Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401322.roa
File:                     AS401322.roa (raw, json)
Hash identifier:          7dnF9KL4DmrIlDedjjViIgO6QOleroBcgMY7z2pOo9E=
Subject key identifier:   EE:02:9D:8D:BC:5E:0B:21:EF:C8:A6:F5:53:CF:57:C4:84:45:99:F4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5A7FCA3BFEC30A55BA8FF0ABCE1941CE786A9A31
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401322.roa
Signing time:             Thu 26 Mar 2026 05:43:04 +0000
ROA not before:           Thu 26 Mar 2026 05:38:04 +0000
ROA not after:            Thu 25 Mar 2027 05:43:04 +0000
asID:                     401322
IP address blocks:        169.40.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7f:ca:3b:fe:c3:0a:55:ba:8f:f0:ab:ce:19:41:ce:78:6a:9a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 26 05:38:04 2026 GMT
            Not After : Mar 25 05:43:04 2027 GMT
        Subject: CN=EE029D8DBC5E0B21EFC8A6F553CF57C4844599F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:5c:0a:5f:97:21:6b:2f:11:9a:9b:2e:10:
                    02:4f:68:01:6b:c3:c5:e4:5a:01:f3:f5:fa:80:f5:
                    ab:93:48:c1:3a:f1:c1:b0:aa:de:7c:9a:d2:7c:9f:
                    69:fa:d2:ab:a5:d1:99:4c:46:62:1c:de:22:6c:0f:
                    92:cb:6b:08:a0:67:42:6b:da:b3:54:f4:e6:97:f8:
                    ba:28:51:36:4d:19:34:d3:a8:bc:99:b1:bd:14:79:
                    5c:d0:bc:f8:0e:04:46:7a:d6:6e:50:c3:1e:83:1c:
                    18:0f:59:c8:42:46:d6:74:dd:17:f5:a3:b6:e4:8e:
                    92:32:bc:9c:4e:47:ea:db:e2:77:ce:9e:fc:99:3a:
                    67:56:fb:c0:09:50:17:3b:32:6d:72:1b:b3:c6:3f:
                    e3:39:9d:ed:c9:87:a7:0c:50:d1:5d:06:64:55:53:
                    97:1e:41:0f:cc:82:0c:f1:70:c3:c6:85:29:b5:87:
                    d1:3e:32:6a:d3:37:2b:74:52:6a:99:fe:ff:f8:22:
                    36:49:37:40:73:2b:4c:83:36:1d:bd:44:ac:d4:c5:
                    68:08:b6:1b:00:c5:5f:bc:95:01:67:9b:5a:f6:bc:
                    b0:0a:24:41:19:4f:c3:36:e8:05:50:4e:58:18:ef:
                    08:83:c5:68:cc:6c:56:cf:95:41:00:9f:95:e0:e3:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:9D:8D:BC:5E:0B:21:EF:C8:A6:F5:53:CF:57:C4:84:45:99:F4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401322.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:43:1f:6b:11:85:73:f2:ad:1b:71:e8:ff:12:88:28:66:
         57:62:07:d6:c5:c1:e7:e2:dd:59:64:0a:ad:78:4b:9f:b2:fb:
         55:03:66:b7:35:25:75:01:cd:8d:3a:47:9d:ca:c1:75:5e:7f:
         2b:2c:5f:0d:46:01:ae:62:58:d2:9e:e8:46:49:d8:55:b2:a0:
         c3:8e:f6:fc:16:37:90:50:d9:3d:1b:ea:f5:91:03:a2:68:25:
         0b:50:17:18:35:d8:e4:32:54:e6:7f:12:e3:c1:a9:52:6c:21:
         a7:41:e3:7f:09:83:4d:7b:f9:25:36:c6:10:d7:71:00:fb:7f:
         1e:ac:a8:1a:47:64:e6:66:17:ff:62:50:9d:db:d2:86:4f:94:
         76:7c:3b:0a:58:e3:75:b7:6c:0f:fe:24:fd:78:ed:1d:a6:24:
         9a:e3:9a:79:18:91:de:90:cb:da:09:d5:14:e0:60:53:76:ca:
         25:52:f9:70:49:0e:99:ff:bf:26:35:4d:cf:88:dd:04:5a:70:
         4d:62:34:9b:59:2e:64:e0:bd:16:26:6b:d7:cd:58:ad:e3:5c:
         75:be:9a:b5:fc:b5:0a:f5:af:28:77:83:bb:16:4f:54:d7:48:
         20:d3:c4:dc:47:dd:1e:de:53:cd:f6:fd:03:e1:8e:dc:a4:cb:
         7b:fd:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 23:57:21 2026 by rpki-client