Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          /6KazY8PinFfQ/zvN1+Cj+KSR4aA7WLuYzr4EqCV7gk=
Subject key identifier:   EC:97:DD:72:36:68:BF:36:D3:9C:5A:B6:AB:FF:28:2B:E8:0A:90:2A
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       011B2C1CA83A99C8AECF965C26C8C8E7605A751D
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS29802.roa
Signing time:             Thu 12 Mar 2026 15:11:01 +0000
ROA not before:           Thu 12 Mar 2026 15:06:01 +0000
ROA not after:            Thu 11 Mar 2027 15:11:01 +0000
asID:                     29802
IP address blocks:        169.40.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1b:2c:1c:a8:3a:99:c8:ae:cf:96:5c:26:c8:c8:e7:60:5a:75:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:01 2026 GMT
            Not After : Mar 11 15:11:01 2027 GMT
        Subject: CN=EC97DD723668BF36D39C5AB6ABFF282BE80A902A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:23:c3:14:76:4a:bd:3b:af:16:98:40:4c:
                    18:85:8b:4d:f1:0e:61:57:18:62:9c:ba:e2:10:c6:
                    41:cd:5f:d6:5f:0a:9d:85:08:d1:08:f9:fc:ca:69:
                    28:da:72:9b:62:89:c5:15:ba:fb:fa:1b:72:49:a5:
                    57:83:d5:17:d8:8e:91:b3:7c:c2:a6:01:de:8c:f8:
                    89:ab:8c:a6:ce:e5:60:b8:f5:71:f4:09:99:48:c3:
                    45:88:fc:be:a2:1e:a6:bb:4b:ae:3e:e9:0b:6f:19:
                    fe:5c:28:03:19:73:7c:52:13:37:50:e5:a7:f8:fd:
                    36:b4:7b:50:79:ca:b4:8c:ef:ab:14:d9:56:85:8d:
                    13:fc:8e:14:a4:74:62:cf:ea:2f:d6:11:7a:dc:47:
                    7f:2c:c3:85:e3:55:31:ef:32:c4:a0:04:0b:31:99:
                    09:81:85:97:62:9a:24:f9:c6:ba:e9:37:ee:16:7c:
                    98:9e:c6:51:ca:20:f1:34:9b:11:49:fc:01:aa:c8:
                    82:2b:27:3c:15:d6:89:19:50:25:3f:2c:51:6c:f6:
                    be:c9:88:68:94:34:3c:69:bf:21:26:65:1d:98:5c:
                    d4:e4:d4:ef:98:4e:8f:41:04:e4:39:89:f2:f5:9d:
                    33:fb:8c:4a:be:86:91:0b:c9:a3:7b:be:8c:a1:7d:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:DD:72:36:68:BF:36:D3:9C:5A:B6:AB:FF:28:2B:E8:0A:90:2A
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:8e:bf:1a:d2:cd:8e:a1:05:b6:ef:52:96:fc:7a:9b:32:
         f5:4f:44:f0:a3:3a:86:a7:8b:fd:f6:74:3a:04:77:3e:4f:d0:
         74:4e:3f:5f:b6:ed:fe:0b:47:0e:d7:fd:9e:04:61:bb:9c:99:
         5c:6a:e9:60:ba:91:da:d2:47:58:9a:e3:a3:3c:ee:58:a8:0b:
         14:ed:50:3e:d4:e7:ce:66:d7:e4:c8:35:ff:f3:ba:eb:69:1a:
         ac:60:f3:45:6d:52:3a:eb:2f:a2:f5:a8:8f:87:01:6f:89:94:
         d7:d0:c9:8e:e6:fe:4c:a3:1b:8d:7e:46:ee:fe:ae:e6:a2:b7:
         9d:13:18:53:33:d1:5d:ef:c7:78:18:f3:10:00:f6:a3:0a:fa:
         84:1f:7a:90:38:45:a8:18:5c:c1:4f:b5:0e:f2:56:63:e9:c6:
         23:cc:02:59:1d:95:9a:28:0f:14:cf:03:5e:9a:f7:c3:f4:9e:
         d8:82:43:13:a0:e4:11:bb:7a:30:fa:2a:73:27:b0:01:7b:5f:
         ff:7c:1b:63:48:31:1e:f3:c3:de:0e:fa:bf:52:fe:91:f3:5d:
         a9:cf:70:75:8c:44:0c:cc:a5:5b:7f:32:24:54:60:d5:6a:8c:
         8c:4a:fe:dc:84:03:90:37:95:d4:62:74:27:32:2c:87:b9:ad:
         a6:ef:24:2e
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUARssHKg6mciuz5ZcJsjI52BadR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAzMTIxNTA2MDFaFw0yNzAzMTExNTExMDFaMDMxMTAvBgNV
BAMTKEVDOTdERDcyMzY2OEJGMzZEMzlDNUFCNkFCRkYyODJCRTgwQTkwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNSPDFHZKvTuvFphATBiFi03x
DmFXGGKcuuIQxkHNX9ZfCp2FCNEI+fzKaSjacptiicUVuvv6G3JJpVeD1RfYjpGz
fMKmAd6M+ImrjKbO5WC49XH0CZlIw0WI/L6iHqa7S64+6QtvGf5cKAMZc3xSEzdQ
5af4/Ta0e1B5yrSM76sU2VaFjRP8jhSkdGLP6i/WEXrcR38sw4XjVTHvMsSgBAsx
mQmBhZdimiT5xrrpN+4WfJiexlHKIPE0mxFJ/AGqyIIrJzwV1okZUCU/LFFs9r7J
iGiUNDxpvyEmZR2YXNTk1O+YTo9BBOQ5ifL1nTP7jEq+hpELyaN7voyhfQWdAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQU7JfdcjZovzbTnFq2q/8oK+gKkCowHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiOMA0GCSqGSIb3DQEB
CwUAA4IBAQCkdo6/GtLNjqEFtu9Slvx6mzL1T0TwozqGp4v99nQ6BHc+T9B0Tj9f
tu3+C0cO1/2eBGG7nJlcaulgupHa0kdYmuOjPO5YqAsU7VA+1OfOZtfkyDX/87rr
aRqsYPNFbVI66y+i9aiPhwFviZTX0MmO5v5MoxuNfkbu/q7moredExhTM9Fd78d4
GPMQAPajCvqEH3qQOEWoGFzBT7UO8lZj6cYjzAJZHZWaKA8UzwNemvfD9J7YgkMT
oOQRu3ow+ipzJ7ABe1//fBtjSDEe88PeDvq/Uv6R812pz3B1jEQMzKVbfzIkVGDV
aoyMSv7chAOQN5XUYnQnMiyHua2m7yQu
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:38 2026 by rpki-client