Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
File:                     AS49453.roa (raw, json)
Hash identifier:          8bGp038kNZlmKpiB3rps/ijP6amf2tkJ2PzjY774YHM=
Subject key identifier:   6E:2E:74:FF:D5:59:F1:A0:A1:77:48:1F:59:13:08:95:39:A2:DF:BB
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4749B6A561BDF8394615A1FFAAD3F227290AC61E
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa
Signing time:             Mon 20 Apr 2026 18:42:35 +0000
ROA not before:           Mon 20 Apr 2026 18:37:35 +0000
ROA not after:            Mon 19 Apr 2027 18:42:35 +0000
asID:                     49453
IP address blocks:        13.141.36.0/22 maxlen: 22
                          13.141.52.0/22 maxlen: 22
                          13.141.120.0/22 maxlen: 22
                          13.141.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:49:b6:a5:61:bd:f8:39:46:15:a1:ff:aa:d3:f2:27:29:0a:c6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Apr 20 18:37:35 2026 GMT
            Not After : Apr 19 18:42:35 2027 GMT
        Subject: CN=6E2E74FFD559F1A0A177481F5913089539A2DFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:42:72:75:f8:35:da:ef:7a:a7:c8:3f:e3:
                    38:ae:6f:42:51:f6:02:6a:6c:88:73:8c:a7:4d:83:
                    11:ab:41:7a:c9:85:40:b6:04:c3:c9:27:4a:74:74:
                    83:90:4a:5c:8c:16:12:55:d1:7a:6c:7c:db:61:ec:
                    f4:c8:1b:6d:09:13:f1:51:0c:0e:f2:06:45:8f:26:
                    2c:77:6e:0d:07:fd:ea:3e:e5:9a:b5:76:63:e1:6a:
                    cd:4e:4b:56:c2:fa:e1:b5:84:45:ee:95:56:96:c3:
                    d2:5d:e1:a5:b9:93:b5:65:e9:d4:98:7b:29:b6:af:
                    29:dd:15:62:31:22:c2:95:9d:d6:c6:8b:85:5e:82:
                    4c:1a:0b:54:f0:68:d8:dd:d1:ff:e5:0e:83:f1:62:
                    77:19:0c:6c:3c:02:34:4e:42:f4:1e:54:32:13:f0:
                    5f:9f:a7:2b:3d:6c:0a:57:b3:51:3e:e5:3c:14:5f:
                    cd:06:c7:e0:99:21:e5:de:8a:53:09:ab:9d:58:7f:
                    89:e8:0a:2d:ac:e1:38:93:93:2c:89:4b:1f:47:35:
                    2e:d0:a0:d5:86:c5:f5:e1:26:39:1e:e1:f4:02:5e:
                    3a:63:47:b9:b8:83:0b:3c:61:f1:4c:09:95:8f:6b:
                    69:96:34:11:17:98:9c:84:8b:c7:60:90:c9:70:0f:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2E:74:FF:D5:59:F1:A0:A1:77:48:1F:59:13:08:95:39:A2:DF:BB
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS49453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.36.0/22
                  13.141.52.0/22
                  13.141.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:38:f4:ec:81:91:72:24:f5:64:1e:25:8f:4e:8c:94:aa:
         10:7f:05:0d:72:4f:16:e8:76:4c:c1:6a:3c:e9:85:1c:17:bd:
         5c:f0:1c:0c:6d:f1:2d:13:d9:3c:e5:85:f1:63:bd:ae:cb:51:
         12:b1:73:d1:60:88:f5:75:47:d4:18:65:ea:2c:7e:b7:84:cf:
         a7:13:85:6b:7e:bb:0c:d1:46:f6:27:8d:9e:4f:3a:68:aa:26:
         f4:06:59:3c:4e:89:47:d4:56:e2:fb:b9:1f:af:88:bb:40:79:
         df:dc:61:b0:e2:5f:10:00:68:b9:24:ab:5f:d2:87:36:b0:c8:
         f1:49:ab:71:58:f8:9e:e7:41:c4:be:94:20:04:cc:87:48:c1:
         c8:9f:f8:7b:1e:4b:8f:ce:df:9c:85:eb:b2:9c:5f:ca:7a:ef:
         17:d2:db:c4:3c:dd:83:95:56:b5:52:c9:53:14:55:eb:12:cd:
         ba:b2:00:61:f4:e1:8d:73:e3:85:ae:57:7c:04:70:0d:fc:44:
         a7:f7:a1:28:38:fa:13:cf:57:f2:ec:e9:ed:10:30:0c:48:1c:
         38:e4:72:df:9b:9d:69:63:49:09:f8:b3:8c:c2:43:cc:e2:71:
         4f:e7:c0:d4:a3:e6:32:4d:5c:f9:a7:92:da:b8:a1:f2:3f:0f:
         8a:97:3a:1c
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUR0m2pWG9+DlGFaH/qtPyJykKxh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA0MjAxODM3MzVaFw0yNzA0MTkxODQyMzVaMDMxMTAvBgNV
BAMTKDZFMkU3NEZGRDU1OUYxQTBBMTc3NDgxRjU5MTMwODk1MzlBMkRGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQF0Jydfg12u96p8g/4ziub0JR
9gJqbIhzjKdNgxGrQXrJhUC2BMPJJ0p0dIOQSlyMFhJV0XpsfNth7PTIG20JE/FR
DA7yBkWPJix3bg0H/eo+5Zq1dmPhas1OS1bC+uG1hEXulVaWw9Jd4aW5k7Vl6dSY
eym2ryndFWIxIsKVndbGi4VegkwaC1TwaNjd0f/lDoPxYncZDGw8AjROQvQeVDIT
8F+fpys9bApXs1E+5TwUX80Gx+CZIeXeilMJq51Yf4noCi2s4TiTkyyJSx9HNS7Q
oNWGxfXhJjke4fQCXjpjR7m4gws8YfFMCZWPa2mWNBEXmJyEi8dgkMlwDy3VAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUbi50/9VZ8aChd0gfWRMIlTmi37swHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzQ5NDUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCDY0kAwQCDY00AwQDDY14
MA0GCSqGSIb3DQEBCwUAA4IBAQAKVDj07IGRciT1ZB4lj06MlKoQfwUNck8W6HZM
wWo86YUcF71c8BwMbfEtE9k85YXxY72uy1ESsXPRYIj1dUfUGGXqLH63hM+nE4Vr
frsM0Ub2J42eTzpoqib0Blk8TolH1Fbi+7kfr4i7QHnf3GGw4l8QAGi5JKtf0oc2
sMjxSatxWPie50HEvpQgBMyHSMHIn/h7HkuPzt+cheuynF/Keu8X0tvEPN2DlVa1
UslTFFXrEs26sgBh9OGNc+OFrld8BHAN/ESn96EoOPoTz1fy7OntEDAMSBw45HLf
m51pY0kJ+LOMwkPM4nFP58DUo+YyTVz5p5LauKHyPw+Klzoc
-----END CERTIFICATE-----
Generated at Wed May 13 00:38:47 2026 by rpki-client