Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS215607.roa
File:                     AS215607.roa (raw, json)
Hash identifier:          M2X+34Z7C1qKybxVg2L3SDALc79TdF5vs4BszGXmAnY=
Subject key identifier:   F5:10:94:AB:09:2E:F9:C4:71:13:1F:78:E3:3A:95:29:01:93:BE:C7
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6854CADE27A988189BCA9D950123375E07C10987
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS215607.roa
Signing time:             Tue 28 Apr 2026 13:27:16 +0000
ROA not before:           Tue 28 Apr 2026 13:22:16 +0000
ROA not after:            Tue 27 Apr 2027 13:27:16 +0000
asID:                     215607
IP address blocks:        169.40.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:54:ca:de:27:a9:88:18:9b:ca:9d:95:01:23:37:5e:07:c1:09:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr 28 13:22:16 2026 GMT
            Not After : Apr 27 13:27:16 2027 GMT
        Subject: CN=F51094AB092EF9C471131F78E33A95290193BEC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:1f:06:aa:b7:30:3b:36:0d:21:0c:69:c7:
                    13:a1:5d:17:b1:f9:7b:56:de:dd:ab:d2:65:83:77:
                    15:c4:44:32:69:7d:1f:2f:5e:98:c2:15:49:63:b1:
                    4c:4d:5c:6c:a4:6e:46:83:8a:56:1e:43:b5:68:fe:
                    6a:6f:a6:ee:58:9f:2a:fc:7a:cf:4f:a1:a2:4d:8e:
                    cd:99:bd:b5:6d:4e:42:f6:44:68:a8:9e:70:7b:6f:
                    18:6d:7b:57:8c:62:32:06:dc:a5:6c:51:87:ca:c0:
                    98:e0:7a:48:93:c7:0a:d0:40:f1:52:fb:3b:44:8d:
                    90:15:f5:46:1a:b4:a4:8f:86:cc:8f:b0:27:1b:4c:
                    de:3b:b9:e5:b5:04:3b:9e:91:d8:04:3c:fb:8a:04:
                    a0:30:aa:72:7a:98:de:ec:9c:12:e5:29:61:dc:9e:
                    b2:96:9e:ea:19:14:69:1b:1a:2e:c2:7e:44:58:0a:
                    80:e7:fd:33:58:06:fa:cd:1e:58:b7:86:2a:23:2f:
                    b7:f4:1c:26:df:d5:f6:42:48:03:12:24:f1:64:e2:
                    c0:1f:70:59:f7:85:a1:1d:14:7d:15:0e:a6:3d:b0:
                    78:b3:02:fa:fa:d6:46:96:10:27:99:63:b9:6e:5e:
                    aa:58:1d:9c:4d:72:dd:8e:e6:e0:55:9a:60:82:c6:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:10:94:AB:09:2E:F9:C4:71:13:1F:78:E3:3A:95:29:01:93:BE:C7
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS215607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:71:1e:78:dd:c8:05:91:77:d0:56:94:cb:02:01:81:d2:
         fd:67:1d:7e:5f:8a:6b:ec:a8:c1:ce:e1:d0:85:82:fe:05:f0:
         28:e3:d5:1d:46:59:ab:a4:01:1e:4f:95:48:a6:ee:99:e5:60:
         95:50:8e:78:12:dd:fd:c0:6c:19:0e:37:bb:ae:78:71:c9:14:
         a2:6a:96:4a:7c:d7:69:52:5e:b8:bc:75:13:ff:65:ed:49:d0:
         cc:c8:8d:1e:23:32:a3:65:63:73:3c:fa:7f:10:12:ce:ea:ef:
         6f:e9:ba:c6:08:5f:80:77:3e:83:f5:dd:b5:d3:db:1d:52:0e:
         ac:09:ba:9d:18:28:79:d8:6b:d2:d2:d4:1a:72:e8:d9:0b:86:
         da:3d:bc:d9:73:c6:f3:e6:5e:66:85:3e:0f:f1:e3:0e:41:36:
         b1:f5:25:55:a7:c0:15:24:44:8a:0d:bc:72:1e:51:3c:eb:f1:
         d7:99:e8:ee:f6:69:3e:99:a5:96:29:f1:d6:bc:6a:fb:e1:d8:
         ef:75:1e:25:96:3d:ce:28:2f:cb:c9:53:75:71:d2:a3:54:81:
         ee:f0:ac:2a:3f:5a:0a:52:6a:1b:89:84:49:da:b1:4d:d2:fa:
         fd:71:7b:6f:25:cb:1a:62:60:b8:1e:f5:d1:85:d0:48:c0:5d:
         a0:a3:9b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 15:35:34 2026 by rpki-client