Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS812.roa
File:                     AS812.roa (raw, json)
Hash identifier:          qv8J7fdLt/URl5aDrQf8cTH42y/qLctilGpTbbauB+c=
Subject key identifier:   39:45:D0:37:E4:BE:D2:76:B3:6C:D8:58:43:27:A1:D3:16:AD:12:B4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       47956DBD7114A4096D7F398486D3DF5959280DD7
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS812.roa
Signing time:             Tue 12 May 2026 16:22:23 +0000
ROA not before:           Tue 12 May 2026 16:17:23 +0000
ROA not after:            Tue 11 May 2027 16:22:23 +0000
asID:                     812
IP address blocks:        13.141.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:6d:bd:71:14:a4:09:6d:7f:39:84:86:d3:df:59:59:28:0d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 12 16:17:23 2026 GMT
            Not After : May 11 16:22:23 2027 GMT
        Subject: CN=3945D037E4BED276B36CD8584327A1D316AD12B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0a:4a:7e:df:3c:1c:9c:36:3f:46:75:6c:73:
                    86:6d:57:e4:05:54:5c:40:3b:23:5d:da:d2:73:e9:
                    d8:56:3e:71:65:0b:94:dd:c0:e8:50:4e:af:d7:5f:
                    3a:4b:fd:b4:c9:10:77:30:46:fa:82:75:ce:de:70:
                    f1:09:4b:87:8d:97:62:92:f9:66:33:d1:14:ec:93:
                    e1:25:b0:fd:52:e8:6a:14:43:aa:37:77:26:1d:21:
                    6b:e0:90:c7:3c:65:9e:55:5a:c0:0e:01:83:07:9a:
                    44:c2:2b:ae:17:97:8e:1b:42:91:42:cf:38:1d:17:
                    e9:d3:e5:e5:8e:4c:ce:2f:d8:72:5a:c3:1e:3a:f8:
                    84:9c:af:66:5a:c4:10:f3:b8:c0:fe:ee:16:f5:04:
                    b8:87:dd:10:be:37:91:63:d5:91:83:9f:7d:95:5c:
                    70:46:59:76:4d:ba:00:a9:f6:25:68:b8:8c:56:21:
                    e2:13:f7:08:ec:49:ac:61:95:75:08:93:63:09:7b:
                    f4:15:f2:1a:9c:1a:18:b8:d7:cc:13:78:e1:b5:8d:
                    9b:15:f8:e4:1e:61:b4:7f:87:df:34:ef:4a:da:31:
                    c9:2f:4f:50:68:9e:8f:fb:e1:45:e6:10:8b:c3:3a:
                    7c:e9:b8:fc:4a:79:9f:5a:16:07:e8:17:b3:5b:75:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:D0:37:E4:BE:D2:76:B3:6C:D8:58:43:27:A1:D3:16:AD:12:B4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:83:37:e1:3f:3d:a0:a9:58:95:b6:e7:41:68:c0:28:51:7b:
         df:29:95:79:58:0a:e0:12:01:7c:ff:b4:90:17:4c:3f:c3:86:
         04:2c:d4:f8:29:ce:a5:de:88:13:4c:79:3c:c5:01:3c:3c:60:
         44:66:9c:4e:b7:2b:15:43:a4:77:b1:5e:48:5a:b9:a3:23:a1:
         b4:75:21:02:89:2e:93:ee:d1:5b:7c:a2:3b:4e:37:73:6a:ed:
         09:02:70:88:3e:3e:62:87:ae:12:5c:a0:0b:09:1f:65:13:f2:
         84:3c:70:2d:99:6e:ed:8d:17:6a:a7:99:a1:45:0d:87:00:f2:
         85:95:4d:86:b7:de:85:e4:56:13:82:e5:b4:ea:53:07:b2:d5:
         ee:86:f2:74:8d:c5:39:4f:d1:51:2e:28:ba:c9:3d:93:fd:7a:
         e1:41:a5:a6:b5:15:02:bb:e7:00:5d:a5:9f:1e:c4:fc:88:68:
         47:e4:44:99:6b:fd:a8:7a:12:c7:c6:b7:0b:fa:04:1f:2a:ee:
         94:0e:c4:6f:a0:0f:a7:59:99:75:94:f8:be:ad:13:8a:71:c3:
         9b:f8:04:64:58:68:85:12:46:c3:d2:f8:6a:8d:ac:96:7e:e3:
         09:35:43:35:79:51:1b:22:92:99:3a:85:c4:88:f5:0d:fa:26:
         bf:09:71:bf
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUR5VtvXEUpAltfzmEhtPfWVkoDdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA1MTIxNjE3MjNaFw0yNzA1MTExNjIyMjNaMDMxMTAvBgNV
BAMTKDM5NDVEMDM3RTRCRUQyNzZCMzZDRDg1ODQzMjdBMUQzMTZBRDEyQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCkp+3zwcnDY/RnVsc4ZtV+QF
VFxAOyNd2tJz6dhWPnFlC5TdwOhQTq/XXzpL/bTJEHcwRvqCdc7ecPEJS4eNl2KS
+WYz0RTsk+ElsP1S6GoUQ6o3dyYdIWvgkMc8ZZ5VWsAOAYMHmkTCK64Xl44bQpFC
zzgdF+nT5eWOTM4v2HJawx46+IScr2ZaxBDzuMD+7hb1BLiH3RC+N5Fj1ZGDn32V
XHBGWXZNugCp9iVouIxWIeIT9wjsSaxhlXUIk2MJe/QV8hqcGhi418wTeOG1jZsV
+OQeYbR/h98070raMckvT1Bono/74UXmEIvDOnzpuPxKeZ9aFgfoF7NbdWoXAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUOUXQN+S+0nazbNhYQyeh0xatErQwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzgxMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBw2NgDANBgkqhkiG9w0BAQsF
AAOCAQEAZoM34T89oKlYlbbnQWjAKFF73ymVeVgK4BIBfP+0kBdMP8OGBCzU+CnO
pd6IE0x5PMUBPDxgRGacTrcrFUOkd7FeSFq5oyOhtHUhAokuk+7RW3yiO043c2rt
CQJwiD4+YoeuElygCwkfZRPyhDxwLZlu7Y0XaqeZoUUNhwDyhZVNhrfeheRWE4Ll
tOpTB7LV7obydI3FOU/RUS4ousk9k/164UGlprUVArvnAF2lnx7E/IhoR+REmWv9
qHoSx8a3C/oEHyrulA7Eb6APp1mZdZT4vq0TinHDm/gEZFhohRJGw9L4ao2sln7j
CTVDNXlRGyKSmTqFxIj1Dfomvwlxvw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:09 2026 by rpki-client