Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS213607.roa
File:                     AS213607.roa (raw, json)
Hash identifier:          AaTrVfp7JNs9NDtAsEm8SSzSn2OAypgDdsufq/ue7gM=
Subject key identifier:   EC:E5:D3:8A:A6:A1:8E:E9:9A:7B:B9:1F:C4:03:3A:F1:02:06:15:1D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       40A46AC78A409767D01B03A6DE781F520A0A09A3
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS213607.roa
Signing time:             Tue 17 Mar 2026 08:33:25 +0000
ROA not before:           Tue 17 Mar 2026 08:28:25 +0000
ROA not after:            Tue 16 Mar 2027 08:33:25 +0000
asID:                     213607
IP address blocks:        13.141.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:6a:c7:8a:40:97:67:d0:1b:03:a6:de:78:1f:52:0a:0a:09:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 17 08:28:25 2026 GMT
            Not After : Mar 16 08:33:25 2027 GMT
        Subject: CN=ECE5D38AA6A18EE99A7BB91FC4033AF10206151D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:22:c1:55:0b:5e:4d:57:f8:a5:62:57:e9:
                    6c:11:75:1d:04:6d:57:39:6c:ba:27:96:e5:8d:66:
                    68:ea:07:59:1e:13:d4:4a:70:b8:2e:d5:c4:a7:4f:
                    c3:ea:93:62:7e:5e:34:06:2a:c0:33:df:bf:ed:1e:
                    0d:56:af:81:5a:6c:ee:e8:7d:46:ee:66:5d:40:30:
                    df:49:94:7a:27:5d:f5:f7:c8:7a:3d:fc:ba:4c:05:
                    a8:b3:3f:e2:f2:94:53:52:e6:e5:b5:12:f4:9f:3e:
                    8e:75:79:a7:1b:0f:7d:b3:36:ed:13:ae:59:ba:19:
                    5a:cd:46:a2:20:22:de:00:86:86:a9:75:ab:5e:d1:
                    f1:7b:04:a4:57:1e:2f:16:c9:8f:fe:bd:19:e5:80:
                    b8:2d:ad:e6:72:3b:a1:88:00:62:92:7b:e8:c9:7b:
                    27:53:b1:54:28:48:2d:84:f8:6e:f7:6c:01:d1:33:
                    2a:52:46:a0:2b:6e:3c:a9:a6:b5:04:4a:7c:7d:d2:
                    1a:76:2d:0c:b6:b5:14:77:bd:f5:13:9d:65:70:3b:
                    26:42:37:82:68:c3:f9:a2:5f:72:ec:98:d7:b5:fd:
                    a1:fa:85:3d:a7:7e:3d:a5:c5:d8:d7:c0:87:b1:4f:
                    a0:ce:6b:6e:5b:02:b4:2f:4c:3a:39:e3:19:aa:ce:
                    76:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E5:D3:8A:A6:A1:8E:E9:9A:7B:B9:1F:C4:03:3A:F1:02:06:15:1D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS213607.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:b3:47:3c:3b:b1:c4:a9:21:ba:b0:2f:af:b7:12:00:07:71:
         13:76:66:8c:1b:19:3f:02:2a:1c:3c:bd:21:4f:da:b0:63:17:
         59:e0:81:3f:0e:1f:fc:0d:63:ab:78:b0:f4:37:bb:7d:77:65:
         70:73:c7:1d:df:d5:48:d2:17:d8:11:99:24:7a:e7:77:45:47:
         67:db:47:b0:28:9e:d1:99:18:97:68:11:d5:08:b0:6f:b2:f4:
         27:f0:b8:8f:65:f6:75:d9:a2:38:1f:23:62:c0:6e:b5:50:2a:
         3c:64:c7:d7:c8:5d:6e:39:7f:cc:07:e0:6e:13:bf:85:fb:ae:
         01:fb:6c:5a:a7:6e:14:8c:79:69:ea:9f:fd:fe:05:74:47:71:
         50:c0:90:13:45:39:f3:9b:cb:1b:c8:df:32:6d:b4:93:5d:84:
         de:8b:55:44:b1:bc:82:e3:96:71:c7:db:d8:51:06:ac:a0:c6:
         56:d4:f5:ce:d6:0b:f0:8a:c1:b1:da:e7:94:43:ab:ea:8a:4d:
         a2:f4:6c:27:9f:0b:7c:b0:b8:95:51:a3:7a:4d:4b:02:89:20:
         d7:2e:b1:f5:9e:85:d4:02:97:0e:89:85:7f:fb:02:dc:ba:f4:
         3b:e0:e5:b2:78:f2:92:68:42:09:37:58:a5:86:ec:da:96:6d:
         d9:53:d2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:39 2026 by rpki-client