Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402215.roa
File:                     AS402215.roa (raw, json)
Hash identifier:          MyR0nV18Hb+novUPo197ewPyJ4PP4sUPk0hnMTboD68=
Subject key identifier:   0D:CA:2F:82:B6:53:D2:AA:DB:1F:0D:72:1A:D6:8C:3D:1E:48:2A:22
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4459C9C75843FBA8D8273A66D4706E8BC8519DE3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402215.roa
Signing time:             Sun 12 Jul 2026 15:29:14 +0000
ROA not before:           Sun 12 Jul 2026 15:24:14 +0000
ROA not after:            Sun 11 Jul 2027 15:29:14 +0000
asID:                     402215
IP address blocks:        169.40.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:59:c9:c7:58:43:fb:a8:d8:27:3a:66:d4:70:6e:8b:c8:51:9d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul 12 15:24:14 2026 GMT
            Not After : Jul 11 15:29:14 2027 GMT
        Subject: CN=0DCA2F82B653D2AADB1F0D721AD68C3D1E482A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:b5:cb:57:56:40:07:4b:8d:8a:1a:48:a3:
                    91:f3:90:5e:f4:27:75:a6:e3:34:22:80:61:6b:ab:
                    b8:de:3f:59:d5:8b:92:5d:da:c8:fd:ef:39:34:a7:
                    3f:cf:74:39:9c:ff:28:f9:74:84:1d:36:14:4b:58:
                    d1:e6:ee:1f:24:8d:aa:4c:92:54:47:13:d3:23:d6:
                    7d:29:6f:17:ca:24:89:9a:7d:6c:03:95:a2:50:86:
                    7e:ce:1f:25:d7:07:c1:2e:44:9e:bb:42:fd:e1:15:
                    16:95:21:e1:a5:a5:d5:9f:c0:c5:e1:a9:8c:ca:59:
                    fa:8b:e8:69:2b:a1:04:4b:e4:a6:c4:dc:51:33:f1:
                    09:ff:3b:c7:19:f1:9c:61:23:cf:7e:1a:68:e1:08:
                    74:5f:9a:47:3b:79:d4:f7:39:14:fd:79:69:84:d7:
                    87:69:ff:04:b0:95:e8:00:79:6d:16:6c:fc:13:40:
                    e9:19:bb:e4:21:ae:52:ae:f1:26:d5:77:8c:3a:1f:
                    22:df:3c:31:d0:77:10:b5:6f:13:a4:4d:6c:ee:b7:
                    7e:fa:ea:df:11:28:bf:44:b0:90:90:42:3a:8b:cb:
                    a1:c0:24:13:2b:e0:11:29:66:ba:2c:5b:4f:ee:5b:
                    19:02:d9:a9:c2:9d:b1:c0:0e:3c:af:ae:0f:db:8f:
                    74:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:2F:82:B6:53:D2:AA:DB:1F:0D:72:1A:D6:8C:3D:1E:48:2A:22
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402215.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:90:aa:80:f2:69:56:ca:59:4a:f5:06:92:ec:93:84:c5:59:
         69:26:b6:2f:a1:94:22:49:2c:fd:4e:32:34:58:78:0c:f6:42:
         26:bf:ba:a0:aa:fe:40:8d:ed:d4:5c:66:5c:82:66:c1:9f:49:
         0e:69:fd:38:8e:dc:53:fd:93:bc:91:97:50:b7:0c:4b:55:a2:
         b2:e0:e4:08:0a:dd:83:3b:3f:a6:ef:b5:9c:91:ac:57:92:97:
         00:c1:c9:2e:d0:e0:cf:1c:8f:65:6f:b7:64:85:b8:a1:f3:5d:
         c5:af:10:89:d3:33:37:3c:b5:d8:e6:f1:27:45:d8:03:ca:b3:
         ca:dc:4e:62:d8:67:60:32:fc:40:b2:a8:6d:22:b2:60:8d:f9:
         58:55:34:03:45:5e:9f:bb:70:32:b7:eb:f6:65:bb:67:4f:5d:
         f3:f1:ba:63:36:6e:9a:c3:7c:03:fc:9e:53:46:46:a1:b2:ce:
         04:c0:75:41:60:5d:31:b1:14:3d:f9:b9:d1:2b:4b:16:78:b9:
         3b:4d:dc:c8:a4:7d:6e:0a:1e:e7:8c:e5:6b:89:37:02:ac:50:
         8f:6e:cd:8f:d3:0a:51:63:b5:33:75:cf:b6:01:06:f7:1c:ca:
         e3:53:42:75:7b:9b:a3:25:2d:0c:0e:91:b8:9f:38:cc:e6:a8:
         05:e5:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:15:08 2026 by rpki-client