Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402265.roa
File:                     AS402265.roa (raw, json)
Hash identifier:          Ckyme63+vDQW+MEuPPWOK1NMOWcrpmIIBs/OEWw/ycw=
Subject key identifier:   F6:1B:FB:0E:FE:56:FF:3A:9E:52:30:C3:11:AF:62:9F:0A:D6:FC:DB
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       761B602E237E9524B9339F0E6C842DCD1D46068D
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402265.roa
Signing time:             Mon 21 Sep 2026 06:46:04 +0000
ROA not before:           Mon 21 Sep 2026 06:41:04 +0000
ROA not after:            Mon 20 Sep 2027 06:46:04 +0000
asID:                     402265
IP address blocks:        13.141.33.0/24 maxlen: 24
                          169.40.37.0/24 maxlen: 24
                          169.40.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1b:60:2e:23:7e:95:24:b9:33:9f:0e:6c:84:2d:cd:1d:46:06:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 06:41:04 2026 GMT
            Not After : Sep 20 06:46:04 2027 GMT
        Subject: CN=F61BFB0EFE56FF3A9E5230C311AF629F0AD6FCDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:49:87:20:8e:cc:28:58:a3:08:19:9e:0e:72:
                    66:f3:fc:84:35:61:22:0d:7d:dc:f3:c4:b7:c1:b1:
                    13:fd:a1:e9:b5:78:fd:6d:e6:24:e9:e4:2b:99:f2:
                    30:f2:f4:a0:20:5f:76:bd:f6:4d:d2:7c:d5:dd:58:
                    6d:6d:81:fc:7e:fa:8e:5a:bb:33:92:2c:9a:11:8d:
                    6b:81:d0:90:fe:27:12:8e:c5:15:07:c0:45:76:20:
                    9c:f1:cd:6b:c6:df:79:bf:ff:77:14:cf:e2:1a:ca:
                    b0:3b:49:6a:98:d8:2f:3b:58:3a:d8:06:19:70:c0:
                    13:68:b9:23:90:fe:48:bc:d4:85:1b:91:71:07:8f:
                    10:de:7b:74:e2:b9:df:22:fb:f2:70:66:0e:73:00:
                    6d:a7:a5:7a:9b:df:2c:85:62:07:58:86:36:d8:d5:
                    77:cf:14:6f:cb:6b:f4:2a:fd:3f:42:27:ae:ad:5a:
                    9c:31:b2:bd:bb:39:71:8e:ff:d9:67:fb:00:8d:47:
                    5e:e6:26:5e:52:bb:fe:60:d0:f8:db:28:f6:f1:28:
                    80:b5:d3:42:ea:27:81:87:ac:67:d7:3e:b7:7e:44:
                    81:d4:5e:77:da:67:5a:31:4f:ff:c2:0c:a9:06:50:
                    18:5e:6c:54:68:50:c0:ca:25:ba:d2:75:f5:a9:3f:
                    c9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:FB:0E:FE:56:FF:3A:9E:52:30:C3:11:AF:62:9F:0A:D6:FC:DB
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402265.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.33.0/24
                  169.40.37.0/24
                  169.40.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:81:2e:aa:a1:76:04:65:6a:ab:69:27:0e:a1:d0:1d:5e:4a:
         a8:c8:1b:17:c2:14:e4:f0:81:82:d8:3c:1e:f2:2d:a7:0b:68:
         e9:ee:c0:34:90:1e:98:5b:f9:68:eb:a4:dc:a6:2b:4c:c0:71:
         59:46:14:48:80:1c:86:f9:cd:93:6e:4c:8c:95:32:58:fc:b0:
         76:f4:6a:73:73:1e:9f:83:47:d3:f8:17:cc:7d:38:3b:b1:02:
         78:87:6e:71:7d:ae:6a:17:6d:91:e4:f9:9c:60:07:67:3b:e9:
         60:7d:50:33:ea:69:66:36:07:22:c0:4e:67:86:46:36:db:0e:
         dc:8e:d0:af:52:56:03:0a:b8:de:d4:c0:b1:81:b7:59:0e:cf:
         8a:a5:c7:1f:15:64:35:5a:22:06:4b:16:c9:c3:dd:15:00:f5:
         68:dd:92:0e:c1:ea:f9:b1:47:0c:f0:e1:1c:53:0e:7e:a9:07:
         28:35:b0:8a:fb:54:a0:ec:1d:c1:67:3f:f1:b3:66:ce:e1:0d:
         f2:12:23:ea:9b:09:b2:7a:0c:4a:f1:fa:73:ba:b2:30:89:99:
         7b:c9:41:f1:e8:2a:fd:8a:64:2d:5a:9c:48:91:fe:6d:92:44:
         d4:e9:86:54:39:f5:28:ec:25:a0:a1:f5:b3:a9:6d:7f:2c:39:
         09:32:b9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:17:25 2026 by rpki-client