Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          r0oepoudPiXvVw/B4RPb1AyqpTkEkVeCzwkJtugwfYc=
Subject key identifier:   AB:F8:DB:8A:3F:41:D7:A5:C9:A9:63:E1:93:0B:00:E8:EF:25:78:A4
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       185FC3F14EC3EE4CC3815B237224C17ECD2A7B29
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212238.roa
Signing time:             Fri 08 May 2026 07:23:39 +0000
ROA not before:           Fri 08 May 2026 07:18:39 +0000
ROA not after:            Fri 07 May 2027 07:23:39 +0000
asID:                     212238
IP address blocks:        169.40.101.0/24 maxlen: 24
                          169.40.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5f:c3:f1:4e:c3:ee:4c:c3:81:5b:23:72:24:c1:7e:cd:2a:7b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May  8 07:18:39 2026 GMT
            Not After : May  7 07:23:39 2027 GMT
        Subject: CN=ABF8DB8A3F41D7A5C9A963E1930B00E8EF2578A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:a6:2c:42:81:b7:e7:f3:2b:95:2c:b2:97:
                    c6:cf:8a:59:f0:58:8e:32:a7:e9:e8:96:09:9b:67:
                    0e:1c:c1:f2:6a:96:6d:ee:6a:3e:ae:37:5c:2c:9c:
                    71:58:79:76:35:6b:16:40:b9:10:69:a0:af:a9:1d:
                    ca:2e:3c:7b:72:aa:c7:39:07:f3:d3:42:f0:8f:b0:
                    14:d6:92:3b:5c:5f:21:59:0c:53:4d:02:45:d9:d6:
                    a4:e0:fe:ef:c7:48:79:c9:03:c1:f2:24:e5:79:44:
                    c9:56:ab:af:69:cb:3b:e0:f1:2e:c4:61:06:31:9a:
                    0f:28:40:7c:9b:90:31:d0:75:df:36:65:19:27:e4:
                    70:95:6e:79:4f:f8:17:2d:10:63:ad:cd:ab:56:27:
                    43:ff:c0:d8:e8:f3:be:1a:9f:be:24:cc:1d:cb:2a:
                    44:91:8f:c6:ac:1c:83:65:04:96:54:7c:3b:28:b5:
                    b5:35:87:a1:67:33:c7:ea:37:1c:18:5b:9b:02:b2:
                    74:6e:cb:e4:d7:f5:42:f3:8a:f8:bf:cd:13:6a:8f:
                    ff:98:90:a3:a6:c4:ea:f3:de:f8:88:8f:b6:1d:1a:
                    12:1f:05:11:7c:8a:be:6e:8e:34:bf:9c:0c:ae:c2:
                    09:40:2d:5f:bb:3a:5a:f4:fa:7c:53:26:1d:cf:de:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:DB:8A:3F:41:D7:A5:C9:A9:63:E1:93:0B:00:E8:EF:25:78:A4
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.101.0/24
                  169.40.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:11:88:13:de:fd:16:63:b2:fb:5e:c0:50:4a:87:17:19:
         06:45:32:e7:bd:f0:22:4e:19:0d:03:36:ad:c3:a9:a9:ab:4a:
         e6:bc:50:11:80:0d:c4:54:52:25:db:52:1d:ec:48:8b:98:72:
         6f:e0:8b:a8:e2:2e:89:57:d5:d8:01:a2:f3:93:bc:59:03:9b:
         6e:83:b2:28:1e:78:e0:29:53:d7:9c:b9:9e:bb:cb:d3:ac:76:
         b0:da:51:4f:4b:70:28:49:4f:b7:3d:5f:aa:cb:84:07:8f:2c:
         9d:ca:26:d0:dc:8c:a1:27:a1:df:6b:21:0f:4b:a5:93:0d:6e:
         2c:06:80:3a:2a:16:25:f6:93:c5:66:57:44:7f:7f:ec:4b:61:
         95:1e:51:2f:a5:63:0b:5c:37:61:35:fa:16:5f:28:13:2e:59:
         04:00:d7:1c:be:b5:c2:9d:26:36:50:2e:e6:81:e2:9e:e8:8e:
         00:0c:14:27:ac:a1:6a:18:4e:34:05:21:ae:46:ea:fc:a6:e6:
         e3:ed:a5:e5:92:f5:bb:2c:05:ca:3e:f2:c0:21:fa:ff:2f:87:
         59:11:6d:2f:77:06:a2:d4:92:ba:f9:43:3a:cd:ba:9b:1c:e6:
         9e:df:08:eb:ad:49:be:cf:a5:6d:77:b9:06:57:71:47:7a:c4:
         38:4f:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:23 2026 by rpki-client