Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          7TN/MCtWE7XMhtFfZ8y57iAqyJCPGp+UJY8USqccd6E=
Subject key identifier:   65:82:9F:A7:D3:99:9D:04:31:32:67:D4:38:47:C7:9A:5C:98:28:AC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2C8B4033E1AC2D6167DD5F3C5FC51B1AB2594589
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa
Signing time:             Wed 29 Jul 2026 22:11:30 +0000
ROA not before:           Wed 29 Jul 2026 22:06:30 +0000
ROA not after:            Wed 28 Jul 2027 22:11:30 +0000
asID:                     7029
IP address blocks:        13.141.0.0/20 maxlen: 24
                          13.141.16.0/22 maxlen: 24
                          13.141.40.0/22 maxlen: 24
                          13.141.80.0/20 maxlen: 24
                          13.141.96.0/20 maxlen: 24
                          13.141.128.0/17 maxlen: 24
                          169.40.129.0/24 maxlen: 24
                          169.40.144.0/24 maxlen: 24
                          169.40.145.0/24 maxlen: 24
                          169.40.146.0/23 maxlen: 24
                          169.40.148.0/23 maxlen: 24
                          169.40.153.0/24 maxlen: 24
                          169.40.156.0/23 maxlen: 24
                          169.40.164.0/22 maxlen: 24
                          169.40.168.0/22 maxlen: 24
                          169.40.172.0/22 maxlen: 24
                          169.40.176.0/22 maxlen: 24
                          169.40.180.0/22 maxlen: 24
                          169.40.188.0/22 maxlen: 24
                          169.40.204.0/22 maxlen: 24
                          169.40.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 18:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8b:40:33:e1:ac:2d:61:67:dd:5f:3c:5f:c5:1b:1a:b2:59:45:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul 29 22:06:30 2026 GMT
            Not After : Jul 28 22:11:30 2027 GMT
        Subject: CN=65829FA7D3999D04313267D43847C79A5C9828AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d2:11:9b:0d:f2:36:e3:39:f1:c9:d5:cd:f2:
                    31:45:76:74:21:d7:23:fc:a5:50:a5:13:d9:61:a7:
                    f8:ae:cd:e6:17:89:46:77:79:1e:cb:37:fb:e2:af:
                    ed:6a:06:ec:2c:a9:2d:b8:bc:2d:ed:ab:21:1c:39:
                    c8:19:09:92:e9:1b:d8:3f:99:9c:91:dd:04:e7:fe:
                    f9:87:e4:4c:2b:19:cc:ef:b0:b4:00:63:38:00:64:
                    ff:89:ca:6e:90:d6:f5:82:91:34:da:11:a6:8b:0b:
                    5c:74:f9:57:92:5c:e0:3e:0b:dc:19:49:1e:b6:55:
                    60:c1:45:23:92:08:af:d8:09:f4:0d:96:1f:55:76:
                    94:5e:db:03:3c:25:9f:4e:e1:f5:54:eb:3c:7e:98:
                    b7:5e:4a:9e:18:ff:41:d3:f9:b6:02:88:13:e7:d2:
                    dc:85:1d:ad:93:23:3f:62:fa:c8:10:19:39:c0:5a:
                    ca:1e:eb:60:a0:41:1d:48:ee:27:8c:a4:b3:c3:17:
                    38:de:74:71:e4:d2:bf:21:a7:82:a1:2c:69:6a:f8:
                    d8:85:66:84:7c:c8:b9:de:2b:13:84:23:ed:0a:86:
                    85:6b:27:a2:dd:d6:f7:1f:be:81:7f:a4:36:ac:29:
                    db:19:25:cd:95:c3:c2:be:13:1b:f9:98:e3:15:4a:
                    d2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:9F:A7:D3:99:9D:04:31:32:67:D4:38:47:C7:9A:5C:98:28:AC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.0.0-13.141.19.255
                  13.141.40.0/22
                  13.141.80.0-13.141.111.255
                  13.141.128.0/17
                  169.40.129.0/24
                  169.40.144.0-169.40.149.255
                  169.40.153.0/24
                  169.40.156.0/23
                  169.40.164.0-169.40.183.255
                  169.40.188.0/22
                  169.40.204.0/22
                  169.40.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:cf:b9:73:92:ff:c2:49:ba:1d:59:1b:f4:46:3f:e8:1a:
         aa:90:6c:d1:f8:a0:5e:3d:f7:99:6c:28:a9:ac:ef:6c:c4:f2:
         b1:e9:6b:bf:ac:ee:66:ad:79:83:ce:ff:f1:3d:89:98:72:f5:
         a3:1f:33:3c:65:35:d4:1a:af:3b:b7:90:92:18:e2:3d:13:9a:
         16:36:5b:f9:b5:ab:d4:ef:7d:12:2e:59:98:6c:1c:6b:eb:15:
         3b:00:a6:72:db:06:36:13:90:5a:7a:56:c5:99:81:90:22:9f:
         d7:9f:12:6a:26:01:90:b4:b9:bf:a7:cb:a3:cb:f7:eb:0b:87:
         ab:58:32:d9:3d:a4:69:7e:a2:84:55:13:43:a8:57:74:93:4e:
         ed:54:71:fb:a9:1a:47:31:ae:e7:cd:4f:46:6a:28:e8:1e:c8:
         83:b5:fe:6e:98:9b:4b:d2:94:a3:80:88:9e:b4:d0:97:f2:c2:
         80:38:81:9c:65:05:c2:7a:8e:41:f6:e6:bd:aa:2c:ec:66:2e:
         1c:40:c0:f2:da:46:af:6a:ac:0c:5a:cc:3c:89:00:47:dc:89:
         a9:48:62:87:73:f7:60:aa:3b:4f:34:9d:7e:22:ef:59:37:32:
         0e:54:e5:50:82:2b:ff:82:c6:b6:ff:dd:1f:2b:f5:0a:d2:67:
         5e:6d:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:05:50 2026 by rpki-client