Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214266.roa
File:                     AS214266.roa (raw, json)
Hash identifier:          dSHnwQYh86r1RVPlzr1ADtImbIO5Fu8l5ySzUbFQCrI=
Subject key identifier:   25:DA:68:96:9C:94:12:3A:2E:B1:DF:E7:AE:C3:2A:1E:9E:82:D9:15
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       79E540EDD95E523EC6BA5B05B6A6A59416476D21
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214266.roa
Signing time:             Wed 27 May 2026 03:11:39 +0000
ROA not before:           Wed 27 May 2026 03:06:39 +0000
ROA not after:            Wed 26 May 2027 03:11:39 +0000
asID:                     214266
IP address blocks:        169.40.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 May 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e5:40:ed:d9:5e:52:3e:c6:ba:5b:05:b6:a6:a5:94:16:47:6d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 27 03:06:39 2026 GMT
            Not After : May 26 03:11:39 2027 GMT
        Subject: CN=25DA68969C94123A2EB1DFE7AEC32A1E9E82D915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:ab:cd:87:8d:a4:0c:05:a2:09:8d:7b:2c:
                    f3:11:bb:cf:4a:19:eb:f5:85:11:cd:bc:04:32:10:
                    f8:81:04:46:0b:e0:87:9e:8d:19:94:f0:ac:20:61:
                    81:1b:a7:8e:5b:f3:33:2e:43:05:96:39:e6:bf:1e:
                    9e:d7:62:99:0f:98:c9:67:45:ed:b0:91:df:88:41:
                    e9:62:78:a2:b5:3a:ac:2f:39:de:e0:35:87:19:c7:
                    d9:62:c6:06:d3:ef:cb:d8:6a:d7:89:de:9f:e8:d9:
                    9d:d4:a0:99:b7:37:df:ce:88:b0:98:77:40:c4:b8:
                    ab:fa:4e:13:9a:d1:d9:a6:21:96:56:fc:84:74:87:
                    a4:e4:de:79:7f:5a:14:d5:07:ce:a1:59:0b:66:bf:
                    d4:68:b4:3a:3e:25:ec:57:39:d7:1b:f5:66:89:ec:
                    7a:1b:ef:c1:d7:d2:a7:60:f3:46:c8:c8:97:d8:8e:
                    d4:c4:1e:1d:7b:e8:e4:a0:43:f8:46:4d:6b:87:92:
                    40:c0:e8:08:08:da:a5:3a:07:b6:54:4b:f8:93:11:
                    ac:0f:75:38:98:41:de:6c:f3:09:b5:f5:62:14:71:
                    61:be:15:fa:af:f1:0c:7c:39:04:13:3a:6c:13:33:
                    bb:4e:d4:77:28:12:f7:a8:ce:27:33:50:5b:76:ca:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DA:68:96:9C:94:12:3A:2E:B1:DF:E7:AE:C3:2A:1E:9E:82:D9:15
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS214266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:bf:9d:ff:8b:7f:7a:52:a5:ea:0d:51:76:cc:c2:5f:35:71:
         d3:43:51:e5:f1:8b:da:42:c5:4f:d4:ba:55:f3:83:b4:85:bc:
         38:32:c5:bc:cf:e7:e5:32:e3:aa:c6:0f:91:93:d9:66:8c:ab:
         85:cb:e7:9b:d5:5a:6b:82:a1:24:ca:c1:c1:c2:c5:6e:d8:ab:
         09:f6:d9:ea:69:78:53:6b:82:19:3c:fa:03:4d:ff:d0:24:8d:
         ee:62:b0:ac:d0:cc:53:5d:d9:91:c7:5d:86:73:af:ab:e2:22:
         87:6f:ee:bb:dd:2c:6d:58:3e:09:d3:ee:b1:f6:ec:08:98:65:
         0a:34:4b:cd:6e:72:f7:19:8b:37:dc:48:31:85:7d:03:51:a9:
         2a:66:8b:aa:2f:42:e6:00:c2:fb:88:4e:46:e8:b8:58:88:39:
         08:87:54:c6:a3:09:41:85:eb:8c:80:17:8b:c3:58:a8:04:b3:
         f6:1c:3c:62:7b:63:e2:43:50:bd:56:a2:e1:d6:2e:2e:d8:fd:
         25:97:f9:04:d1:86:d8:2a:3f:31:7f:f2:85:ba:dd:26:ad:ab:
         13:9c:5a:44:cf:2e:a5:23:73:a2:77:fc:6d:d2:a0:b2:1f:6c:
         c0:9b:61:a6:fb:bc:2a:27:67:e4:32:9e:d4:ab:d5:cf:5c:be:
         f1:66:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:19:08 2026 by rpki-client