Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          iCk1s8iCeecnOSTfGY5OsEA06rB1KItAx1o9v+6L9Sw=
Subject key identifier:   D1:E3:20:5B:AC:04:26:56:C1:11:67:E7:80:B0:04:E6:C0:33:5F:41
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       1F0DAFEDAD5D803E84D594459F7F1D13144B3567
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa
Signing time:             Wed 23 Sep 2026 07:14:36 +0000
ROA not before:           Wed 23 Sep 2026 07:09:36 +0000
ROA not after:            Wed 22 Sep 2027 07:14:36 +0000
asID:                     20473
IP address blocks:        13.141.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0d:af:ed:ad:5d:80:3e:84:d5:94:45:9f:7f:1d:13:14:4b:35:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 23 07:09:36 2026 GMT
            Not After : Sep 22 07:14:36 2027 GMT
        Subject: CN=D1E3205BAC042656C11167E780B004E6C0335F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:b5:af:b5:19:9c:58:da:a3:ed:8d:cd:22:
                    37:e5:d7:27:03:ed:de:84:e0:13:2a:13:64:ed:4c:
                    94:b7:51:a9:6a:12:d4:8d:45:6a:93:46:6e:ac:38:
                    dd:39:ed:46:67:c9:1f:27:cc:55:d2:5c:de:84:8a:
                    56:a2:5d:27:cd:11:5d:5d:10:26:e2:8a:72:c7:34:
                    1a:82:d1:75:6a:e0:4f:77:8c:c7:c8:92:35:d9:40:
                    61:c2:fe:3a:a5:b9:77:54:6d:ce:6e:97:d2:cb:1b:
                    98:0c:bc:d7:b2:f5:2c:90:0e:94:9e:44:f9:03:3a:
                    fd:06:8a:94:47:64:88:7e:07:2a:26:5e:cd:6a:44:
                    71:aa:93:cf:23:eb:18:64:2c:4f:4c:0e:32:86:a4:
                    b9:fe:b0:d0:22:15:a5:4e:63:f0:2e:3f:80:e6:0b:
                    5e:c9:41:d4:7d:23:06:59:a0:dc:d4:3b:74:f8:bf:
                    ea:a1:e5:09:59:7c:8b:0f:54:a4:3f:54:83:e4:8c:
                    d3:b4:58:25:d8:09:8a:7c:31:4d:20:c3:24:df:35:
                    3b:00:4b:dd:a4:b3:58:01:69:00:bc:73:8a:49:b1:
                    74:73:ff:97:2d:8c:59:9d:ad:46:a3:15:92:91:52:
                    e8:32:83:4d:ac:bc:2a:ae:02:c2:f0:0d:84:c3:05:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E3:20:5B:AC:04:26:56:C1:11:67:E7:80:B0:04:E6:C0:33:5F:41
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:49:e6:0b:f1:06:9e:27:b8:e2:6f:e7:7c:fa:ef:3e:48:
         14:4b:80:9d:85:d7:2b:c6:af:db:aa:74:3c:4f:9d:4a:40:8f:
         ee:df:79:c6:d7:f1:27:f8:09:39:10:f4:1f:06:20:79:f2:5e:
         56:94:4a:03:28:12:44:e9:2d:a8:6b:76:90:88:65:ac:f3:68:
         c3:8d:65:6a:06:1b:1f:23:e5:aa:28:e2:2f:15:b9:31:cb:4b:
         f9:6a:1c:0f:07:82:74:2f:fd:f6:72:25:76:b7:08:db:49:f4:
         6e:f5:17:6d:ab:f1:ed:9e:96:8a:cb:25:59:f4:0d:d7:09:64:
         4b:0f:1d:4f:d5:c5:1d:1f:20:1e:ca:f1:16:70:7c:10:8e:00:
         f0:59:91:45:4c:67:0a:84:b2:e3:82:ea:85:38:78:55:49:31:
         0c:2e:43:55:ea:ac:f7:36:03:79:5d:d3:d7:f1:d3:e4:e9:1a:
         93:ec:4e:09:34:14:95:5d:86:f2:7c:bc:19:94:3a:99:12:0f:
         39:96:d3:d0:00:ae:30:c0:b6:69:a9:11:4c:b2:99:ad:f6:ea:
         55:59:f1:d2:97:c8:81:05:89:9a:7a:05:45:46:72:bd:d2:59:
         93:42:c3:67:46:87:ea:b1:63:59:c9:6a:27:cd:bf:67:75:c6:
         e0:71:75:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:17:47 2026 by rpki-client