Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          D4FrruJpFnpu1YQ5QP7VyGqMnfQjTPM260vofGb9QIQ=
Subject key identifier:   63:91:E3:0B:9A:B6:32:F6:23:1A:FC:BA:8F:BF:7D:80:AF:BC:DC:8C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       3BCAED18EE18C5D255FD3E51D8A246CADF19A656
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa
Signing time:             Thu 12 Mar 2026 15:11:01 +0000
ROA not before:           Thu 12 Mar 2026 15:06:01 +0000
ROA not after:            Thu 11 Mar 2027 15:11:01 +0000
asID:                     56655
IP address blocks:        169.40.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ca:ed:18:ee:18:c5:d2:55:fd:3e:51:d8:a2:46:ca:df:19:a6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:01 2026 GMT
            Not After : Mar 11 15:11:01 2027 GMT
        Subject: CN=6391E30B9AB632F6231AFCBA8FBF7D80AFBCDC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f7:5c:53:7f:b0:27:4c:b9:dc:e3:2f:e1:9b:
                    63:49:a2:71:07:d0:ed:c8:74:da:66:0f:38:77:ff:
                    14:b3:85:4e:de:37:be:e6:53:e5:06:91:88:ea:87:
                    93:47:51:6c:86:67:e5:e3:75:00:9b:d7:1e:1c:3b:
                    f8:f0:9e:c6:02:f2:0d:6e:45:44:ef:77:50:4e:47:
                    09:5f:78:38:af:99:49:6e:25:8c:3b:59:c1:3b:ae:
                    31:48:0b:67:d7:9e:4b:dd:47:6c:e9:df:ce:3b:0a:
                    44:79:55:00:70:12:96:79:7b:dd:57:c0:f4:27:27:
                    8a:87:0f:df:17:c3:03:e6:86:ce:50:27:62:0b:64:
                    e5:f2:09:5b:29:21:9f:37:86:83:0f:04:6f:42:fb:
                    d3:42:a0:23:57:6c:04:19:a2:d3:47:9b:a9:8e:5b:
                    fe:c8:da:97:1b:ea:c7:cc:67:18:ff:45:1c:ea:9f:
                    ca:36:a0:43:85:cd:78:9e:92:0b:4d:d2:96:50:10:
                    ff:19:0f:d1:58:d6:56:b7:15:87:1c:df:fe:24:bd:
                    db:69:c9:51:ee:d4:96:80:50:9d:c8:a7:87:ee:7c:
                    0c:2e:77:f9:90:a4:88:4e:3d:9e:c5:5b:05:15:38:
                    f3:cb:a6:20:ba:8c:63:a1:77:5f:1a:86:95:6f:ed:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:E3:0B:9A:B6:32:F6:23:1A:FC:BA:8F:BF:7D:80:AF:BC:DC:8C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:94:c4:97:aa:f1:98:70:5a:ad:f3:59:18:b1:2c:0d:69:
         23:73:29:20:a3:b5:15:9a:15:10:04:30:5b:44:8d:90:2f:86:
         61:05:f0:df:a3:0e:04:5e:dd:33:3a:ef:17:51:a2:53:1a:5f:
         20:67:6b:00:4f:b1:6c:92:72:36:5a:d0:93:cc:0d:47:66:60:
         6e:13:a1:d9:b4:24:2f:09:3a:5f:6e:ab:28:54:cf:50:2b:dd:
         eb:15:a1:72:45:df:3e:20:9f:1a:82:0d:c5:b7:8d:62:05:58:
         1e:00:a7:19:2f:39:fe:03:84:02:e9:3b:86:9e:55:1e:8f:1d:
         45:b5:9f:97:80:a9:bf:c9:6a:66:2c:aa:be:28:36:d6:ea:1e:
         8a:10:2c:dc:05:e8:2a:47:ed:6e:85:e5:66:77:51:5e:fa:b0:
         41:68:40:63:3f:c6:cd:94:12:22:05:de:99:ed:20:cb:70:3c:
         d5:5f:40:b5:69:17:06:e7:14:f5:78:35:21:84:f3:1e:06:70:
         94:5a:8a:e3:0e:65:c4:fe:24:8f:5a:b5:bf:cb:f2:da:57:05:
         ea:57:5c:76:33:9b:cf:f5:98:33:d3:fc:d5:0d:7f:a5:7c:3e:
         cd:0e:f2:30:8f:ee:fb:11:ca:15:17:40:3c:2e:1d:84:19:23:
         b1:3e:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:10:15 2026 by rpki-client