Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS59642.roa
File:                     AS59642.roa (raw, json)
Hash identifier:          vG5PXyIqw8JdwA2lrk1+aLLZf/Y7YVxHMZzkYCJ1/uE=
Subject key identifier:   F5:8B:AE:A3:25:AE:7E:37:7B:A4:45:A7:D9:97:AA:F6:F4:F5:40:25
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       27FFA6D5D76C5595FC96141A63CB16A76B1C57BB
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS59642.roa
Signing time:             Sun 09 Aug 2026 20:52:47 +0000
ROA not before:           Sun 09 Aug 2026 20:47:47 +0000
ROA not after:            Sun 08 Aug 2027 20:52:47 +0000
asID:                     59642
IP address blocks:        169.40.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ff:a6:d5:d7:6c:55:95:fc:96:14:1a:63:cb:16:a7:6b:1c:57:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Aug  9 20:47:47 2026 GMT
            Not After : Aug  8 20:52:47 2027 GMT
        Subject: CN=F58BAEA325AE7E377BA445A7D997AAF6F4F54025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:0b:5c:cc:50:44:e0:f2:54:31:77:c4:4b:
                    6b:2b:7e:f6:d7:63:a8:40:09:ae:66:31:f7:8c:3f:
                    f5:8f:48:48:85:f7:4c:69:b5:e3:a7:56:7f:8e:d4:
                    7c:fa:66:4a:70:53:12:4a:8b:c8:14:38:fe:4e:d2:
                    fa:71:88:d5:45:65:e6:c9:40:08:a1:ee:c5:70:cb:
                    0a:26:5a:b7:a2:5c:d1:8f:c4:42:79:c5:86:49:bc:
                    27:e6:ab:fd:12:5e:42:13:61:3f:92:c5:7b:e2:eb:
                    6c:c5:ff:3d:33:4a:cb:78:86:78:aa:d6:a2:ce:41:
                    4f:78:99:71:6b:be:9e:f8:0a:5c:dd:72:71:24:a9:
                    17:59:92:40:b2:f9:ed:c1:85:c1:54:4a:d7:07:b0:
                    c3:15:8f:76:d4:30:6e:24:d4:c2:8b:d0:93:6a:17:
                    0b:3b:3a:e6:fc:93:10:73:d2:10:32:14:38:33:bb:
                    2d:72:ef:99:4a:8b:0c:b3:1f:c6:db:b1:e7:58:fa:
                    ff:ce:af:17:67:97:71:e6:db:62:a0:25:80:d2:29:
                    c9:85:f3:ac:30:62:c5:cc:59:82:3f:e1:f3:d3:f1:
                    0c:00:00:ee:2f:4d:e8:23:23:d7:75:a5:50:d0:b4:
                    5c:3c:c8:f9:8a:2e:42:22:d7:f9:7a:84:59:21:56:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8B:AE:A3:25:AE:7E:37:7B:A4:45:A7:D9:97:AA:F6:F4:F5:40:25
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS59642.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:a9:fc:7e:07:c9:74:94:5e:40:d7:0f:a0:ee:47:0f:25:db:
         c1:8d:46:ee:a3:28:4b:42:c1:9d:92:a9:b7:15:6d:fe:7a:1b:
         f0:d1:c8:0d:24:79:89:ae:1d:a8:bb:e8:00:6c:a5:10:13:4b:
         c8:56:d3:ae:11:1c:fa:e8:3f:6d:95:5a:89:4a:a5:e1:32:fb:
         da:a6:e9:3f:99:7a:55:6f:07:0d:5e:ec:b4:1d:4b:14:e9:21:
         1b:e4:b0:9c:74:16:d6:01:85:23:ce:61:6f:e2:ae:10:9e:10:
         9b:4e:ec:6a:8b:db:c4:16:b4:4b:ed:24:66:37:27:7b:ea:cf:
         71:17:02:97:1c:31:d6:b1:c6:09:c7:3e:a9:85:61:7f:99:ec:
         2b:9c:93:ca:9e:81:ae:28:8b:8d:1a:29:2f:ed:d8:64:64:7a:
         c5:43:e1:1c:eb:3f:93:55:4f:f9:34:52:ed:48:f7:18:ff:eb:
         d5:45:ec:17:d6:ae:16:d8:a9:1b:61:ad:19:9b:73:96:6d:7e:
         1d:ef:59:28:78:18:38:fd:e0:80:26:98:da:de:74:10:31:13:
         03:86:94:15:78:88:d8:3a:e3:b6:21:81:b8:76:64:eb:50:4b:
         3e:1a:c9:b5:25:92:9b:e4:f4:bc:ed:fd:97:30:fc:33:d2:56:
         03:8b:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:12 2026 by rpki-client