Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          ut0Xax4XlbocAMX5X9lhtDQ1X43WaOpBlsNNp2HOQ+o=
Subject key identifier:   19:C0:4E:23:A9:13:5E:72:15:8E:C7:28:D0:65:55:F0:07:AA:39:A2
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5EADCEC9E7B08D0169233CF2AE380ADB890D8851
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS22773.roa
Signing time:             Thu 26 Mar 2026 23:39:06 +0000
ROA not before:           Thu 26 Mar 2026 23:34:06 +0000
ROA not after:            Thu 25 Mar 2027 23:39:06 +0000
asID:                     22773
IP address blocks:        169.40.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ad:ce:c9:e7:b0:8d:01:69:23:3c:f2:ae:38:0a:db:89:0d:88:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 26 23:34:06 2026 GMT
            Not After : Mar 25 23:39:06 2027 GMT
        Subject: CN=19C04E23A9135E72158EC728D06555F007AA39A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:d9:70:1e:ae:db:9e:48:f6:bd:db:58:89:
                    0f:1c:e1:c2:47:16:bd:37:6c:aa:ed:14:ba:de:03:
                    c2:8e:59:53:c1:55:b0:b1:da:e6:2d:79:ab:8a:e5:
                    43:60:c9:31:4b:f0:c6:1f:dc:b5:6c:c6:cd:cb:8b:
                    c2:27:d2:d1:67:65:8d:c2:5a:31:f9:13:14:b3:90:
                    60:5e:42:74:e9:14:19:0c:a2:be:6c:4e:36:8e:99:
                    fe:7c:18:dc:26:81:d4:5f:9d:8c:75:dd:c5:58:80:
                    00:76:42:74:a7:d1:12:db:d8:81:c2:81:0d:6f:08:
                    a7:4b:45:c7:45:db:1a:1e:11:cc:3d:71:56:4c:98:
                    91:63:27:c8:90:12:15:16:67:6f:d1:8e:43:89:0d:
                    d8:78:93:dc:da:22:ea:c1:45:d7:f5:32:a4:fe:5e:
                    6b:e5:52:16:5d:98:2b:8e:85:1b:ab:34:6f:61:89:
                    f9:08:8b:52:64:9d:94:1f:db:36:ac:06:e1:0a:58:
                    ef:78:07:f7:ec:32:a8:ff:2f:96:a2:83:d1:8e:80:
                    33:ba:8a:33:b3:ce:1a:3b:2a:74:42:83:2b:b4:cf:
                    9c:b8:b7:d4:9b:cd:ba:28:31:6d:80:31:40:6e:fe:
                    ab:bc:d1:1b:3c:92:b2:80:0b:70:a9:75:77:f3:1b:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:4E:23:A9:13:5E:72:15:8E:C7:28:D0:65:55:F0:07:AA:39:A2
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2b:88:1d:1c:94:a1:3c:00:13:98:a1:c6:4a:e4:f0:ce:22:
         01:c9:e7:71:11:55:2e:67:27:59:51:c2:94:8a:af:50:9c:e2:
         65:00:51:58:8f:25:82:22:d5:43:cd:2b:11:8d:0e:d3:01:3a:
         ae:4f:06:be:f6:a6:9a:2a:23:60:22:a7:19:ea:39:94:bb:45:
         9d:e4:2a:ee:29:7c:78:7a:a7:8f:b9:03:0b:39:85:cc:e1:59:
         bd:b4:8a:ab:2e:d4:4b:31:a4:97:33:42:98:ef:53:08:41:df:
         5f:bc:7f:95:2c:ce:b6:c1:c0:22:1a:0c:13:ca:92:73:ca:f3:
         22:51:5a:76:73:c2:5b:95:c9:ac:65:4a:27:5e:3e:15:40:28:
         80:70:b6:4e:42:80:43:e6:10:55:33:e6:66:7b:1a:02:77:de:
         33:49:cf:a5:9a:d3:b0:c6:41:9d:55:c3:f6:36:a7:db:d7:4b:
         e7:90:55:0d:6f:74:89:70:14:6d:9f:3a:19:10:36:0a:62:a6:
         12:07:d5:8b:17:bf:1e:7c:d7:35:cf:f5:27:8b:06:0d:87:09:
         c2:d1:95:08:c4:f3:74:62:38:2a:2c:38:75:29:4e:28:80:e5:
         bf:4a:6d:55:dd:5c:06:96:fa:a3:73:b3:b2:70:0e:26:4e:d1:
         48:93:21:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 23:50:45 2026 by rpki-client