Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS54004.roa
File:                     AS54004.roa (raw, json)
Hash identifier:          Kzt4iRsIQBquB7Rmq0MrizA87b0uNnSbvXWzUBEAg5U=
Subject key identifier:   94:10:C1:89:17:D3:C9:D0:5F:4F:F0:77:C9:1B:BD:D1:F8:63:46:72
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       6B70B6ABF80346A508D0BF026F9EAA0B23FD64CD
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS54004.roa
Signing time:             Tue 12 May 2026 16:22:23 +0000
ROA not before:           Tue 12 May 2026 16:17:23 +0000
ROA not after:            Tue 11 May 2027 16:22:23 +0000
asID:                     54004
IP address blocks:        13.141.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:b6:ab:f8:03:46:a5:08:d0:bf:02:6f:9e:aa:0b:23:fd:64:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: May 12 16:17:23 2026 GMT
            Not After : May 11 16:22:23 2027 GMT
        Subject: CN=9410C18917D3C9D05F4FF077C91BBDD1F8634672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:a4:58:c0:f6:8e:3d:93:86:ab:ac:86:83:
                    87:e2:ea:28:0d:55:ab:d1:6f:2f:25:74:e3:5c:51:
                    5a:ba:ad:b7:34:d9:ea:44:ae:83:99:e7:6f:75:c0:
                    fb:c6:ca:f1:3d:c7:ad:35:17:31:27:27:5d:be:be:
                    ad:eb:d8:d9:ed:15:fa:0b:a7:41:97:32:3d:2e:a8:
                    5e:ff:6a:19:66:1d:b5:84:43:4e:ff:15:86:08:20:
                    01:0b:06:a8:0c:5b:91:f3:46:b7:08:1f:c3:6d:60:
                    de:1b:b3:aa:a8:2b:9d:db:64:7a:d1:6b:67:1d:ce:
                    d4:05:ad:25:17:09:d8:44:cc:41:b9:0a:d3:3b:1a:
                    4b:82:9c:b8:c8:d4:be:65:48:17:14:7a:e7:a3:4a:
                    27:73:53:19:c2:06:78:75:30:68:cc:d3:b8:87:cf:
                    45:5f:f1:93:2b:57:18:6a:f4:d0:66:f5:ca:01:3f:
                    ff:92:d0:f4:e2:09:dc:af:2b:9f:b8:75:da:a3:d0:
                    52:45:77:21:82:e5:e3:fe:17:5c:48:ca:3c:da:52:
                    5b:30:ca:a0:7f:da:0e:ee:53:13:af:39:62:a6:83:
                    96:1c:3c:ce:0e:08:10:b1:e9:7b:d9:93:53:f1:ae:
                    eb:89:a5:63:50:1b:52:d6:d8:93:e2:bb:e8:19:fd:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:10:C1:89:17:D3:C9:D0:5F:4F:F0:77:C9:1B:BD:D1:F8:63:46:72
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS54004.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b6:2a:1e:48:7d:b0:ba:f8:4b:ff:89:f6:9d:45:bf:fd:48:e6:
         0b:4b:8c:cd:a2:b1:40:95:b6:d2:22:aa:52:d7:c0:70:ce:97:
         8b:28:c1:c4:2c:b1:90:06:2a:cf:dc:b4:d8:09:cc:c7:3c:c9:
         71:e8:78:93:a8:6a:29:5a:0e:82:6f:0e:c2:54:bb:4c:5e:cb:
         78:1d:73:f2:7e:a2:5f:e2:f6:1d:72:24:bf:e0:52:ec:c9:a5:
         9d:61:3b:ad:f7:51:2f:c4:e4:5e:01:77:b0:e9:1f:73:11:4d:
         98:73:c8:0c:8d:95:a8:3b:72:42:6b:a1:0b:e0:6d:87:a7:17:
         ef:e9:88:1a:ac:92:96:8f:9a:05:bc:e7:60:c8:96:aa:40:bc:
         fe:f4:c8:3c:22:b6:3a:91:a9:2a:9a:52:9c:48:e2:8c:44:fb:
         bb:ae:26:8b:53:62:f7:9a:f8:10:09:66:af:13:95:eb:b8:f1:
         05:83:70:20:5d:0e:45:98:63:af:1e:6b:4c:85:e0:a9:a0:33:
         16:69:3b:aa:ef:fb:c2:64:54:c5:24:91:b8:1c:ce:5e:a7:fe:
         51:47:47:3f:78:07:d1:46:ed:76:17:fe:b1:66:73:17:29:2e:
         51:67:d8:8b:18:a9:1b:d6:d6:c6:1d:27:25:6b:2d:d9:6a:43:
         07:20:6c:af
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUa3C2q/gDRqUI0L8Cb56qCyP9ZM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjA1MTIxNjE3MjNaFw0yNzA1MTExNjIyMjNaMDMxMTAvBgNV
BAMTKDk0MTBDMTg5MTdEM0M5RDA1RjRGRjA3N0M5MUJCREQxRjg2MzQ2NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKKRYwPaOPZOGq6yGg4fi6igN
VavRby8ldONcUVq6rbc02epEroOZ5291wPvGyvE9x601FzEnJ12+vq3r2NntFfoL
p0GXMj0uqF7/ahlmHbWEQ07/FYYIIAELBqgMW5HzRrcIH8NtYN4bs6qoK53bZHrR
a2cdztQFrSUXCdhEzEG5CtM7GkuCnLjI1L5lSBcUeuejSidzUxnCBnh1MGjM07iH
z0Vf8ZMrVxhq9NBm9coBP/+S0PTiCdyvK5+4ddqj0FJFdyGC5eP+F1xIyjzaUlsw
yqB/2g7uUxOvOWKmg5YcPM4OCBCx6XvZk1PxruuJpWNQG1LW2JPiu+gZ/ZipAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUlBDBiRfTydBfT/B3yRu90fhjRnIwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzU0MDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHDY2AMA0GCSqGSIb3DQEB
CwUAA4IBAQC2Kh5IfbC6+Ev/ifadRb/9SOYLS4zNorFAlbbSIqpS18BwzpeLKMHE
LLGQBirP3LTYCczHPMlx6HiTqGopWg6Cbw7CVLtMXst4HXPyfqJf4vYdciS/4FLs
yaWdYTut91EvxOReAXew6R9zEU2Yc8gMjZWoO3JCa6EL4G2Hpxfv6YgarJKWj5oF
vOdgyJaqQLz+9Mg8IrY6kakqmlKcSOKMRPu7riaLU2L3mvgQCWavE5XruPEFg3Ag
XQ5FmGOvHmtMheCpoDMWaTuq7/vCZFTFJJG4HM5ep/5RR0c/eAfRRu12F/6xZnMX
KS5RZ9iLGKkb1tbGHSclay3ZakMHIGyv
-----END CERTIFICATE-----
Generated at Wed May 13 00:51:29 2026 by rpki-client