Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218884.roa
File:                     AS218884.roa (raw, json)
Hash identifier:          NyegaOSU8U/DF0dZj/csiZxKhWC1wyVIwh/Okf5861k=
Subject key identifier:   ED:23:F7:D7:72:56:B2:FE:8E:54:B6:10:63:4A:CF:17:34:CF:D0:7D
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       62E9BD285D3B3D683348C41F8584EDC937E128A5
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218884.roa
Signing time:             Wed 23 Sep 2026 17:04:41 +0000
ROA not before:           Wed 23 Sep 2026 16:59:41 +0000
ROA not after:            Wed 22 Sep 2027 17:04:41 +0000
asID:                     218884
IP address blocks:        13.141.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:bd:28:5d:3b:3d:68:33:48:c4:1f:85:84:ed:c9:37:e1:28:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 23 16:59:41 2026 GMT
            Not After : Sep 22 17:04:41 2027 GMT
        Subject: CN=ED23F7D77256B2FE8E54B610634ACF1734CFD07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:67:87:b9:75:d2:0a:7c:d2:6f:45:79:a1:
                    47:ba:88:0d:3d:19:63:78:34:d8:f8:9c:a6:a2:6c:
                    f9:47:e7:55:7b:51:5c:f8:60:45:11:4a:b7:5b:d1:
                    62:d9:6b:ce:52:b1:26:38:c6:17:b8:f0:6e:8d:e1:
                    c8:de:94:17:16:75:3a:c5:1b:23:b8:00:f5:21:b2:
                    0d:e5:37:03:3b:43:79:09:63:88:ca:ff:40:46:80:
                    95:7d:73:ce:94:4d:52:50:59:10:e4:1f:ad:ef:e9:
                    70:5b:8b:33:b9:9c:c7:32:9f:b7:4f:84:5d:ec:9c:
                    d6:bd:39:ba:64:f0:35:21:3a:74:58:6f:2a:53:87:
                    8c:f2:e5:a0:f7:7d:c5:be:99:2a:25:a3:d9:3f:9d:
                    70:7d:ac:4a:6f:77:53:00:61:7b:fb:e7:ab:4f:4e:
                    28:d3:81:bd:3e:d8:e6:67:09:9f:0d:4a:c9:1d:b1:
                    f7:0a:18:c6:c7:62:af:43:65:ae:b8:2d:bc:3b:6e:
                    dc:9e:f6:92:4a:ea:1b:ea:2a:3b:94:2a:bc:b8:2e:
                    ff:ce:58:59:59:b7:c6:34:e7:78:fc:09:dd:ec:d2:
                    72:21:d4:6f:0b:ee:64:c1:78:7f:4b:8c:ae:b1:d6:
                    7f:ed:3a:c2:0d:36:51:94:27:01:a5:be:5b:a7:b4:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:F7:D7:72:56:B2:FE:8E:54:B6:10:63:4A:CF:17:34:CF:D0:7D
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS218884.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:de:b0:e8:d8:37:23:09:ba:4e:60:f8:d0:fd:0c:fd:c6:47:
         7f:f9:88:9c:9b:d3:b0:18:ef:cb:02:b7:fd:e3:23:12:18:9c:
         27:8d:2c:6e:39:26:e2:4e:37:5a:70:98:c1:66:fb:be:69:67:
         57:7d:0b:ae:5b:f2:1f:74:05:8b:3b:ab:de:d4:46:ce:a7:d4:
         8d:71:ff:dd:13:70:db:aa:72:f4:80:3f:bb:bb:29:e9:c8:85:
         85:41:b5:61:b9:30:3e:0a:24:48:72:8e:44:76:4b:8a:a5:e2:
         3b:4b:83:83:aa:86:fa:f3:65:05:b2:c0:ae:00:41:30:bc:4c:
         29:11:7e:6d:34:1e:7d:bc:90:12:3e:73:0e:3b:6f:17:ef:93:
         af:02:5c:5b:08:bd:fb:89:73:d1:fc:f0:10:df:06:07:d9:a4:
         76:03:6b:0e:27:d9:cd:7d:b1:43:0d:aa:d0:3f:77:e7:22:e2:
         02:35:94:9c:05:11:52:85:f5:5e:0b:f1:a6:b2:67:21:0e:81:
         10:45:65:39:6e:c1:ed:37:12:f4:a6:d2:40:7c:ec:dd:31:25:
         99:b4:08:62:eb:89:4d:66:4e:4f:9b:dd:ea:9a:c2:b5:80:14:
         3d:77:76:d5:72:9a:72:b6:c0:83:5d:19:d5:51:c4:dd:4f:83:
         b1:06:69:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:32:22 2026 by rpki-client