Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402268.roa
File:                     AS402268.roa (raw, json)
Hash identifier:          x8qWnDL0B10wk2Pesm4jBXIHROXuOpZ2E0xI0AbAhWU=
Subject key identifier:   B8:C6:DC:92:B6:55:FF:24:3C:F6:5D:C4:20:B2:A9:59:E5:4E:68:25
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       04841D00DD13A796A93256C1F164285B9B473D8B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402268.roa
Signing time:             Sun 30 Aug 2026 04:01:59 +0000
ROA not before:           Sun 30 Aug 2026 03:56:59 +0000
ROA not after:            Sun 29 Aug 2027 04:01:59 +0000
asID:                     402268
IP address blocks:        169.40.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 21:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:84:1d:00:dd:13:a7:96:a9:32:56:c1:f1:64:28:5b:9b:47:3d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 30 03:56:59 2026 GMT
            Not After : Aug 29 04:01:59 2027 GMT
        Subject: CN=B8C6DC92B655FF243CF65DC420B2A959E54E6825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:f6:1a:99:e0:25:5a:1a:90:92:df:82:86:
                    7e:ac:27:17:97:0f:3f:37:37:ab:7e:67:18:74:71:
                    8e:ad:b9:da:a4:db:97:28:3b:6c:04:d7:49:30:64:
                    33:ac:22:d2:3f:69:0d:cf:97:c8:27:e2:40:3e:e0:
                    32:f2:41:d6:64:81:3b:1f:fc:ad:b9:94:98:37:f5:
                    4a:11:df:d3:ba:08:df:9e:60:42:ad:39:64:9d:98:
                    9e:f3:c6:66:e2:71:50:d8:8c:47:55:88:3b:0e:4b:
                    b7:86:60:da:0c:58:6b:0c:bf:3d:02:c6:e5:1b:ed:
                    8d:46:13:5a:98:f7:fb:b9:da:a2:22:e2:d2:da:52:
                    a6:60:5d:83:07:2d:c1:83:06:92:80:34:79:1a:f3:
                    e6:6f:e6:ca:3c:24:a7:9c:a8:d9:bc:3e:1c:a2:95:
                    03:13:17:62:58:9f:97:b4:dd:17:b3:97:7a:1a:26:
                    58:65:63:9d:94:49:fd:d4:d1:d3:17:f5:eb:48:ef:
                    05:e8:b8:5e:ba:86:07:57:f8:d9:ca:16:4a:60:da:
                    4c:b6:d8:5a:5f:77:d7:f6:f5:93:3f:e1:f4:bc:53:
                    88:3d:e0:b5:69:af:86:48:e2:ec:78:ec:71:b6:85:
                    a9:a5:8a:00:b9:39:29:ac:82:78:60:5f:b1:ec:1f:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C6:DC:92:B6:55:FF:24:3C:F6:5D:C4:20:B2:A9:59:E5:4E:68:25
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402268.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:40:47:33:90:41:cb:05:22:66:38:a6:3b:65:e1:4e:0f:3a:
         af:37:6e:0c:88:62:eb:26:dd:a7:b2:76:c7:57:a8:4e:b1:31:
         a8:7d:20:d8:77:1d:63:03:5e:a1:78:b9:d7:13:14:b0:ca:06:
         3f:b7:dd:0a:50:09:db:f5:51:32:5e:a3:15:0c:23:eb:2e:b1:
         b4:21:2e:da:99:4f:38:ad:82:55:40:9a:01:13:92:64:7b:c8:
         4f:2a:ea:33:fc:dc:25:25:fe:3f:79:b0:e9:de:9e:33:df:af:
         1e:d7:41:b0:e2:e9:26:58:05:f4:3d:3f:dd:2b:73:ad:cb:c5:
         d4:42:4e:11:b3:70:7b:c3:11:9f:8f:e7:c1:f7:48:50:1d:1d:
         75:07:02:9b:b4:f5:9f:91:ee:ce:5d:fb:2e:34:cb:b0:24:79:
         b8:c2:8f:fa:b8:6f:e9:63:74:f7:fa:92:09:64:d3:7a:36:2e:
         f0:4e:38:ef:a6:85:c5:4a:0d:7f:88:66:ea:82:f6:bf:34:04:
         89:ea:6b:d1:53:f8:35:71:d4:e1:08:8f:3f:ee:92:97:cd:76:
         d4:92:8d:5a:af:e6:72:7f:0f:97:9d:e7:8f:c4:64:0e:7c:bb:
         6d:f1:bf:86:ca:74:e1:cc:09:9a:78:87:0b:4c:b3:eb:c1:a1:
         0e:40:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:40:26 2026 by rpki-client