Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401776.roa
File:                     AS401776.roa (raw, json)
Hash identifier:          JTtFDdWnGXaMO4VJdhMcWx/mPeUJn/njVZa/sP7OGkA=
Subject key identifier:   EA:42:7C:86:AE:02:A6:D1:44:F8:22:B8:08:E3:2F:00:5D:E0:23:DD
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       72AE74BCD89766C7EADD738C05B4CFB6E179BDAA
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401776.roa
Signing time:             Thu 12 Mar 2026 15:11:00 +0000
ROA not before:           Thu 12 Mar 2026 15:06:00 +0000
ROA not after:            Thu 11 Mar 2027 15:11:00 +0000
asID:                     401776
IP address blocks:        169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ae:74:bc:d8:97:66:c7:ea:dd:73:8c:05:b4:cf:b6:e1:79:bd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:00 2026 GMT
            Not After : Mar 11 15:11:00 2027 GMT
        Subject: CN=EA427C86AE02A6D144F822B808E32F005DE023DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:56:33:23:b4:f6:04:eb:13:d3:26:6c:76:
                    30:3e:2d:a2:f3:40:a1:a1:0d:7e:59:20:9a:ab:ff:
                    56:b2:48:8d:e7:38:ba:04:f0:88:e1:df:97:19:9c:
                    c7:44:4c:b6:0a:a4:05:fc:ae:90:9e:50:6f:e9:fa:
                    7d:6c:65:18:31:5a:9f:e4:94:59:c8:d4:05:bc:f9:
                    4b:c9:de:bb:cd:d4:ec:40:90:b0:1d:b5:92:31:4a:
                    3a:f2:0b:14:9d:f8:7d:64:f1:85:b8:1d:2d:8a:9a:
                    ec:1c:22:36:80:19:69:1f:62:c0:0f:e4:cc:0c:40:
                    4d:d4:56:d1:96:cd:6a:8f:5b:94:02:84:ed:47:b2:
                    7f:83:42:33:73:16:b8:dd:fe:80:46:4d:3b:96:82:
                    bd:62:21:3f:3e:a4:d2:b3:bb:0f:c4:99:ba:be:20:
                    70:d2:cf:1a:4e:28:ad:46:9e:f8:44:b4:3b:92:2c:
                    3c:94:99:38:eb:7b:c0:ac:e8:8c:5e:0a:48:28:a0:
                    c8:b2:92:ee:08:58:31:cb:7c:6a:6e:07:e4:67:0d:
                    49:78:69:91:7e:09:37:8b:93:db:5b:73:36:ef:24:
                    47:c5:e7:6a:35:46:60:8e:f1:d9:61:30:ae:a8:48:
                    af:3c:25:72:7c:3e:26:32:af:44:db:5e:60:c9:66:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:7C:86:AE:02:A6:D1:44:F8:22:B8:08:E3:2F:00:5D:E0:23:DD
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS401776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:8d:c1:f1:6a:e1:e5:36:6d:46:a7:c9:56:3f:fb:74:33:eb:
         99:66:75:05:f2:c2:67:77:98:97:67:86:02:50:44:7d:4c:66:
         9b:a0:4e:02:7d:f2:da:61:44:06:9d:9c:f2:76:f3:e4:96:8d:
         fb:12:d3:28:73:3c:15:d9:0f:cd:00:25:1a:e6:d9:9e:79:c7:
         9b:50:71:88:6d:1a:76:d6:42:c7:ad:28:18:50:f6:47:fa:83:
         10:6c:ff:bc:96:15:d2:cb:0f:26:db:84:95:55:ae:2a:c2:63:
         27:fe:83:ff:bc:76:cb:16:48:d7:03:4b:e0:99:61:dc:1a:ee:
         0b:33:9d:6c:42:a6:0b:48:13:63:de:24:e6:09:94:17:42:b5:
         af:ea:e1:8a:7a:cd:93:db:da:5a:7c:f4:96:d3:eb:51:97:06:
         b1:08:68:87:98:cd:90:6a:42:db:d4:a4:ba:6f:20:30:1c:bc:
         ef:58:39:eb:b1:28:fd:1b:21:4e:42:13:a3:12:18:f3:ba:8c:
         97:5a:7f:74:cb:9e:b6:d9:c9:ec:4a:a0:72:d3:89:8d:b9:4a:
         be:76:9c:2f:c5:30:56:03:04:82:b0:94:9e:1e:ca:89:e5:07:
         4c:c1:23:f1:1c:4b:10:6d:e3:5c:64:4a:96:1b:8d:94:93:7a:
         62:49:a0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:10:44 2026 by rpki-client