Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400951.roa
File:                     AS400951.roa (raw, json)
Hash identifier:          AxcOaF4jWLNpun2VncHnnNHp8k77MYlMVcMj+EgwKPA=
Subject key identifier:   24:F6:6B:4F:D8:4F:39:DE:7D:C8:F6:5B:83:43:E7:B2:63:06:2D:4A
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       0E85FC06708773F982E4C525BD595F609779D446
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400951.roa
Signing time:             Mon 21 Sep 2026 04:04:34 +0000
ROA not before:           Mon 21 Sep 2026 03:59:34 +0000
ROA not after:            Mon 20 Sep 2027 04:04:34 +0000
asID:                     400951
IP address blocks:        169.40.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:85:fc:06:70:87:73:f9:82:e4:c5:25:bd:59:5f:60:97:79:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 03:59:34 2026 GMT
            Not After : Sep 20 04:04:34 2027 GMT
        Subject: CN=24F66B4FD84F39DE7DC8F65B8343E7B263062D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:4e:fb:71:59:c8:f8:2f:ec:e7:bd:7f:5d:
                    db:34:ea:7f:76:bc:11:d1:ce:6a:d5:29:05:da:3f:
                    a1:b4:6b:19:e6:54:0e:f2:6f:3b:ce:ad:33:7b:5d:
                    69:04:86:d5:12:23:3b:5a:e9:96:9f:6a:f0:94:8d:
                    30:45:db:46:ea:35:ce:a5:dd:76:b2:ca:ae:b7:77:
                    4d:7a:fe:4c:1a:94:0c:80:3e:19:f5:a9:e9:8b:7d:
                    0b:1e:23:47:87:06:06:03:47:27:5f:b5:1c:dd:ea:
                    bb:e4:47:84:76:7b:be:30:63:f8:6e:dd:e7:36:30:
                    1d:6c:2e:28:95:2d:52:82:0a:60:3d:6c:d1:4c:a8:
                    d6:26:b9:9e:71:52:a7:ef:b2:c6:99:3d:19:e0:80:
                    e8:27:61:07:e5:09:6b:c8:7f:5a:23:2c:69:58:76:
                    ad:b8:4f:10:45:36:c4:8a:83:39:a2:cb:f6:81:7b:
                    97:99:4a:ee:44:db:50:0a:28:b3:0f:d9:d1:db:05:
                    8f:2b:1c:99:11:ed:03:09:90:b8:00:77:dc:a3:d8:
                    26:ad:6b:9d:36:c6:a8:5b:88:92:2b:d8:fa:b9:f7:
                    66:93:6c:00:46:25:4f:9f:db:dd:19:3c:40:da:69:
                    f3:fc:ba:63:78:89:f1:0a:94:8d:4e:36:57:ab:14:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F6:6B:4F:D8:4F:39:DE:7D:C8:F6:5B:83:43:E7:B2:63:06:2D:4A
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS400951.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:87:f1:cf:cb:1d:3c:63:06:95:7a:6e:7a:e3:8d:34:1f:
         ef:0e:84:42:79:8e:11:95:31:d6:97:7c:93:61:2e:63:79:5a:
         2f:d4:a3:9b:9d:9f:82:0d:08:73:83:71:3f:5b:f6:12:27:6e:
         1a:03:3a:be:ca:82:df:44:5f:58:89:38:9a:91:d9:50:cf:86:
         8e:ce:f0:50:43:e8:6b:89:ec:31:33:97:64:a3:d3:1a:e2:4c:
         b6:e7:44:b7:42:50:09:ea:01:9f:17:50:5b:4f:79:fe:19:a8:
         4f:2d:4f:d3:96:02:49:66:c2:99:c1:43:a2:4b:ce:50:4a:0b:
         e9:70:9d:6d:30:e6:d4:72:e0:bf:68:38:be:b6:94:b7:3e:65:
         97:b2:9d:7a:51:76:ef:57:a0:9f:c6:63:2e:f7:2d:41:ea:5b:
         48:90:1d:35:af:ce:12:f1:d3:c8:47:a9:b8:3e:6a:ad:01:33:
         08:0d:8a:66:42:d5:f0:41:36:9c:07:85:ac:fd:74:3d:99:16:
         e9:f2:1e:15:98:76:bb:fd:6b:54:53:3a:56:00:6b:9f:25:7d:
         ee:ea:b5:7e:89:2e:e8:d3:36:a9:90:03:7f:59:29:2c:89:11:
         79:83:74:55:8f:c8:09:01:24:e4:14:fb:38:71:e1:90:d3:6f:
         2c:44:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:17:24 2026 by rpki-client