Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          3eQyb6gxC1bbrlq2NasTzB0U71tqYLX/jYc9Y9yBZGQ=
Subject key identifier:   8E:68:8E:A1:4F:D6:41:03:51:DF:1B:DE:9E:B7:BC:AD:82:56:32:27
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       230FA20BE73E3BD8D730F94707C6E0F0A4542E36
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30058.roa
Signing time:             Wed 02 Sep 2026 09:13:25 +0000
ROA not before:           Wed 02 Sep 2026 09:08:25 +0000
ROA not after:            Wed 01 Sep 2027 09:13:25 +0000
asID:                     30058
IP address blocks:        169.40.111.0/24 maxlen: 24
                          169.40.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 12:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:a2:0b:e7:3e:3b:d8:d7:30:f9:47:07:c6:e0:f0:a4:54:2e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep  2 09:08:25 2026 GMT
            Not After : Sep  1 09:13:25 2027 GMT
        Subject: CN=8E688EA14FD6410351DF1BDE9EB7BCAD82563227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:11:1b:52:84:b0:39:13:45:a7:06:78:a1:
                    fc:1d:6f:10:41:33:db:b8:db:1c:8b:90:12:c1:3c:
                    17:af:39:82:01:7b:2f:86:97:85:e8:8b:b6:e6:e0:
                    11:b6:a0:b4:07:08:47:4c:d7:cf:62:00:68:df:70:
                    15:52:50:a4:fb:de:73:d7:f7:74:dd:32:69:c9:96:
                    79:8d:98:21:d7:33:b0:23:22:85:6e:7a:ac:3f:28:
                    a2:83:0f:6a:4b:86:1c:8e:f2:0c:ae:05:15:f2:83:
                    98:53:f4:5d:c0:99:d2:32:50:76:83:1e:e9:13:da:
                    2c:47:4f:3c:e2:05:58:48:1d:0e:07:5e:80:0d:6c:
                    32:fa:d2:6c:1b:9c:ca:49:e2:01:f5:1e:97:eb:03:
                    6b:a9:b1:f9:af:ca:b2:ab:9d:de:73:43:68:a2:57:
                    c1:ca:c1:8a:5a:d5:72:08:77:bb:d4:da:3e:32:86:
                    d5:83:e4:13:2c:96:4f:f3:f0:b7:ee:49:3e:8b:0a:
                    58:98:e7:3d:de:42:95:68:21:54:11:c7:9b:21:a9:
                    8b:e4:df:82:02:77:a0:c6:86:8d:e0:86:c8:89:42:
                    2b:4d:16:1a:12:23:55:f9:6c:13:d6:3d:89:ed:e7:
                    56:b6:7c:c5:d2:9d:5a:37:01:cd:e3:25:09:33:64:
                    04:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:68:8E:A1:4F:D6:41:03:51:DF:1B:DE:9E:B7:BC:AD:82:56:32:27
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.111.0/24
                  169.40.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:9b:13:62:71:d0:04:a3:18:1e:f4:a2:a5:a3:5d:55:f4:76:
         28:6b:ce:8b:d6:b5:25:b2:d3:13:98:f1:0f:fd:be:07:99:53:
         c3:e5:69:d9:34:42:0f:15:57:fc:7a:a8:2c:83:d5:95:e6:e5:
         ca:20:ad:a4:68:8e:a8:a4:b5:6f:c0:51:80:03:10:13:47:8f:
         10:1f:34:bb:a5:2d:8b:e8:aa:ac:78:aa:74:4c:c0:bb:50:01:
         64:ee:08:66:0d:3e:69:58:8c:04:fc:40:3e:4d:5c:55:a4:09:
         bd:83:88:72:d0:01:75:2f:f3:15:42:2a:1e:03:eb:c8:b6:fc:
         a3:e6:4c:2b:d3:a6:f8:9e:e7:ff:71:98:cf:50:27:1b:87:fa:
         ff:a4:bd:28:d9:6f:07:8b:ff:2b:68:26:a5:46:e1:e9:b3:93:
         39:db:eb:82:c7:b9:5a:6c:03:f7:4d:88:1c:42:16:49:13:7d:
         d8:d4:5a:4c:9a:50:e2:16:32:8a:f0:cb:bd:c8:d0:ac:a6:9b:
         35:9c:59:08:9b:da:3b:e8:cd:b1:e2:dc:b3:0f:f7:ab:ec:97:
         45:89:02:ec:6f:56:2b:47:53:73:9d:94:c6:46:b8:84:1f:9c:
         d7:4d:0c:4b:3f:2d:71:a6:15:d6:c9:6e:9d:5b:a0:21:85:0b:
         06:d7:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:02 2026 by rpki-client