Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205960.roa
File:                     AS205960.roa (raw, json)
Hash identifier:          4JIthzzrGQuWoRh3qceLLHsL0BMaHsZtIPMMm30XBnM=
Subject key identifier:   1F:2A:FC:7C:D9:4D:65:27:68:F0:2E:0B:16:58:74:7F:16:51:DD:E5
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       70339B5E17E0A911127629EA2DEDFCBBE450BD08
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205960.roa
Signing time:             Thu 12 Mar 2026 15:11:00 +0000
ROA not before:           Thu 12 Mar 2026 15:06:00 +0000
ROA not after:            Thu 11 Mar 2027 15:11:00 +0000
asID:                     205960
IP address blocks:        169.40.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:33:9b:5e:17:e0:a9:11:12:76:29:ea:2d:ed:fc:bb:e4:50:bd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:00 2026 GMT
            Not After : Mar 11 15:11:00 2027 GMT
        Subject: CN=1F2AFC7CD94D652768F02E0B1658747F1651DDE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:2c:08:e4:60:91:00:bf:81:9f:c0:13:89:
                    0c:37:b7:76:0c:94:db:d0:fa:15:42:0c:fa:21:e8:
                    41:07:24:7d:bd:5d:b4:15:e0:61:76:98:4a:c3:0d:
                    d9:8c:89:3e:41:00:31:7b:a6:ea:cd:bf:0f:ed:75:
                    5b:e3:c4:4f:b6:01:15:6c:d0:00:a6:81:2c:75:06:
                    a5:96:a3:7b:ff:4f:f1:74:f9:3b:49:97:7c:a1:3b:
                    c0:df:cb:7b:aa:be:40:f6:cc:8e:f3:a7:58:e3:3b:
                    3a:d5:a3:74:ca:8b:f5:1c:da:1b:df:74:d8:f1:d9:
                    7f:b8:c2:7b:06:a9:98:84:64:f2:11:f5:64:2b:e8:
                    2c:34:f2:f6:4e:84:e5:c5:6b:27:6d:a5:72:6d:46:
                    57:70:e1:ff:c7:65:5d:b4:e3:62:fa:bf:de:7d:70:
                    99:b2:42:70:32:ea:17:e3:0f:8a:5c:d6:7d:75:28:
                    80:f9:5f:e8:c5:53:56:3e:55:85:12:d3:90:60:af:
                    93:84:7d:4c:0c:7e:32:e7:7b:2f:a1:34:99:4f:40:
                    ed:e1:7a:3d:49:e2:56:0e:40:7f:59:28:92:4a:93:
                    d5:7e:00:e3:c0:b1:09:65:b1:31:88:73:19:c5:23:
                    c2:9b:f5:0b:a4:eb:5b:c2:64:44:2d:9e:c1:fc:63:
                    64:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:FC:7C:D9:4D:65:27:68:F0:2E:0B:16:58:74:7F:16:51:DD:E5
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS205960.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:03:46:75:62:55:c4:11:bc:9c:f1:fe:79:ba:5e:9f:ee:48:
         ce:83:92:9b:4d:a8:37:b0:b5:34:78:dd:5c:60:04:e7:05:d6:
         75:c2:ea:9e:c1:f8:42:a9:ea:29:aa:65:a8:1a:3b:bc:3e:aa:
         6c:df:ff:08:3b:ac:38:83:e7:59:97:bb:24:4c:44:db:2f:c4:
         dd:80:78:6d:05:fc:55:99:b4:a1:94:8f:c4:72:90:f7:af:c2:
         f6:4c:f5:a4:ec:af:b5:5d:7b:b0:c0:d8:13:bf:c6:06:a8:92:
         ad:31:f4:8c:31:e8:9b:88:43:72:f0:d6:57:cc:04:31:e9:52:
         af:47:a4:58:9e:9d:c1:06:f8:37:60:42:0c:17:de:9f:23:1e:
         31:0a:76:4c:c9:2a:9c:9c:27:f1:f9:7d:46:a6:e1:7f:c4:62:
         0b:9c:be:d3:45:e9:e3:99:c3:dc:e9:b8:6c:06:8f:50:63:2b:
         1a:31:08:61:c9:a9:eb:e3:16:93:c9:45:f9:75:96:bf:ee:e4:
         54:42:d2:11:71:da:28:d9:8d:11:79:fb:57:04:be:fc:e4:7c:
         e5:61:f5:03:95:9a:9b:a3:c3:ed:4b:2e:b9:26:8f:41:81:90:
         c3:d6:b8:a8:24:b9:c8:e3:22:56:dc:0b:be:4f:89:33:9e:3a:
         56:fd:8d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:38 2026 by rpki-client