Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          C6vt62tCfECWr5kntyd2kKCCYdl+87BOTFngY6UmXbA=
Subject key identifier:   35:36:3E:12:2D:9E:A7:FD:5A:5D:C8:6A:FE:FC:1C:C8:BA:B2:18:5D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       49AE539B692B0E4B37ED6A8597AFB959263B86FA
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS6079.roa
Signing time:             Wed 29 Jul 2026 22:11:30 +0000
ROA not before:           Wed 29 Jul 2026 22:06:30 +0000
ROA not after:            Wed 28 Jul 2027 22:11:30 +0000
asID:                     6079
IP address blocks:        13.141.80.0/20 maxlen: 24
                          13.141.96.0/20 maxlen: 24
                          13.141.128.0/17 maxlen: 24
                          169.40.129.0/24 maxlen: 24
                          169.40.146.0/23 maxlen: 24
                          169.40.148.0/23 maxlen: 24
                          169.40.153.0/24 maxlen: 24
                          169.40.156.0/23 maxlen: 24
                          169.40.164.0/22 maxlen: 24
                          169.40.168.0/22 maxlen: 24
                          169.40.172.0/22 maxlen: 24
                          169.40.176.0/22 maxlen: 24
                          169.40.180.0/22 maxlen: 24
                          169.40.188.0/22 maxlen: 24
                          169.40.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ae:53:9b:69:2b:0e:4b:37:ed:6a:85:97:af:b9:59:26:3b:86:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul 29 22:06:30 2026 GMT
            Not After : Jul 28 22:11:30 2027 GMT
        Subject: CN=35363E122D9EA7FD5A5DC86AFEFC1CC8BAB2185D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:6e:f7:c0:97:53:fe:0c:d8:a3:80:d4:01:
                    ee:18:3a:dd:05:0c:f6:7b:0b:45:b0:14:1a:75:a9:
                    45:29:b7:0d:af:2e:ee:c0:62:b6:76:73:fb:fc:a9:
                    a6:92:2a:5a:71:57:ac:a7:24:dc:d2:b9:74:7c:66:
                    73:04:65:c6:ef:bd:9e:d6:ff:5e:7c:dd:d6:45:20:
                    96:02:da:de:96:a1:b9:52:84:0b:bf:56:d4:1a:7d:
                    97:a1:ef:02:16:e5:92:a9:21:eb:10:de:6f:2a:ad:
                    cb:c7:3f:06:69:d3:04:12:cd:a3:be:25:af:05:b5:
                    68:59:cc:a6:a8:55:43:d5:ca:7a:37:c4:25:9a:40:
                    38:5e:03:19:8c:b5:9b:32:39:ab:04:52:7d:a3:95:
                    57:de:91:05:93:60:69:1b:7b:22:fe:bd:02:f7:14:
                    42:44:89:6b:ce:c6:19:74:1e:0c:41:47:76:d0:10:
                    b4:31:ce:3b:c4:b4:d0:5e:f4:f2:62:1b:58:08:fc:
                    ee:e4:3e:4b:90:1f:0a:94:15:1e:d8:f1:a3:2a:48:
                    d7:b4:87:a8:8d:48:d5:cb:79:da:c6:36:bf:a7:92:
                    cd:05:af:e9:ba:0c:f3:40:28:77:2e:49:d6:cf:e8:
                    72:54:8a:ad:67:fc:c2:e7:a1:0e:d3:13:63:50:36:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:3E:12:2D:9E:A7:FD:5A:5D:C8:6A:FE:FC:1C:C8:BA:B2:18:5D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.80.0-13.141.111.255
                  13.141.128.0/17
                  169.40.129.0/24
                  169.40.146.0-169.40.149.255
                  169.40.153.0/24
                  169.40.156.0/23
                  169.40.164.0-169.40.183.255
                  169.40.188.0/22
                  169.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:a5:27:0f:6f:3b:03:20:f5:b4:0c:d8:12:b8:54:bb:13:
         88:59:22:c6:f0:46:11:bd:22:9e:45:32:80:7f:c2:d2:5c:e6:
         e3:1b:14:9f:e9:45:03:ce:91:25:e8:ad:ad:1a:52:14:41:44:
         c9:73:51:8c:b0:3e:31:f7:79:b1:ad:5e:93:4b:3d:b0:53:fb:
         3b:b5:06:b1:02:05:31:1c:e1:87:9c:39:c9:8e:1f:37:ed:0a:
         03:8c:d7:c3:0c:06:c2:c3:59:02:5b:57:56:fd:e8:e4:08:d4:
         65:63:70:ff:c6:fc:ba:1a:9e:d7:65:6d:1e:f7:7b:2c:f3:0e:
         3c:96:2c:12:e6:c1:0d:90:f5:7b:03:67:38:0a:71:8d:52:d1:
         45:28:94:63:ef:a4:ef:76:42:db:6e:0d:3f:a6:49:2c:b6:c1:
         a9:63:09:bd:2d:dc:b9:13:27:e7:63:a9:8b:83:2c:ca:b1:18:
         52:a2:c2:fd:2b:fa:92:48:aa:00:b3:2f:de:8a:60:3a:86:b4:
         8f:7c:54:1d:60:d9:a2:71:d6:02:fd:4e:0a:15:c4:74:3e:ad:
         f2:f1:c7:fa:35:b3:12:b8:61:29:85:31:f9:9b:04:5d:7b:bc:
         6f:d6:c4:53:f6:3f:04:2f:d5:fc:f6:17:e5:d9:69:1b:7b:9d:
         2e:f2:2a:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 12 06:05:51 2026 by rpki-client