Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49592.roa
File:                     AS49592.roa (raw, json)
Hash identifier:          UebPAMNogAHSQcVr4sg3a1Awq3GkzslkYLgrA7NJL5I=
Subject key identifier:   61:4A:B7:EF:D8:9E:02:4D:68:42:24:3D:69:D0:05:C9:BB:C4:7E:FB
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7AB47BEE22754CC7FAF034B287DBFC94CF8A4177
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49592.roa
Signing time:             Thu 30 Apr 2026 13:26:41 +0000
ROA not before:           Thu 30 Apr 2026 13:21:41 +0000
ROA not after:            Thu 29 Apr 2027 13:26:41 +0000
asID:                     49592
IP address blocks:        169.40.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 13:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b4:7b:ee:22:75:4c:c7:fa:f0:34:b2:87:db:fc:94:cf:8a:41:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr 30 13:21:41 2026 GMT
            Not After : Apr 29 13:26:41 2027 GMT
        Subject: CN=614AB7EFD89E024D6842243D69D005C9BBC47EFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:b2:71:25:26:25:44:95:78:24:a5:e3:ca:
                    bd:d5:59:19:29:d3:95:00:4c:ad:cc:35:62:59:fd:
                    43:f2:18:46:4a:2e:b2:bc:f3:14:c9:51:56:4d:40:
                    04:9f:9e:e6:33:c8:33:c6:d2:82:80:0b:a6:f5:0e:
                    84:8c:fe:cf:30:a4:80:4e:3a:59:b4:7a:94:76:55:
                    66:99:3b:02:94:e9:69:99:49:3b:b2:00:fe:ad:80:
                    0d:5d:d3:ae:4d:a9:42:ba:7d:81:52:55:04:6b:36:
                    2e:57:c2:43:65:8b:6c:0c:18:a8:71:6a:ed:a1:ee:
                    8d:77:66:15:53:59:6c:ec:ac:45:69:31:30:a7:a5:
                    ab:fd:41:80:f5:71:fe:36:ca:5a:26:20:ee:5c:b3:
                    70:04:37:88:b9:87:6a:aa:b3:7f:7e:ab:3a:3f:3f:
                    f4:36:db:76:85:9a:c5:e1:4e:84:36:6b:be:8d:37:
                    e1:bb:a6:99:ed:07:5c:e5:82:58:3b:6e:ad:4f:b1:
                    c7:75:20:d3:5f:0c:1c:4e:ae:2b:4a:88:c4:7c:ca:
                    e1:bd:b0:cb:dd:82:ac:58:2e:a0:ee:c2:c9:0e:3e:
                    7f:da:d3:b2:91:c2:fa:03:e7:9d:18:6c:13:0d:5e:
                    cb:9c:af:c3:bd:a7:38:14:88:bb:7f:7e:b2:5e:cf:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4A:B7:EF:D8:9E:02:4D:68:42:24:3D:69:D0:05:C9:BB:C4:7E:FB
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:cd:05:50:f1:cb:e6:55:b4:04:5b:03:66:95:21:61:97:
         22:40:ac:86:33:2c:2a:8d:5e:c6:e4:08:21:d3:2b:12:63:24:
         25:a5:ae:38:f7:f0:24:98:e5:e9:d9:cf:b3:6f:1c:a5:22:96:
         3c:a1:c4:c2:a7:25:a6:b4:09:af:bb:cb:77:cc:b8:6b:71:23:
         69:b8:34:26:5c:54:07:6d:d4:e9:8c:d4:a5:2e:ff:3d:9c:1b:
         b2:3a:7c:87:5e:88:a4:41:ae:c6:97:32:95:35:b4:8f:25:00:
         40:35:52:68:5c:ac:fc:a7:c1:24:96:13:6f:4c:c8:c6:4b:ea:
         51:55:7b:f9:31:7a:67:43:05:17:c2:f7:de:c6:4e:55:15:a9:
         dc:c1:46:9d:f6:ce:0b:d0:b0:1c:ce:d1:5f:00:85:d1:54:32:
         4e:ec:0c:0b:fb:d4:25:59:a7:e3:98:27:af:98:00:3a:e9:71:
         e8:5c:39:33:fb:0b:d9:98:e1:91:c3:14:f5:23:f9:8e:5e:0f:
         41:30:09:e8:fb:f8:23:b7:f0:90:ca:fd:42:6b:8d:8e:a8:ed:
         46:fd:b4:3e:1d:8a:f7:4b:36:1a:10:06:45:98:77:4e:d1:4e:
         61:22:a9:d3:a9:46:83:64:ee:1a:a8:63:92:17:d1:36:97:cf:
         33:57:60:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:14:55 2026 by rpki-client