Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa
File:                     AS13335.roa (raw, json)
Hash identifier:          ljGwTMTZnNjAPf7/lfG1Q+e6b8MzKehBmSjdvGMvLVY=
Subject key identifier:   23:6A:23:65:E9:B4:91:5F:C8:EA:3B:29:21:D1:75:E1:AA:E1:80:EF
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7D92F511F8CA857F38FE2B7743595CCA5D50A176
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa
Signing time:             Thu 12 Mar 2026 15:11:00 +0000
ROA not before:           Thu 12 Mar 2026 15:06:00 +0000
ROA not after:            Thu 11 Mar 2027 15:11:00 +0000
asID:                     13335
IP address blocks:        169.40.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:92:f5:11:f8:ca:85:7f:38:fe:2b:77:43:59:5c:ca:5d:50:a1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:00 2026 GMT
            Not After : Mar 11 15:11:00 2027 GMT
        Subject: CN=236A2365E9B4915FC8EA3B2921D175E1AAE180EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:ec:0f:69:e1:3a:3c:4a:30:a3:c1:84:fc:
                    67:bb:68:22:5e:98:49:cd:2c:a0:02:e2:78:d8:e3:
                    3e:81:c6:52:f4:1f:0e:fe:38:a1:ea:3e:2a:be:52:
                    09:df:55:09:36:d6:3d:d9:34:a4:9f:7f:23:d1:b2:
                    c8:43:01:5b:b3:4a:ed:de:e4:59:cd:94:bf:89:78:
                    99:d0:79:0b:88:89:c5:65:bb:5f:f7:06:49:70:9a:
                    29:eb:f9:fe:50:2e:38:88:05:87:12:11:05:02:bc:
                    3f:aa:3c:67:63:5e:b5:d6:86:c5:b0:54:81:1e:d5:
                    6e:e8:12:6f:86:83:28:8f:40:79:84:62:48:de:d1:
                    82:5e:56:6e:ff:07:6c:36:0c:cf:67:9c:0e:bb:c8:
                    e1:bb:dc:9c:1a:72:ee:52:6b:5d:c5:d7:95:79:e0:
                    86:75:9c:b2:3f:08:ec:67:a1:e8:a7:76:5c:af:21:
                    38:fd:1d:61:2d:04:9e:6d:08:b0:69:5d:6d:e8:fc:
                    9f:7a:b1:f6:58:27:4b:17:b9:e9:1e:b1:46:eb:be:
                    d8:c1:89:e4:75:e9:e8:fd:f4:c2:a4:3a:c4:ba:36:
                    52:9a:9a:ef:98:37:03:48:a6:af:ee:c6:2a:44:12:
                    6e:5e:91:0e:a5:14:79:63:76:f0:1c:f6:da:d8:f4:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6A:23:65:E9:B4:91:5F:C8:EA:3B:29:21:D1:75:E1:AA:E1:80:EF
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS13335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:25:2f:46:48:3b:01:ec:b2:95:22:ef:fa:75:56:ac:12:
         e0:c8:9c:22:0a:86:9b:9b:00:46:91:a5:a0:77:e6:c7:9d:5b:
         2b:10:52:a2:5d:79:40:0d:bf:06:ea:b1:3e:34:22:03:ba:31:
         67:c2:81:33:e5:fb:cc:7b:88:f9:b6:15:55:6a:ea:61:da:02:
         fc:a8:fe:3d:a3:d7:f9:1a:ff:27:e0:0b:2b:40:5e:9b:f5:b3:
         73:a4:4b:b9:9d:b9:35:2a:cb:41:ee:52:e6:fb:b4:91:d5:91:
         4a:28:50:2c:fb:5b:dd:47:a4:61:5a:fd:1e:b5:09:97:7c:0d:
         08:37:94:bd:f3:6e:5d:51:86:92:30:53:77:c5:b9:79:f5:ba:
         d5:2b:0d:2e:78:78:52:87:b1:8f:ec:2d:30:dc:86:0c:80:3c:
         ff:78:28:a8:b5:7f:df:de:1d:ea:49:30:cf:de:ac:e2:4c:4a:
         d8:02:47:2d:3c:09:5c:76:4d:80:ca:03:e7:a6:3e:f5:d1:d0:
         0f:35:bb:6e:4b:c5:36:92:2b:a5:4f:ed:62:6d:7e:6a:39:0b:
         d3:a1:17:8a:85:cd:e6:40:78:55:c9:b6:ed:5c:42:73:9d:a9:
         91:f1:2e:ed:fe:df:d3:d9:89:0e:ee:e6:75:14:8c:17:20:ac:
         94:f2:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:29:47 2026 by rpki-client