Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS150293.roa
File:                     AS150293.roa (raw, json)
Hash identifier:          TSLj7fSK21vEUZJ+U/Vyd0g4sv2KxpWyrVNTzkzMGa4=
Subject key identifier:   9D:CA:E0:E1:60:CA:D1:5F:7B:2A:75:0B:A0:56:F6:46:8D:B6:72:DF
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       378B52031E3C884676D3F4729DC4637DEA607A05
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS150293.roa
Signing time:             Wed 25 Mar 2026 09:47:03 +0000
ROA not before:           Wed 25 Mar 2026 09:42:03 +0000
ROA not after:            Wed 24 Mar 2027 09:47:03 +0000
asID:                     150293
IP address blocks:        169.40.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8b:52:03:1e:3c:88:46:76:d3:f4:72:9d:c4:63:7d:ea:60:7a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 25 09:42:03 2026 GMT
            Not After : Mar 24 09:47:03 2027 GMT
        Subject: CN=9DCAE0E160CAD15F7B2A750BA056F6468DB672DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:f5:d4:ca:f1:9c:57:88:ff:b0:65:22:2f:
                    8d:1a:4c:c9:ce:13:4a:0d:b2:07:4c:15:db:d5:7c:
                    74:43:5f:3d:6e:1e:27:11:74:a7:c6:d1:53:1e:8d:
                    fb:cb:a5:9c:17:13:23:f6:ae:75:fd:43:02:e5:47:
                    5c:39:cf:de:42:66:04:84:5c:50:f5:e8:9b:c9:35:
                    88:ce:a1:c0:de:39:b9:46:cb:7d:c3:de:77:44:f1:
                    a1:c7:08:f2:1b:11:b6:cb:e0:77:d1:d9:d0:06:6f:
                    ee:3f:77:41:9a:c6:84:41:2e:eb:37:30:a9:99:f5:
                    99:a9:b5:2a:f9:ac:91:ff:c7:fe:b5:b4:c0:f8:5d:
                    06:22:07:b0:44:26:b1:0f:32:ad:f5:3c:c4:32:bf:
                    da:f6:eb:f7:9e:59:d7:c7:f6:9e:00:c5:10:d6:ed:
                    b6:3e:6f:2d:9d:d7:81:6f:8a:3f:75:ea:3d:c4:96:
                    48:88:78:45:25:27:9c:49:d9:7f:aa:01:22:4c:de:
                    3a:50:ef:27:5c:53:d3:0b:bb:64:54:e3:19:6f:b5:
                    f5:80:1f:eb:04:67:65:75:e7:95:55:bf:9a:fa:db:
                    05:61:16:f4:0d:21:4f:d9:b6:99:7f:60:71:5e:22:
                    a9:d2:de:46:96:f3:bf:15:90:f1:19:0e:e5:fe:3b:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:E0:E1:60:CA:D1:5F:7B:2A:75:0B:A0:56:F6:46:8D:B6:72:DF
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS150293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:12:5c:12:49:a1:86:b2:50:dd:3b:11:6f:0b:6a:66:aa:3f:
         db:fc:86:a6:f8:4f:37:9d:12:e7:18:3a:fc:4a:cc:dc:e2:28:
         8a:f4:b2:e7:77:35:fe:a9:89:37:ea:cc:7f:a5:20:66:b0:46:
         3d:ab:0c:75:aa:11:75:b6:ce:58:a7:4e:6d:4d:aa:7d:96:da:
         de:95:2f:11:73:2c:be:2f:3f:74:fc:9f:d9:68:e0:22:5e:8d:
         6a:5b:61:fc:60:87:98:b6:6f:ce:4f:98:6e:8d:12:51:82:7d:
         76:68:2d:d7:41:51:e2:46:d3:73:e6:10:1e:c4:46:9c:14:65:
         a7:0c:6d:fd:5d:61:e3:1e:54:2c:2f:f5:69:e7:ac:27:10:a0:
         ba:63:94:ac:41:83:c8:0a:25:8c:20:94:e1:ec:1a:26:60:95:
         11:3a:24:76:c4:20:90:2f:2b:f2:24:ea:4f:a3:c4:aa:85:a1:
         02:6b:df:18:61:9e:9b:bd:f5:0d:f4:22:bd:3d:65:f8:12:ac:
         ee:da:3b:3f:98:36:42:23:69:9b:5e:b5:4b:71:6b:1f:38:58:
         02:b5:fe:d5:ec:ee:1a:c0:04:84:71:47:79:61:c5:ef:39:3d:
         db:b9:ea:13:1b:03:e0:fd:a8:42:7d:18:34:32:d5:9a:de:ab:
         03:11:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:37 2026 by rpki-client