Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218515.roa
File:                     AS218515.roa (raw, json)
Hash identifier:          lLz4XX5/rHkudVNqoj/y4Q9R/ZY7AFkmbQk1isU3yBM=
Subject key identifier:   D2:3F:A0:B6:9E:6C:1E:D2:05:91:D0:52:7B:02:E2:92:06:2B:09:4D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0616EEDBC5842F145A5C8EECBFAAC964EBCEE23B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218515.roa
Signing time:             Sun 04 Oct 2026 16:26:52 +0000
ROA not before:           Sun 04 Oct 2026 16:21:52 +0000
ROA not after:            Sun 03 Oct 2027 16:26:52 +0000
asID:                     218515
IP address blocks:        169.40.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:ee:db:c5:84:2f:14:5a:5c:8e:ec:bf:aa:c9:64:eb:ce:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  4 16:21:52 2026 GMT
            Not After : Oct  3 16:26:52 2027 GMT
        Subject: CN=D23FA0B69E6C1ED20591D0527B02E292062B094D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:55:c7:9c:12:f5:7c:3a:8c:81:8b:9a:71:
                    b7:f2:f3:63:39:27:6c:e7:84:cf:5c:55:77:81:06:
                    6a:4d:11:df:f0:31:d5:aa:34:0d:d9:11:9b:56:95:
                    80:de:df:9f:66:0b:fb:64:77:c0:25:e8:25:b9:af:
                    74:e9:f4:b2:f9:45:a8:0b:d8:2b:1d:5f:89:24:bf:
                    c1:5d:7a:d6:b9:50:fd:b4:a7:75:a2:f6:38:3c:9b:
                    01:e8:b3:b5:5c:27:b8:1f:fe:db:86:80:f4:74:cf:
                    e4:86:20:6a:40:f6:4b:52:73:0c:22:47:f8:04:12:
                    ae:01:1d:cf:e8:b2:2b:76:6b:24:3b:9a:97:7d:0a:
                    c4:c0:cd:2a:17:c1:1a:50:bc:72:49:65:bd:92:6a:
                    99:9b:be:68:be:95:53:9b:7b:f4:5b:9d:c2:93:71:
                    55:28:c6:1d:92:47:63:b6:5b:64:45:a5:e2:1f:27:
                    a9:f0:74:17:72:ae:7b:1c:2c:ba:f1:83:6b:23:01:
                    94:7b:f6:93:94:df:0c:3a:c2:6e:59:24:b9:16:a8:
                    87:06:77:e8:f0:f2:42:ab:ca:dc:48:2c:8a:e8:42:
                    89:dc:78:de:42:45:66:ae:d2:f3:fc:d6:5f:b7:15:
                    79:6e:6b:2f:5b:b1:1a:41:24:62:80:93:5e:cb:dc:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3F:A0:B6:9E:6C:1E:D2:05:91:D0:52:7B:02:E2:92:06:2B:09:4D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:30:a3:8b:27:32:76:5d:7d:11:85:3e:9f:c1:a9:27:68:53:
         bc:65:95:59:11:33:fa:4b:41:c4:9f:68:4a:38:f4:e9:63:9e:
         fb:31:18:cf:68:44:39:b2:00:de:99:63:ea:ab:6f:72:1b:54:
         bb:53:58:64:8b:21:da:75:3b:4d:a6:cf:6c:63:72:bd:1a:5b:
         9b:e1:a6:f9:aa:22:5d:e9:bf:5b:0a:9f:ad:f7:20:74:7f:4e:
         14:86:5e:29:af:aa:2c:c3:f7:2d:46:9c:81:f1:4c:2f:24:44:
         10:c9:fc:3a:14:1a:c0:4c:aa:14:96:1f:06:b4:8d:aa:5b:37:
         18:60:ac:48:be:b6:2a:64:cd:ef:75:2f:11:63:e4:1b:6e:87:
         4a:07:1a:94:d8:22:fa:7a:20:f5:67:e8:5d:55:30:ea:a9:b2:
         d5:67:6e:b1:cf:b0:b4:5b:66:f3:e4:59:79:fe:df:d9:67:b5:
         b0:c3:a7:2e:fd:90:f7:63:e4:94:1e:71:9b:9d:88:a9:c6:ff:
         89:8d:6b:07:f1:9f:8f:4b:e1:04:d0:0a:78:53:ae:3b:4a:4b:
         d8:de:01:77:9a:ee:54:8d:dd:13:fb:27:7e:32:2d:70:cf:e0:
         fb:0d:9e:4c:8a:5b:c6:f1:b9:c1:39:fc:8e:53:61:50:c4:38:
         6b:b8:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:55:07 2026 by rpki-client