Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30042.roa
File:                     AS30042.roa (raw, json)
Hash identifier:          OuHgRPdbzmK8husvlBBoLUFnXUzA42kZ+Mqcf5/ftWM=
Subject key identifier:   34:5C:EE:3B:AB:31:D7:F1:3E:36:1B:C8:71:14:F1:2D:E2:80:4E:9B
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       552FC171A99F9E798C3E9BA8A31FD0FA8A5F374E
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30042.roa
Signing time:             Wed 23 Sep 2026 19:11:23 +0000
ROA not before:           Wed 23 Sep 2026 19:06:23 +0000
ROA not after:            Wed 22 Sep 2027 19:11:23 +0000
asID:                     30042
IP address blocks:        13.141.70.0/23 maxlen: 24
                          13.141.72.0/22 maxlen: 24
                          13.141.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2f:c1:71:a9:9f:9e:79:8c:3e:9b:a8:a3:1f:d0:fa:8a:5f:37:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 23 19:06:23 2026 GMT
            Not After : Sep 22 19:11:23 2027 GMT
        Subject: CN=345CEE3BAB31D7F13E361BC87114F12DE2804E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:7d:2a:19:17:16:5f:2c:5b:e2:fc:56:2b:
                    d2:f6:48:4b:c7:fe:bb:fc:88:e1:e3:51:3d:97:10:
                    6f:2c:2d:7c:f7:c5:16:4e:82:60:58:bf:0a:5f:a7:
                    e1:09:be:c1:af:cf:30:d2:fa:f5:86:35:ee:85:ae:
                    3e:70:75:01:44:cd:52:ae:79:70:16:d3:0f:18:fb:
                    a2:ec:7f:67:03:17:ca:3c:9f:49:01:84:dd:b6:b4:
                    e2:14:fd:ea:68:16:fd:f9:9c:d1:e2:08:50:0c:8a:
                    6c:36:a2:db:0c:d3:ab:1e:d8:91:71:3f:cc:0c:70:
                    2c:4d:55:1a:85:00:6b:52:e5:5f:b8:e5:d4:78:da:
                    d4:86:78:04:6b:cd:a9:85:b8:35:ac:bf:c0:26:df:
                    cd:45:c2:23:ce:45:ec:65:15:a2:11:ac:05:f5:a3:
                    b8:e6:17:34:f0:77:ea:cb:d6:09:46:91:5b:0f:73:
                    2f:78:37:13:7b:cb:74:c2:96:3d:67:87:8c:85:c6:
                    84:cc:63:32:8a:fb:9e:86:19:cf:2a:e2:2d:82:bd:
                    39:de:45:39:44:33:aa:af:9c:2b:91:2e:8d:56:b1:
                    4e:b0:0d:04:fd:84:25:01:3d:2d:dd:2e:3e:4e:6c:
                    68:eb:db:31:64:a4:e4:41:d7:14:a6:d5:e4:21:8b:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:EE:3B:AB:31:D7:F1:3E:36:1B:C8:71:14:F1:2D:E2:80:4E:9B
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS30042.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.70.0-13.141.79.255

    Signature Algorithm: sha256WithRSAEncryption
         75:af:3a:4f:39:71:62:22:af:1d:5c:46:98:c7:7e:fb:f2:54:
         db:92:54:7f:92:bf:25:ce:b9:58:17:4f:fc:8f:ac:fe:1c:14:
         2e:c1:5c:12:1d:70:1b:9d:af:12:fe:e7:d8:b9:85:ee:c3:59:
         93:f6:91:16:67:44:9b:7b:36:f6:24:43:6e:ea:0e:18:00:f7:
         20:31:ee:4c:04:71:d6:17:9b:de:25:5d:c4:e1:08:a1:50:80:
         4a:5a:f1:d8:0c:6c:f7:84:97:97:62:12:c2:a6:4d:70:27:ff:
         84:bd:b3:23:79:63:78:f4:a5:91:ae:b2:36:52:37:a6:3b:9b:
         26:08:f5:45:7a:de:49:02:75:2c:10:82:e9:9f:93:94:c6:7d:
         01:2a:38:15:59:8c:07:32:5d:5a:66:bc:fe:87:1a:c1:9c:db:
         6b:29:d0:ba:7d:dd:4f:1b:61:a5:c5:94:20:63:ca:c3:fa:65:
         95:46:f1:1b:c6:90:8b:c1:4a:9f:ab:e7:03:d7:d2:c8:05:bb:
         8d:32:1e:3e:f6:78:4f:67:bf:58:46:25:1e:a1:e0:a0:06:e3:
         99:55:79:83:1f:9c:73:75:cc:5e:02:2e:44:16:f6:95:b0:49:
         7b:d3:43:56:50:cb:06:ec:5a:54:45:cb:7a:bb:1c:28:19:fa:
         5d:0e:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:32:44 2026 by rpki-client