Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS60982.roa
File:                     AS60982.roa (raw, json)
Hash identifier:          aKyGWFv6SL8N2M5wqAfpyG/ntqS1jHKegDk74RWtqY0=
Subject key identifier:   44:1C:19:D2:8F:FC:D1:E2:7A:45:C9:35:E0:B3:29:FE:A1:18:94:B7
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       2B63A0C2EF4E6BF9835978E25FCC22FD57810745
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS60982.roa
Signing time:             Mon 21 Sep 2026 12:47:47 +0000
ROA not before:           Mon 21 Sep 2026 12:42:47 +0000
ROA not after:            Mon 20 Sep 2027 12:47:47 +0000
asID:                     60982
IP address blocks:        169.40.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:63:a0:c2:ef:4e:6b:f9:83:59:78:e2:5f:cc:22:fd:57:81:07:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 12:42:47 2026 GMT
            Not After : Sep 20 12:47:47 2027 GMT
        Subject: CN=441C19D28FFCD1E27A45C935E0B329FEA11894B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:64:7f:86:49:76:09:5b:6d:a4:8a:54:2c:
                    63:b2:93:52:9a:05:1e:93:af:81:ea:d1:a0:b9:cc:
                    c2:fb:d1:5d:dc:46:29:de:b0:73:56:ea:f8:9f:f7:
                    36:a4:45:93:cc:3e:3e:1f:ce:4d:75:92:c4:2f:a6:
                    93:70:51:0d:12:74:ac:1a:34:44:66:b6:a2:40:30:
                    e0:b1:f5:df:60:bc:58:fa:5d:0c:88:16:c9:40:9b:
                    f5:73:aa:a1:10:a5:c1:7a:52:9f:5e:ec:bd:63:43:
                    05:42:91:e5:97:83:1b:40:ed:2a:83:ca:14:68:3e:
                    30:dd:e5:6e:4c:5d:6d:f4:b8:be:65:ad:f2:d0:83:
                    c0:49:38:13:96:62:1d:6e:3e:77:35:18:ba:0e:b0:
                    06:77:21:ec:4b:2c:8e:be:fe:87:71:e8:56:61:a9:
                    85:b5:25:60:56:da:46:fe:81:8f:69:d0:bc:4f:f6:
                    27:b0:4f:37:4b:65:51:c9:fc:68:f1:b0:c1:37:11:
                    95:07:8d:5c:30:c0:2e:31:a6:4e:29:3c:0b:f3:3d:
                    c2:45:7b:e2:27:d4:d6:d3:01:cb:f0:91:62:54:dd:
                    6e:d3:c3:af:2e:94:5d:db:f9:e1:4c:72:1f:60:7f:
                    9d:e7:30:1b:7e:f0:2b:14:a8:8e:ca:97:1e:bd:ae:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:19:D2:8F:FC:D1:E2:7A:45:C9:35:E0:B3:29:FE:A1:18:94:B7
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS60982.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:a9:ac:2b:e5:99:75:96:ae:f9:a7:83:57:39:85:08:80:
         ae:0d:cf:f1:a1:fd:f4:9a:46:17:1d:04:86:a7:ac:a5:84:a7:
         f4:bd:ba:ab:95:bf:04:9d:07:d0:6e:ac:b7:d0:b8:0e:78:60:
         78:9a:70:1d:2a:30:8a:d5:07:85:3e:13:96:77:96:bb:d7:a4:
         fd:82:f2:a7:49:b9:4a:8c:63:cf:47:14:4f:ad:39:3d:6c:85:
         a0:02:a0:6f:27:ea:5b:c9:a2:58:d8:32:a4:ba:ca:91:31:a7:
         ed:cc:03:e0:7e:d2:07:0b:ab:8e:3c:50:81:a2:ac:26:30:d8:
         ed:3f:27:1f:3c:ef:ad:ae:f8:d7:e0:47:a1:bd:96:c6:24:44:
         72:bc:71:9e:5f:13:55:b7:93:e8:0c:35:52:b4:3e:96:2a:d0:
         f0:b4:38:95:1a:41:79:4a:f5:77:52:e8:ba:95:30:40:c1:9f:
         a3:b8:a6:7f:3c:3d:86:19:6e:11:1b:a2:2e:a3:af:c1:35:3b:
         ae:72:4d:4a:ac:db:ce:19:53:27:57:62:7e:65:90:7e:84:4f:
         6d:97:3a:08:02:05:ab:c6:e3:22:79:bb:a6:8a:58:e3:2a:12:
         30:d0:31:2a:b7:1c:fa:d4:5f:73:6c:b6:d1:08:4f:16:10:ff:
         6a:9e:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:13:35 2026 by rpki-client