Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS219427.roa
File:                     AS219427.roa (raw, json)
Hash identifier:          N7sZLtMHP3dMLu3XH4kz7ofOSAo4p5NXyNuiDOKBXzs=
Subject key identifier:   8E:A6:F3:41:95:BD:EB:66:C2:6A:E9:6F:B6:B7:6F:A3:26:80:A8:56
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2E50F618D86C2AFD615C51DE32DEF5A252F61DD6
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS219427.roa
Signing time:             Tue 11 Aug 2026 00:05:27 +0000
ROA not before:           Tue 11 Aug 2026 00:00:27 +0000
ROA not after:            Tue 10 Aug 2027 00:05:27 +0000
asID:                     219427
IP address blocks:        169.40.125.0/24 maxlen: 24
                          169.40.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:50:f6:18:d8:6c:2a:fd:61:5c:51:de:32:de:f5:a2:52:f6:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 11 00:00:27 2026 GMT
            Not After : Aug 10 00:05:27 2027 GMT
        Subject: CN=8EA6F34195BDEB66C26AE96FB6B76FA32680A856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:87:ec:6a:da:11:b1:d2:ec:98:70:bb:ab:
                    98:76:63:05:11:88:2b:4e:0a:0f:dd:02:df:39:74:
                    f1:c7:1c:b7:0c:2b:40:85:b6:d9:d2:0c:0f:e6:d3:
                    33:ea:41:1a:f4:c1:7f:b8:f0:a6:d8:1d:f6:18:ba:
                    59:86:e6:d0:f4:28:59:d7:4f:87:5c:5f:99:85:ee:
                    37:3e:fd:e4:9b:38:9e:2b:46:40:3f:e3:cf:77:86:
                    da:08:83:17:37:05:66:ce:85:e7:98:59:6c:4e:18:
                    05:1f:f1:4c:4c:bf:38:5f:90:c6:09:8a:78:0a:6a:
                    5b:f8:6d:3c:4a:d2:d4:e4:e9:18:15:6d:49:6b:2e:
                    12:3e:e0:eb:d7:23:6f:80:a8:f0:5c:a2:8a:3d:0f:
                    94:a2:4e:f9:d6:05:7a:ae:cc:e8:de:e8:ab:6f:98:
                    ed:23:5d:93:0a:2f:66:10:68:3d:31:e1:78:56:b8:
                    67:d1:a6:c9:95:11:a3:46:44:62:6d:50:f9:38:52:
                    70:c7:13:ff:3b:a8:09:85:c0:7c:db:cb:4b:17:04:
                    58:e7:77:dd:49:c8:41:5c:38:fc:a0:69:79:62:27:
                    7a:d3:f9:a3:bd:a5:5f:4c:ac:c2:2e:3f:79:0c:21:
                    5c:78:bf:de:85:4c:1a:d2:62:e4:0c:9d:a2:c5:93:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:F3:41:95:BD:EB:66:C2:6A:E9:6F:B6:B7:6F:A3:26:80:A8:56
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS219427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.125.0/24
                  169.40.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:44:2f:5c:2a:7c:d4:94:26:9d:f6:fc:dc:f7:c1:d8:01:
         df:9b:c6:b6:df:e9:62:37:af:98:04:85:f4:d1:ad:2f:7d:de:
         0a:a3:fd:48:d7:61:46:4f:2a:8f:a1:1e:b0:ce:f1:2a:a2:ee:
         87:05:5d:13:c9:36:cb:0b:12:19:20:75:9f:4c:cf:3a:1c:ee:
         d4:f4:3d:a9:90:4b:79:a6:7f:6e:92:07:2c:1a:95:50:85:c3:
         b9:fe:f6:60:87:91:2f:9f:59:1f:1e:eb:2d:5a:53:bc:c0:da:
         ee:5d:76:3d:8f:b8:e1:ea:2c:3e:21:8f:67:ce:23:2b:78:3f:
         6d:62:1e:4b:d5:e2:20:ff:31:5c:93:50:4f:00:51:d9:96:7b:
         e0:20:a1:01:24:e7:27:26:d6:ff:fc:54:b2:ca:e5:24:57:a7:
         d2:d5:94:ab:b2:5f:67:e0:4e:76:23:a3:26:e9:bb:11:40:6e:
         f0:a5:4d:60:8b:93:d0:e8:81:be:b2:5f:d6:e6:a5:c4:fa:39:
         fb:a4:2e:84:c8:e8:da:cf:1f:6d:aa:99:8e:e0:19:11:55:31:
         11:ba:ee:d8:44:8f:56:91:ed:c6:9e:d9:6f:1d:0f:d8:bd:39:
         f3:79:34:95:b2:9b:f7:09:c4:83:3a:1b:14:95:f8:90:52:bd:
         bc:68:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:11 2026 by rpki-client