Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          jViI8uSRXFBmtUnJPySQuhfx4RY798FsXL9efcWCL9E=
Subject key identifier:   C5:DD:9E:77:4E:FF:8A:43:E7:A9:BF:F7:C5:E3:30:00:13:45:F9:A2
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       4876982A892F8C79DA5D96E5E0584ADD72E1224C
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa
Signing time:             Mon 06 Jul 2026 00:03:05 +0000
ROA not before:           Sun 05 Jul 2026 23:58:05 +0000
ROA not after:            Mon 05 Jul 2027 00:03:05 +0000
asID:                     56655
IP address blocks:        13.141.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:76:98:2a:89:2f:8c:79:da:5d:96:e5:e0:58:4a:dd:72:e1:22:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Jul  5 23:58:05 2026 GMT
            Not After : Jul  5 00:03:05 2027 GMT
        Subject: CN=C5DD9E774EFF8A43E7A9BFF7C5E330001345F9A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:46:09:1e:c0:6c:95:b5:8c:75:7a:53:73:
                    08:e5:fb:57:83:da:df:79:cd:21:f5:23:eb:03:16:
                    26:eb:2f:91:58:4b:ff:bd:79:53:1e:65:b5:0d:ad:
                    b0:2a:55:82:50:ab:ae:76:4a:7c:53:12:67:72:77:
                    84:21:33:85:69:56:d7:a2:14:0f:36:b8:d1:c1:1a:
                    58:6c:cb:0f:48:33:d1:54:b4:ba:d1:65:3f:97:61:
                    dd:ce:f9:43:9b:ee:dc:71:f2:04:b1:fc:47:1d:3b:
                    bb:43:65:c0:75:94:e1:86:d4:7f:23:e2:2c:bc:5d:
                    87:26:87:81:fe:63:e0:20:7c:a8:43:65:af:11:48:
                    1c:02:86:4e:52:82:30:33:7b:cb:cd:a8:08:35:93:
                    25:c8:ae:cf:01:cd:4a:28:b2:cd:f7:bc:dd:76:5e:
                    3c:98:11:9b:6b:ea:7d:a8:22:25:fd:a0:b0:d6:6d:
                    a8:ff:35:8c:8f:6c:99:00:35:43:a7:3e:d0:da:32:
                    20:fd:f8:26:b7:c3:ad:54:ee:94:57:20:62:09:db:
                    b7:51:c4:58:94:d4:7a:f8:e3:16:3c:c0:e0:6e:d6:
                    40:d0:77:b8:05:f9:b3:2d:45:ed:e9:14:27:81:dd:
                    78:96:33:9c:10:aa:ca:11:02:6e:77:ea:55:4e:b2:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DD:9E:77:4E:FF:8A:43:E7:A9:BF:F7:C5:E3:30:00:13:45:F9:A2
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:05:09:69:c8:b5:e3:4f:45:44:06:f8:7d:b8:08:16:44:c9:
         34:ab:3e:40:f4:85:51:30:d3:60:d7:c2:52:2f:d1:5c:8d:c0:
         98:00:a3:d0:c0:db:7c:47:0f:60:8e:1d:70:f4:07:4f:b2:74:
         b9:1e:6d:fe:22:76:72:aa:be:9b:88:42:f2:d3:34:1c:cd:d6:
         64:5f:e6:b5:bd:63:aa:be:1d:8e:f6:00:3d:5e:09:c0:0b:0f:
         ae:f4:71:de:53:4d:50:12:38:b2:ca:49:cd:9a:30:80:cc:1e:
         72:d1:75:fa:56:9e:63:06:01:8d:1f:ed:e1:4a:dd:46:52:28:
         80:3e:54:84:2c:c7:69:88:84:4a:7d:f5:d1:c0:df:d0:aa:88:
         5f:4e:4d:d6:01:d5:4b:6c:aa:d0:f9:e5:d1:94:35:e6:c1:52:
         97:55:de:e2:93:1a:f6:fa:7a:39:8d:1d:2a:07:27:7c:f1:fb:
         4e:cc:a4:38:a7:ca:40:93:17:a7:4e:a1:8a:ea:13:fa:0d:25:
         2d:e7:7e:37:b6:42:9d:91:bd:de:7c:cc:7b:dc:46:76:1b:82:
         38:fc:d1:df:b8:d1:8b:e0:62:5a:ed:e8:ea:c5:bf:c5:ca:43:
         ed:82:c9:9a:83:33:2b:b3:e1:9c:4a:e1:d1:6a:9c:e6:e3:05:
         ed:a2:f2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:36:57 2026 by rpki-client