Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402643.roa
File:                     AS402643.roa (raw, json)
Hash identifier:          uy0C566kNItq9OpbvHIQETmJSWe5lY9icro7Iqx/kP0=
Subject key identifier:   1A:F7:DF:E9:B8:C3:8A:47:D4:DB:4B:BE:34:F3:6B:31:4F:E1:AA:2D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       485399B28E459B4D4F532B86FC3562E00BFDADA1
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402643.roa
Signing time:             Fri 21 Aug 2026 06:32:45 +0000
ROA not before:           Fri 21 Aug 2026 06:27:45 +0000
ROA not after:            Fri 20 Aug 2027 06:32:45 +0000
asID:                     402643
IP address blocks:        169.40.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:53:99:b2:8e:45:9b:4d:4f:53:2b:86:fc:35:62:e0:0b:fd:ad:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug 21 06:27:45 2026 GMT
            Not After : Aug 20 06:32:45 2027 GMT
        Subject: CN=1AF7DFE9B8C38A47D4DB4BBE34F36B314FE1AA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:29:e5:4d:16:41:77:4b:d1:fe:be:df:ac:
                    35:f3:67:6f:72:48:25:9b:4e:ac:cf:f0:6d:e3:42:
                    67:60:30:95:f2:71:22:c6:74:4c:30:80:53:15:a5:
                    15:8c:98:50:4c:71:58:81:69:6e:2a:50:85:d6:94:
                    c9:0e:a3:78:63:96:62:aa:34:e7:69:14:9a:c4:15:
                    16:9a:ca:5c:dd:41:9e:8d:0e:77:3a:7d:c5:fe:9f:
                    29:ef:87:18:48:2a:d0:4f:4b:b2:2f:5d:99:b3:59:
                    ff:c1:ac:82:a6:38:cd:f5:8d:78:43:1e:51:7c:1b:
                    33:3a:92:c9:5b:9e:fc:65:cb:13:ee:9a:94:6e:2b:
                    f8:c4:0e:ee:1e:a3:d8:a0:a7:4c:19:44:e5:8b:e4:
                    34:da:b8:86:a6:d7:68:e2:94:cb:9a:31:36:12:f4:
                    cd:b6:bc:11:54:fa:4f:32:78:e0:54:a2:71:5a:44:
                    d2:fa:67:fe:87:55:7b:94:b2:f6:d1:68:02:1f:a7:
                    f7:6a:c5:52:fe:5b:f2:59:e1:63:8a:be:ea:16:f2:
                    a2:06:38:74:b7:67:14:b3:ed:df:86:ce:43:aa:68:
                    31:1d:0f:a1:02:3e:cf:f4:07:b7:41:01:55:11:80:
                    f4:35:ac:29:ff:72:ef:5e:f9:b1:0e:db:50:14:51:
                    d9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F7:DF:E9:B8:C3:8A:47:D4:DB:4B:BE:34:F3:6B:31:4F:E1:AA:2D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402643.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:1d:56:ba:39:92:0a:fd:bd:0a:da:20:5a:22:03:db:4c:eb:
         4b:c9:68:c6:3d:4a:fa:c2:09:a4:7b:6a:ad:ef:5c:9b:18:45:
         7e:66:58:66:a1:18:98:d4:d8:c9:cc:4c:e4:06:d9:e1:ac:d6:
         ed:58:c8:41:30:5c:95:7a:88:35:44:73:69:cf:ca:dc:0d:5d:
         96:4a:3f:92:d8:60:2c:de:99:cd:8b:cd:ee:7f:93:41:6d:db:
         7f:e4:d6:c0:9a:25:d6:d7:37:85:7b:37:a3:72:52:ba:5e:2a:
         86:6d:90:ac:68:9e:43:fb:1a:3e:46:5b:58:1c:5a:92:96:f3:
         43:8b:45:d8:e0:60:3e:c4:74:79:63:9a:67:df:88:78:d8:30:
         08:b2:8a:c9:06:57:33:a7:91:b8:43:25:3f:c7:5b:41:8e:43:
         f5:98:c3:8f:58:15:aa:eb:b2:9c:0c:bc:e4:40:60:71:19:00:
         3d:3a:61:6d:80:4f:0c:53:5e:08:d6:d3:8d:19:ff:c9:2f:91:
         4f:d2:c3:44:0a:e9:2a:cc:4c:99:7e:3e:0c:1a:bc:a9:7c:40:
         88:9e:2c:b8:09:83:20:ad:9c:dc:be:6c:52:9f:2e:d1:15:a5:
         04:c1:d7:44:e2:c1:dc:d1:70:f2:d4:ce:69:9b:e0:f6:05:09:
         ed:1f:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:56:28 2026 by rpki-client