:09:2f:cc:0c:22:37:1b:23:e0:f7:3c:e4:
                    9d:29:9f:15:6b:d8:e5:18:60:86:73:ed:02:07:1b:
                    f6:e7:67:53:1d:e4:2e:9a:4c:89:18:a3:60:b6:5d:
                    63:66:df:a7:49:5e:f9:7e:0d:90:3d:0a:4b:2c:04:
                    fd:9a:bb:13:f8:14:7b:be:73:ad:24:f0:66:4d:8c:
                    b7:34:99:31:cc:cf:39:00:cc:13:9e:e4:4f:20:45:
                    20:91:98:8a:30:88:ad:04:35:ba:f2:26:43:59:8b:
                    91:e6:55:a6:ef:d6:66:4e:0e:54:bc:78:32:d1:62:
                    f0:8d:1c:5c:da:87:bb:e0:db:ed:24:e8:a9:fe:d9:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4E:F4:4A:26:B1:EE:75:33:0E:B2:7D:BE:97:BD:B0:E4:65:7E:34
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS213618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:60:2c:31:8c:3e:b6:dd:df:d6:2f:8f:ff:7a:66:76:10:
         1a:09:a1:0f:98:56:01:ad:77:f9:4a:2c:fa:56:9c:35:c4:9b:
         d6:12:0b:c3:0d:76:0f:6f:ea:e2:ac:2b:13:e5:d7:29:0f:94:
         e1:83:c9:fc:ee:9f:1c:5a:ef:a6:f7:6a:bd:ff:bd:ba:47:a9:
         ff:ac:92:e8:24:b9:61:83:98:79:02:75:0d:1a:71:56:f9:ef:
         1c:75:5e:7c:7c:2c:7d:2f:d3:38:5d:56:ba:41:72:27:87:fe:
         9b:11:39:4b:d6:41:0e:1a:21:cf:0d:81:ad:5d:9b:18:f4:7b:
         da:4e:8b:27:08:d5:97:a2:4f:d6:e0:1a:90:df:6a:96:03:33:
         04:7b:e6:57:9f:96:50:92:1f:59:79:b7:8d:dd:8e:e3:2e:61:
         c9:29:27:f0:b6:e4:23:72:12:be:20:5b:45:64:42:31:60:5f:
         38:ee:14:0f:12:fa:81:f5:37:40:e9:e5:96:fa:26:be:70:2a:
         6c:8d:59:63:74:08:17:2b:42:b4:d6:ec:06:ee:c7:ce:1f:bf:
         d3:56:1b:d2:28:d4:dc:01:ac:2a:d3:7f:57:63:5c:19:4c:73:
         30:ca:25:2c:ed:3c:03:52:42:18:45:98:c0:55:89:9b:35:58:
         be:23:7a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:22:30 2026 by rpki-client