Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137235.roa
File:                     AS137235.roa (raw, json)
Hash identifier:          kN1ruUAvVEo/x2VvInJV8LZkENeGjFcxrdUlb2ZPLOA=
Subject key identifier:   16:1F:19:38:A3:3A:54:14:52:11:58:D5:A1:E3:69:A0:25:68:66:91
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       52853CCDD97E4F1FC7485633D9C334FCA956B109
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137235.roa
Signing time:             Thu 12 Mar 2026 15:11:01 +0000
ROA not before:           Thu 12 Mar 2026 15:06:01 +0000
ROA not after:            Thu 11 Mar 2027 15:11:01 +0000
asID:                     137235
IP address blocks:        2.56.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:85:3c:cd:d9:7e:4f:1f:c7:48:56:33:d9:c3:34:fc:a9:56:b1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:01 2026 GMT
            Not After : Mar 11 15:11:01 2027 GMT
        Subject: CN=161F1938A33A5414521158D5A1E369A025686691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:02:35:d8:88:78:55:48:60:00:4a:90:04:
                    8c:25:f1:44:97:84:cb:c3:de:51:d1:26:59:71:61:
                    db:c7:bd:d5:6c:75:10:8a:f3:25:3d:ad:13:28:58:
                    38:bd:01:6e:20:bd:dc:5d:0b:64:da:23:01:5c:de:
                    a4:f7:79:04:a4:8a:15:12:03:af:c8:5e:8b:b0:de:
                    e7:04:86:81:b8:c1:b9:88:56:94:29:da:5b:24:74:
                    15:fd:4b:64:3d:22:b9:0b:1a:4d:27:55:24:78:52:
                    be:79:6c:60:4f:53:d8:ab:b7:7d:8c:df:ce:32:36:
                    90:a1:e6:df:84:66:21:37:e6:2d:cc:55:ea:2d:e3:
                    77:3c:65:70:d5:b6:ca:01:f8:a6:52:65:10:98:3f:
                    79:e8:5f:66:0c:b1:ec:80:e9:32:cd:85:54:1f:3e:
                    10:59:b3:b6:c2:4e:81:0e:5c:e8:c2:3c:74:68:76:
                    4f:ee:cb:6b:72:50:5b:51:28:98:74:7e:0a:02:e8:
                    3a:62:1d:97:30:15:06:68:eb:dc:31:06:ab:c0:11:
                    87:b3:d3:fc:fd:ae:86:02:8c:84:65:a0:c5:59:2e:
                    02:aa:ae:fa:02:4c:1d:fb:95:19:1d:f3:66:9b:d5:
                    ff:71:f2:72:b7:23:51:f9:d1:db:b5:c2:dd:37:2f:
                    0f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:19:38:A3:3A:54:14:52:11:58:D5:A1:E3:69:A0:25:68:66:91
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS137235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:43:8c:a4:3e:0c:57:ae:82:d7:7b:c7:3b:b7:02:5c:af:cb:
         27:e2:22:23:d8:77:c1:b2:eb:5f:8f:a6:3b:64:26:d4:77:e4:
         00:5d:2a:e8:42:0b:a4:c0:88:c2:e9:cc:c4:2f:41:35:7a:d9:
         0b:c5:f8:e9:71:59:a7:c3:e9:c9:1d:89:c1:11:0e:4d:78:18:
         02:ee:86:47:a8:e9:ab:a0:f3:7b:9c:c4:e6:fe:2e:6b:db:4f:
         5b:25:44:74:43:93:5b:50:9a:12:c6:c2:58:0a:2a:9e:77:45:
         d2:b0:e3:eb:bc:bf:c9:3e:7c:f9:8b:a5:df:1e:91:ca:ea:ac:
         66:98:70:18:83:ab:e5:73:4f:12:86:01:7d:d2:7a:a7:c7:f2:
         0e:7f:84:f4:2c:23:77:25:f8:fa:b5:8e:23:6e:c6:70:30:c8:
         b3:ca:85:17:34:41:f7:55:32:80:4c:1e:3d:47:bc:cb:d5:b5:
         ad:76:3e:5c:8b:19:42:33:8d:a9:dc:63:a2:3e:16:90:e5:89:
         9c:08:3c:ac:94:eb:04:1c:35:21:0c:a3:1e:07:29:83:f2:b0:
         3b:4b:55:e9:06:09:6a:7f:9c:ec:19:5c:8e:2f:78:1a:66:19:
         4f:f7:25:3c:2e:de:67:8f:62:a8:38:42:74:be:5b:d5:5d:54:
         ed:73:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:30:52 2026 by rpki-client