Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS208949.roa
File:                     AS208949.roa (raw, json)
Hash identifier:          TdB57GsqYHk2UdfVdPLUMFD1ttBKNn6IS3Z3CkD7+BI=
Subject key identifier:   7F:50:91:6A:91:D8:44:62:E0:7A:43:66:0B:52:0D:FF:BA:BC:F6:1B
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0A1C139A2C1083618A3C97B44B88384037A4C870
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS208949.roa
Signing time:             Mon 21 Sep 2026 20:02:51 +0000
ROA not before:           Mon 21 Sep 2026 19:57:51 +0000
ROA not after:            Mon 20 Sep 2027 20:02:51 +0000
asID:                     208949
IP address blocks:        13.141.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:13:9a:2c:10:83:61:8a:3c:97:b4:4b:88:38:40:37:a4:c8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 19:57:51 2026 GMT
            Not After : Sep 20 20:02:51 2027 GMT
        Subject: CN=7F50916A91D84462E07A43660B520DFFBABCF61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:e1:8d:17:f9:f7:87:05:12:ff:bd:2f:7d:
                    fb:ce:ef:9d:2d:c9:b0:d8:53:9a:88:91:ef:40:97:
                    09:63:05:8a:f7:a1:e8:65:49:3d:f3:bd:b6:8c:f8:
                    1c:af:87:cb:99:31:70:c1:53:33:76:24:49:e1:ce:
                    c8:ed:ff:8e:e9:35:91:87:98:23:7f:e5:a1:d1:d4:
                    1c:a3:05:11:4c:3f:ff:1a:3d:42:9a:f2:91:69:f3:
                    1e:9a:11:83:44:49:3c:f8:09:42:aa:51:31:59:80:
                    c8:85:32:3f:91:71:96:69:22:3f:91:05:74:a8:41:
                    eb:9c:a7:1f:8b:ed:87:e4:b8:85:e9:0b:7d:d4:f3:
                    37:1b:65:07:3d:89:76:90:0e:66:3e:03:5e:31:a2:
                    fe:40:47:76:58:34:42:cc:6c:93:ce:78:4c:ae:fb:
                    d4:63:92:a5:2a:a4:05:4e:3f:90:78:c9:75:d1:45:
                    cb:3c:50:1c:c6:53:0f:35:51:05:b9:c2:46:66:99:
                    3b:e3:64:1c:f6:3a:02:cc:ca:03:64:2c:8e:57:7c:
                    85:c0:20:24:cc:0a:2f:77:09:80:72:e5:cd:0d:77:
                    48:b3:d2:a0:d4:0d:f7:73:fd:91:a1:d6:39:df:cd:
                    6e:b2:7a:36:0b:97:61:04:4e:0b:18:e6:61:53:5b:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:91:6A:91:D8:44:62:E0:7A:43:66:0B:52:0D:FF:BA:BC:F6:1B
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS208949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:84:d7:2d:27:70:49:f3:31:ec:af:e3:36:b5:90:bd:51:bf:
         a1:5e:99:58:c6:49:16:77:06:9b:0e:6e:6b:b2:77:15:12:9a:
         bc:d2:a0:22:ee:e4:b8:af:4a:39:a4:6c:a2:8e:2e:fe:e2:8f:
         86:39:2d:cc:3e:f1:a1:97:a6:43:55:ab:98:22:a8:76:fc:16:
         31:c2:dd:18:34:4f:0b:90:13:b1:5b:32:fe:38:03:98:f6:14:
         e5:85:b9:20:75:ab:f4:de:da:f9:36:0a:ca:ce:69:74:f4:cc:
         59:04:7f:9e:c5:0b:da:34:97:a8:20:88:e8:a8:5a:11:30:0b:
         a9:63:67:52:dc:83:9f:28:a3:24:94:ad:95:73:dc:88:08:c5:
         a1:62:25:4f:68:2d:3c:0c:5b:02:06:65:52:c8:ac:ae:18:0e:
         0f:55:c5:02:5a:19:99:27:8d:ba:0e:3e:bc:e1:ce:6c:1d:30:
         a9:a7:6a:03:df:98:b4:ae:46:c2:e6:45:58:71:2b:79:29:14:
         a0:81:3a:84:68:0d:e2:0b:2a:6a:8c:74:6a:a3:1d:d2:44:7d:
         29:ae:5e:4a:14:26:bf:d5:46:5a:f7:5b:f2:01:33:8c:1f:f9:
         70:78:1c:78:c9:3f:e0:45:6f:29:99:95:fc:a0:51:1a:82:ef:
         bf:31:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:00:59 2026 by rpki-client