Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
File:                     AS20326.roa (raw, json)
Hash identifier:          jE2vYOSdkO+fg2TMx0009WD15yDLIXg/khF6WNbMQeE=
Subject key identifier:   D7:AE:B3:20:A0:78:98:62:C3:26:B7:8C:C5:F6:80:E8:90:54:BC:43
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       300CF3473A2448A8C6E2067CBC70DB1955FDD70B
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa
Signing time:             Thu 12 Mar 2026 15:11:01 +0000
ROA not before:           Thu 12 Mar 2026 15:06:01 +0000
ROA not after:            Thu 11 Mar 2027 15:11:01 +0000
asID:                     20326
IP address blocks:        169.40.80.0/20 maxlen: 20
                          169.40.208.0/20 maxlen: 20
                          169.40.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:f3:47:3a:24:48:a8:c6:e2:06:7c:bc:70:db:19:55:fd:d7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:01 2026 GMT
            Not After : Mar 11 15:11:01 2027 GMT
        Subject: CN=D7AEB320A0789862C326B78CC5F680E89054BC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:0a:63:29:94:d4:f0:c7:d5:c5:67:1d:67:
                    18:05:b4:7e:e1:25:86:9e:ef:33:13:3d:84:03:1b:
                    47:7c:ac:8e:87:f0:07:75:9b:24:84:7f:60:f4:2a:
                    79:76:3b:9e:c4:1f:92:74:3d:f0:86:20:cb:4e:5f:
                    44:23:11:8d:0c:27:dc:d6:e2:15:1a:c3:f2:86:11:
                    ce:38:f1:1d:a7:3f:03:7d:e3:87:3b:a0:d0:30:00:
                    9b:0c:72:fb:a9:6a:dc:8e:32:b6:fb:5e:46:6b:ad:
                    8a:fa:cf:53:66:98:0b:7d:96:f4:9a:03:d4:34:62:
                    19:cb:12:aa:db:61:b2:be:b6:69:1b:c9:d9:0d:8a:
                    76:ac:c0:fd:37:d8:40:55:92:9a:fb:5f:ee:e9:1f:
                    35:b3:29:27:93:4b:5d:4c:70:3b:b6:26:20:90:78:
                    8f:4a:ed:96:7c:36:83:46:a1:5c:82:6f:e8:a6:08:
                    38:78:cc:a6:a5:1a:9f:c4:90:18:99:2d:a9:1d:86:
                    41:17:d3:88:6f:cd:60:75:2e:0f:67:79:45:94:e3:
                    77:b1:60:3e:fa:1a:8b:9c:23:eb:45:c7:10:e4:3e:
                    f8:25:e3:68:dc:a2:8a:75:ba:d7:f3:25:19:2f:1c:
                    01:12:d6:a3:bf:7e:61:34:e4:eb:ce:9f:3a:51:65:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AE:B3:20:A0:78:98:62:C3:26:B7:8C:C5:F6:80:E8:90:54:BC:43
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.80.0/20
                  169.40.208.0-169.40.239.255

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:ca:63:42:97:bf:83:cf:98:62:26:d5:c5:04:b7:b1:bb:
         31:c3:43:d8:b8:80:2e:a9:58:dd:63:eb:48:20:d0:c2:e7:11:
         76:56:96:a8:a5:2d:e7:4d:d4:27:a9:a6:0b:c1:3a:23:d4:da:
         d5:f8:9c:98:2e:cb:f9:35:d0:22:b8:24:43:3b:c5:29:38:b4:
         6d:10:0d:eb:10:5d:0d:10:6e:3e:a7:1d:d1:7b:fc:e5:9a:b7:
         7b:52:88:d8:c7:8a:bc:e8:eb:f5:c2:9f:c9:39:4a:f6:12:a6:
         40:2c:16:e9:a6:de:42:85:7e:d3:81:93:65:e1:9a:11:21:87:
         4c:f6:0a:32:87:ed:16:58:59:d4:7b:c9:c2:c8:d2:e2:1a:2a:
         08:50:cf:4e:0f:75:dd:f2:7b:7d:8b:9a:03:bf:a6:08:20:24:
         65:c5:19:6f:27:05:5f:be:db:41:a4:1a:43:8b:6f:b5:ed:6b:
         75:42:26:86:6a:0b:d0:c4:ae:60:29:0f:70:02:31:1d:56:11:
         ad:93:4c:3a:2a:b7:a0:d9:1b:d2:1e:e6:1c:ce:e5:45:c5:24:
         47:68:29:79:69:09:a9:90:88:10:ec:0d:91:74:bd:b7:de:53:
         8f:14:8e:f6:df:be:f6:d4:ac:78:ee:d2:22:43:d8:b5:df:ec:
         c5:da:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:24:13 2026 by rpki-client