Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          kBN4flTQkKqXHeykd9R4wfbu9qjnrZh/09WjVpBRemU=
Subject key identifier:   6F:29:39:D7:BE:79:26:D1:AE:65:AD:AE:B8:6B:C6:B0:12:69:7E:83
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       65E81CD0A520363342EC270D1CEA2EF4203D2470
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa
Signing time:             Tue 13 Oct 2026 09:26:25 +0000
ROA not before:           Tue 13 Oct 2026 09:21:25 +0000
ROA not after:            Tue 12 Oct 2027 09:26:25 +0000
asID:                     9304
IP address blocks:        13.141.16.0/23 maxlen: 24
                          13.141.20.0/22 maxlen: 24
                          13.141.58.0/23 maxlen: 24
                          169.40.102.0/23 maxlen: 23
                          169.40.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 10:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e8:1c:d0:a5:20:36:33:42:ec:27:0d:1c:ea:2e:f4:20:3d:24:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Oct 13 09:21:25 2026 GMT
            Not After : Oct 12 09:26:25 2027 GMT
        Subject: CN=6F2939D7BE7926D1AE65ADAEB86BC6B012697E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:e5:d4:d6:4c:84:af:a0:2e:28:29:b8:27:
                    3c:a2:1c:32:08:2f:06:ae:ce:7a:30:67:5f:1b:69:
                    9d:19:b2:d1:ce:67:07:9f:cd:c0:00:ba:cf:cf:7d:
                    34:92:15:98:4d:69:13:b2:79:a6:32:d6:8e:c7:8f:
                    d2:6f:e3:ff:c0:e5:62:d6:be:19:81:73:d3:49:bd:
                    f8:bd:f8:5b:6e:42:93:bd:4c:d8:33:1f:e3:4c:85:
                    1a:63:03:06:51:a7:18:52:0f:d0:b8:9d:ee:46:25:
                    7f:52:a3:c5:cf:56:45:73:61:0a:0b:d6:8b:b6:be:
                    88:4d:29:c7:c7:64:bc:1d:42:7f:ae:c7:48:01:67:
                    37:34:27:40:d7:b5:1d:4b:6c:d8:b4:29:e8:9c:c1:
                    a3:35:d3:1b:66:ac:fb:e4:ae:6e:1d:9c:31:41:9b:
                    c5:bd:d6:1b:f2:e0:6a:d4:a3:96:14:61:71:58:45:
                    f9:07:5d:c1:36:77:6c:52:6c:9e:79:84:0e:8e:de:
                    94:a4:9d:f7:82:f6:b7:b9:c0:4a:5f:ec:e1:dd:0c:
                    b0:73:39:49:d7:f3:a1:e5:e4:44:da:01:73:41:4a:
                    7c:e2:86:ce:67:8a:37:49:98:f1:a6:50:f0:dc:5c:
                    fe:9c:1c:7b:88:bb:15:96:04:e5:b8:c9:d4:03:a8:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:29:39:D7:BE:79:26:D1:AE:65:AD:AE:B8:6B:C6:B0:12:69:7E:83
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.16.0/23
                  13.141.20.0/22
                  13.141.58.0/23
                  169.40.102.0/23
                  169.40.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:80:7d:16:4f:1b:87:64:29:34:26:7e:04:99:c1:ab:ec:ac:
         2c:56:e4:e2:c0:81:1a:82:43:ea:93:51:3a:7d:89:3c:6e:08:
         65:00:0b:37:35:2e:9e:04:b7:d5:36:f0:e5:41:96:1d:e9:39:
         4c:a1:0b:9e:a2:17:29:e5:bc:4c:05:9f:8d:a6:c2:2d:d4:9d:
         ea:6a:d7:15:82:46:0a:e3:d9:c2:72:6d:4c:c9:6f:c7:c4:b8:
         f7:13:4f:a0:03:46:b0:cd:da:88:ac:03:6f:86:ce:46:98:63:
         14:e9:f4:fa:cf:6d:ea:d2:d1:54:77:f8:db:54:64:72:fc:45:
         4f:93:ed:54:26:51:9b:d1:dd:41:66:8d:fa:5b:b2:3e:9d:bb:
         82:ef:f7:51:b2:95:5a:83:8a:94:37:cf:4e:80:fc:e7:5e:d6:
         8d:77:9b:53:5c:b9:ad:f8:41:a9:3f:c1:40:4f:f9:e2:5c:33:
         2a:32:8b:0c:e4:70:f0:f8:24:a7:a1:0f:3c:d7:6c:ee:a8:d0:
         5e:69:81:ec:94:0f:e2:2c:32:82:0b:6d:0b:fb:c3:4d:38:24:
         9b:de:a6:ba:6c:89:cf:03:b3:24:a7:ff:37:82:59:f3:e3:17:
         ec:21:8f:94:13:4c:e3:b0:ba:59:c8:ad:69:93:8b:4c:b7:21:
         e0:13:98:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 17 02:41:01 2026 by rpki-client