Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402315.roa
File:                     AS402315.roa (raw, json)
Hash identifier:          YQblXtuLAOPRMGu8fWll2T1e0u5FCqqfogyXYFnIVeI=
Subject key identifier:   07:62:FF:36:F9:5B:E6:80:3E:C6:97:44:A4:73:04:C9:B8:8F:1F:42
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       651EC3625E417F975BE3495F74AA05D0D83C33B4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402315.roa
Signing time:             Sun 30 Aug 2026 04:01:59 +0000
ROA not before:           Sun 30 Aug 2026 03:56:59 +0000
ROA not after:            Sun 29 Aug 2027 04:01:59 +0000
asID:                     402315
IP address blocks:        169.40.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1e:c3:62:5e:41:7f:97:5b:e3:49:5f:74:aa:05:d0:d8:3c:33:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 30 03:56:59 2026 GMT
            Not After : Aug 29 04:01:59 2027 GMT
        Subject: CN=0762FF36F95BE6803EC69744A47304C9B88F1F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:d1:d1:96:09:36:bf:99:86:ab:d9:71:9b:
                    58:5d:30:22:dd:1f:32:c8:db:e0:20:71:ba:90:ac:
                    33:84:6d:fe:9c:a4:cf:59:8a:bc:d4:40:41:80:52:
                    cf:f2:71:8d:a9:f6:bf:0f:72:b4:9c:cc:52:5e:54:
                    0f:ae:3e:bd:e6:8a:9d:a8:5a:91:18:af:fe:2b:ae:
                    c8:df:39:fe:20:9d:06:53:c4:fb:c0:a5:80:f0:ff:
                    1d:e7:d8:53:a7:e0:9c:62:af:3d:aa:1a:ef:29:b6:
                    eb:69:b7:4f:e6:06:aa:85:a7:8f:7a:09:ab:fb:9a:
                    eb:ae:aa:88:cc:9a:a7:85:60:cf:98:ea:2d:9a:a7:
                    73:e5:17:9f:94:4e:c1:95:49:05:fc:eb:c6:56:59:
                    da:c3:39:4f:e2:43:85:96:8d:4f:fe:09:a5:18:3a:
                    f7:63:01:f6:db:8b:68:27:37:6a:f4:47:de:b3:ab:
                    c8:ce:06:3e:c4:b6:e5:da:3b:94:6c:47:56:2d:92:
                    21:a0:e3:d1:9a:16:93:e5:ad:86:bd:80:a1:91:84:
                    73:87:a6:86:11:2d:c7:4c:57:1a:fa:18:69:5b:f8:
                    d2:c6:49:fc:87:a4:42:3a:80:ac:5b:2c:00:30:59:
                    99:bf:8a:e3:10:bd:99:ab:09:22:33:d8:99:63:72:
                    a8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:62:FF:36:F9:5B:E6:80:3E:C6:97:44:A4:73:04:C9:B8:8F:1F:42
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:29:32:ca:b2:c3:25:a0:d3:dc:82:19:ca:cf:cf:2c:0e:c8:
         7c:e8:4c:c4:92:39:fc:48:20:5c:e4:40:c6:ca:be:56:13:3c:
         75:07:a2:76:ed:ba:2a:74:9b:a1:7f:8d:c2:42:06:66:4e:d3:
         25:f2:61:be:93:fe:9d:90:36:15:e3:39:df:7d:69:42:68:da:
         f5:09:33:c9:1a:9d:93:3f:59:ed:2c:e2:59:4f:a0:4d:6d:43:
         09:61:c5:5f:05:f3:16:60:ec:4a:97:3f:39:db:46:16:f2:f2:
         13:64:6c:9e:23:99:d2:48:d8:72:7e:66:57:81:19:8b:ee:d9:
         9a:0d:22:fd:cc:e8:08:f2:63:49:77:7d:80:4e:63:a7:05:ce:
         0e:df:85:1f:70:aa:5b:94:a6:45:78:75:cd:66:35:3b:a0:f7:
         00:37:ca:97:72:2d:3a:ec:b1:06:fb:36:2d:ea:95:91:d3:61:
         fe:d0:02:56:42:4c:8e:72:18:4e:24:ff:6a:75:43:6f:9b:cc:
         5a:3a:cb:db:ed:e3:e2:33:df:2c:89:a5:77:b1:d1:e8:ca:3e:
         f4:72:ce:78:4a:2a:35:ce:9d:2c:cd:67:05:9d:38:e3:1c:ce:
         ab:b4:ef:55:73:40:83:cd:ec:86:a4:70:29:fd:ca:a9:9b:a4:
         86:be:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:17 2026 by rpki-client