Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205896.roa
File:                     AS205896.roa (raw, json)
Hash identifier:          I8Gb9nqX8D68+pv8onG01eqm3F02zuqS4QAGu5+pY0M=
Subject key identifier:   B6:C5:6D:DD:B5:97:25:02:64:EC:89:83:BB:E9:C4:8C:9E:CB:88:F3
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       338CA3A1F1A1B41CBE0A20D5CD9B0B964FF5BCC2
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205896.roa
Signing time:             Thu 12 Mar 2026 15:11:00 +0000
ROA not before:           Thu 12 Mar 2026 15:06:00 +0000
ROA not after:            Thu 11 Mar 2027 15:11:00 +0000
asID:                     205896
IP address blocks:        169.40.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8c:a3:a1:f1:a1:b4:1c:be:0a:20:d5:cd:9b:0b:96:4f:f5:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:00 2026 GMT
            Not After : Mar 11 15:11:00 2027 GMT
        Subject: CN=B6C56DDDB597250264EC8983BBE9C48C9ECB88F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:8e:97:a2:ca:19:67:2a:12:7c:5d:9f:e6:
                    9c:0e:cb:82:29:6a:fd:15:d6:bd:76:ab:e3:36:4d:
                    c2:02:e7:9c:49:82:59:b2:2e:10:80:35:57:53:f0:
                    54:b7:b4:59:a5:df:e9:81:94:f0:02:ed:bd:7b:14:
                    9a:b4:3f:63:8b:93:06:1b:50:22:9b:8b:13:a9:c5:
                    10:22:f6:16:ba:9c:46:f1:58:c8:96:66:88:aa:0e:
                    5b:87:00:3a:cb:91:45:8d:de:bb:ac:03:b6:aa:c1:
                    97:c2:a1:1d:b2:bf:fe:5d:e5:03:a0:b0:3c:c8:4b:
                    3b:ec:76:c7:10:ee:4e:97:c4:d3:27:dc:48:f8:7b:
                    81:a2:94:10:39:1c:62:db:d0:5b:79:26:e8:18:cf:
                    70:fa:4a:f0:55:da:b6:2c:65:ce:a4:06:30:c0:a0:
                    23:7b:a8:05:01:60:e5:1e:2e:0a:72:c3:46:ff:ee:
                    60:dc:96:78:75:72:f7:c4:72:8d:41:82:d0:68:06:
                    86:3a:82:e6:0e:ee:71:61:38:54:a3:d1:67:d9:16:
                    8c:0c:c8:74:0e:76:45:bd:1b:5e:23:c3:53:17:63:
                    7b:4e:50:22:27:60:03:12:58:01:69:71:f2:85:f8:
                    f9:a2:09:42:ef:44:0d:f1:86:5b:cd:97:aa:fc:c3:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:6D:DD:B5:97:25:02:64:EC:89:83:BB:E9:C4:8C:9E:CB:88:F3
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205896.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ca:69:7c:4a:b3:4e:22:05:0c:cf:73:aa:e0:d2:21:d4:4a:
         45:df:fe:f8:0f:8b:07:1a:5a:30:da:20:8c:f4:e9:01:72:93:
         37:16:ca:d4:41:d8:d0:ce:f1:44:c3:a6:4c:c2:e8:6d:4b:e3:
         68:6d:df:5a:e8:63:f0:d4:55:2f:74:af:4f:e2:fb:dd:89:2b:
         94:f2:07:8f:5e:c3:58:cc:85:ee:8d:4a:ef:50:15:31:47:a5:
         29:fb:19:c9:c8:39:7e:95:20:90:d9:06:5c:0d:82:af:49:ea:
         70:68:c9:c2:4a:ea:d3:44:d4:ef:2c:e3:c1:81:5d:92:ad:b5:
         21:53:62:de:20:16:92:c5:82:78:84:a4:0f:b4:bc:5f:8b:44:
         76:34:db:e8:17:f8:07:d7:fa:92:b9:ea:9a:52:1f:84:42:b0:
         ca:69:ef:16:11:11:81:55:e7:83:57:db:5b:12:52:3d:e5:a8:
         10:a9:9a:21:c0:17:37:a7:5f:88:e4:c4:71:e7:19:61:f2:a1:
         42:1e:cc:06:d3:23:c4:c5:57:08:0d:81:ca:2e:1f:3b:51:45:
         1f:fe:13:a2:78:29:c3:e1:13:6d:8d:9c:23:aa:11:b7:21:9a:
         d8:7e:b9:ae:9a:3e:80:75:95:9d:61:a1:31:ed:c5:57:0c:c4:
         e2:fd:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:13:30 2026 by rpki-client