Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402976.roa
File:                     AS402976.roa (raw, json)
Hash identifier:          agGcIiPlLV/wnQj5wc3T17IVN/LtkPm8CFgxPGYnrIg=
Subject key identifier:   4D:DB:A8:E3:BF:76:B9:EB:F4:AB:44:0A:E8:B1:89:52:59:32:71:CC
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       327A85A2A9539CC410231EAD3518EC43BC51D4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402976.roa
Signing time:             Mon 21 Sep 2026 02:40:15 +0000
ROA not before:           Mon 21 Sep 2026 02:35:15 +0000
ROA not after:            Mon 20 Sep 2027 02:40:15 +0000
asID:                     402976
IP address blocks:        13.141.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7a:85:a2:a9:53:9c:c4:10:23:1e:ad:35:18:ec:43:bc:51:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 02:35:15 2026 GMT
            Not After : Sep 20 02:40:15 2027 GMT
        Subject: CN=4DDBA8E3BF76B9EBF4AB440AE8B18952593271CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:9c:b3:9a:ee:8a:49:8e:58:dc:bb:c5:d8:
                    e2:01:0b:f4:9f:2a:63:c9:98:0c:4d:db:9f:2c:73:
                    0f:bc:5d:90:6d:48:d0:98:7e:99:7b:66:47:28:e2:
                    8f:90:99:33:5a:f7:13:09:05:27:a1:fd:8d:ad:31:
                    3a:8d:68:d9:be:69:d6:df:fc:84:44:b0:ac:4e:e1:
                    d9:02:ea:85:14:3f:e0:7e:81:0d:5b:9d:17:66:c6:
                    fa:2e:3e:ea:9f:35:e9:9a:c4:4b:26:56:ed:1b:30:
                    72:28:88:3d:40:e8:f5:b5:38:a5:d8:49:04:00:35:
                    47:6d:ae:14:a2:33:95:ac:4f:18:64:4c:38:65:89:
                    13:2f:0f:9a:21:7d:97:7d:5e:5a:b6:8d:3b:b9:9a:
                    2c:1b:e9:ed:0f:e2:0d:44:a3:c9:ba:62:20:ef:4c:
                    67:68:4c:83:68:d1:2c:59:d8:b0:29:35:4e:b1:56:
                    c6:81:b3:48:b2:f6:89:a2:ed:7b:8b:30:36:63:da:
                    82:a2:db:8f:6d:73:0d:76:c4:78:1b:5b:b1:0e:6e:
                    98:02:db:73:c4:9d:4f:00:ec:59:e3:8d:1f:6a:8f:
                    ee:5a:d0:d9:9a:05:f9:fa:57:45:d5:ef:b2:af:a8:
                    7e:20:65:21:2e:b5:61:9c:ff:60:7c:4f:8b:1c:8c:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DB:A8:E3:BF:76:B9:EB:F4:AB:44:0A:E8:B1:89:52:59:32:71:CC
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS402976.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:02:2a:b5:78:d2:6a:2b:c2:a1:5d:f9:e0:cc:a2:f9:89:
         f0:5a:e2:ce:d1:5c:ed:c1:b8:35:e5:34:86:77:d4:e7:4d:3b:
         40:07:a6:f7:ca:24:ef:32:7c:62:a3:5d:be:68:e9:6c:c9:5e:
         72:a7:3b:4a:0e:0c:f4:87:5d:89:05:93:25:d2:c4:ee:c5:cb:
         b2:e2:e4:4c:f3:91:6c:b6:95:7b:2a:83:6b:75:a2:13:e1:a7:
         72:41:24:17:9a:8c:68:63:53:50:a1:dc:e9:ee:dc:54:28:c1:
         c5:ac:e4:46:55:a0:99:19:27:24:c4:73:b0:46:4e:25:58:50:
         1e:a7:36:18:d0:61:17:01:c4:80:24:78:21:a4:ec:7b:5d:28:
         6f:2e:94:21:cb:f4:8b:e5:6c:a4:d6:19:06:78:00:9c:46:6d:
         96:28:82:69:52:e0:cf:31:19:b4:76:e2:fc:57:9f:9d:c0:13:
         26:58:98:7a:f4:66:09:d9:59:b7:2b:06:ed:51:82:57:26:7d:
         26:c4:df:bd:12:48:21:d6:1b:1f:2c:41:24:4f:b4:03:ac:23:
         b4:a7:c9:e0:c7:65:fb:8f:94:62:ab:3d:5e:59:1b:04:ec:cc:
         f5:27:8a:aa:3d:f4:92:22:94:85:8a:27:80:69:1f:e5:59:09:
         bf:39:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:31:46 2026 by rpki-client