Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS25198.roa
File:                     AS25198.roa (raw, json)
Hash identifier:          CkblU+nrlyqPCfO5fFSPmsKKPkjTowm2QVN60yMNe3k=
Subject key identifier:   9C:3E:7B:6C:70:13:36:AB:11:72:BF:AD:43:F1:47:08:0C:85:72:F3
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6782A3ECA528FBD1132D57E62351B01C3CB60EFF
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS25198.roa
Signing time:             Fri 02 Oct 2026 10:52:59 +0000
ROA not before:           Fri 02 Oct 2026 10:47:59 +0000
ROA not after:            Fri 01 Oct 2027 10:52:59 +0000
asID:                     25198
IP address blocks:        13.141.36.0/24 maxlen: 24
                          13.141.37.0/24 maxlen: 24
                          13.141.38.0/24 maxlen: 24
                          13.141.39.0/24 maxlen: 24
                          13.141.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:82:a3:ec:a5:28:fb:d1:13:2d:57:e6:23:51:b0:1c:3c:b6:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct  2 10:47:59 2026 GMT
            Not After : Oct  1 10:52:59 2027 GMT
        Subject: CN=9C3E7B6C701336AB1172BFAD43F147080C8572F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:22:1c:e8:f7:65:1f:31:36:46:ca:d0:40:
                    4e:5b:dd:fa:03:b4:ae:27:94:b1:e8:a5:fc:8a:dc:
                    34:01:63:52:c7:cc:ed:cb:a3:ae:61:fa:ae:1b:27:
                    93:18:a0:b1:92:19:6d:c2:c3:b8:82:66:df:7a:cb:
                    f1:94:b2:1e:a6:51:c7:b1:1d:03:40:69:2f:f4:d1:
                    3d:ba:4a:aa:85:dd:61:b2:38:a8:43:c7:3e:e9:ba:
                    5e:66:10:8b:ff:1a:05:f2:25:d2:2e:51:52:de:cb:
                    69:11:d0:01:4a:af:d1:a4:3b:82:78:ab:ae:e2:e3:
                    df:e2:96:68:39:f6:21:b2:26:4c:3c:94:42:54:76:
                    05:06:0f:dc:2d:92:38:df:6e:44:14:37:c7:d4:a5:
                    eb:26:9a:07:2d:2f:28:bd:80:e2:5f:07:49:a9:f8:
                    85:6a:95:80:58:78:d4:ee:0e:46:33:5c:38:b8:7b:
                    0f:eb:78:0d:5b:f4:bb:2c:fe:ad:c4:39:3e:ed:b6:
                    7d:f6:ac:9f:b7:4c:13:a5:74:31:85:90:66:9f:b1:
                    c2:76:4d:19:c1:d0:92:bd:a4:9e:fc:23:5d:2d:76:
                    30:bb:a8:50:d4:e0:34:13:47:1c:68:43:41:76:40:
                    76:ad:16:10:3d:fd:96:e9:b5:27:35:6e:4c:5b:6a:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:7B:6C:70:13:36:AB:11:72:BF:AD:43:F1:47:08:0C:85:72:F3
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS25198.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.36.0/22
                  13.141.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:96:0a:78:1e:55:a4:04:8a:a2:f3:cb:9d:8b:9d:d8:19:a7:
         b0:95:32:d5:81:43:6a:55:41:d0:01:f4:bb:04:25:68:70:76:
         40:b7:34:e3:24:3b:33:78:fa:74:94:0b:7e:13:87:83:8e:f7:
         2d:84:d2:e7:a4:60:66:f5:f0:51:34:c6:fa:39:04:49:ef:83:
         19:88:a4:4e:4a:1c:f1:9e:57:cd:b8:96:26:c6:18:e6:a6:f2:
         7d:c2:40:4a:5c:d7:c7:a4:83:a4:03:9f:32:9d:43:34:8f:f4:
         c5:6e:3c:7f:52:ec:cf:b9:3e:3b:14:63:47:e4:dd:36:ee:15:
         e9:1f:67:dc:39:5c:1e:41:12:ba:7b:28:6e:06:54:7b:3a:1b:
         49:de:6c:08:00:8f:73:68:99:8a:50:9a:25:97:78:74:08:1f:
         13:e9:8e:ba:4c:07:73:5c:cf:ae:ee:e0:78:9f:dd:8b:45:d3:
         0b:c0:0d:8f:3f:d3:ed:fa:49:59:88:c6:72:53:3d:93:01:17:
         30:d8:0d:e7:0a:d5:e2:35:ab:6b:88:f9:5e:4f:44:d2:a1:dc:
         5c:96:25:1f:56:1e:3f:76:02:b8:27:64:2d:b0:bb:61:0d:1d:
         26:9a:48:e3:33:6d:50:51:17:27:91:a0:f0:a2:99:af:b9:ef:
         e7:e0:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:19:43 2026 by rpki-client