Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          lLYzSe/Uu3Zl7BsJ4wdPJmdur8oYABeaXxbfOXY9MbE=
Subject key identifier:   28:6F:64:7A:58:DF:E6:C4:95:51:C9:3C:74:54:79:ED:70:94:D9:6C
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       5451E30D2882CFE53C4FB6CC2E65EDFD0D94CE22
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS61317.roa
Signing time:             Thu 12 Mar 2026 15:11:00 +0000
ROA not before:           Thu 12 Mar 2026 15:06:00 +0000
ROA not after:            Thu 11 Mar 2027 15:11:00 +0000
asID:                     61317
IP address blocks:        169.40.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:51:e3:0d:28:82:cf:e5:3c:4f:b6:cc:2e:65:ed:fd:0d:94:ce:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 12 15:06:00 2026 GMT
            Not After : Mar 11 15:11:00 2027 GMT
        Subject: CN=286F647A58DFE6C49551C93C745479ED7094D96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:05:c0:39:7c:97:62:86:7f:80:8f:e3:2d:
                    5d:d8:eb:fe:d5:09:6b:5b:f4:4b:5f:c4:61:1b:ae:
                    01:9a:b5:04:fe:c2:fe:f8:68:b6:a9:65:43:18:f3:
                    10:20:c4:63:c2:1e:7d:c7:81:ec:e0:db:cd:c6:05:
                    cd:96:77:3b:81:d5:0e:24:20:a5:46:40:7f:79:17:
                    2c:e8:05:bf:52:99:d5:75:d1:5a:1f:ea:b5:9b:96:
                    83:c5:14:4a:7d:2a:c4:56:90:73:42:98:b5:a3:23:
                    d4:31:a3:d8:56:c4:ba:8b:4d:af:6f:e2:7e:8e:50:
                    6b:ef:ac:33:64:9d:05:02:2e:9a:80:38:a1:78:12:
                    7d:ea:e5:be:2c:f3:fa:d1:de:5c:8b:c6:ad:be:19:
                    4d:e4:56:f8:27:3e:17:78:6d:eb:6a:17:fd:6a:41:
                    87:fe:b9:7e:c0:d7:39:50:09:45:36:ae:d3:c9:5e:
                    c9:f4:f9:24:f9:20:ce:d0:70:48:1f:52:a1:c8:77:
                    06:dd:f0:6b:ba:7a:19:dc:ee:d8:01:cd:25:4b:b4:
                    f5:3a:ac:06:e5:28:48:3e:27:07:0e:30:43:bd:9e:
                    44:a6:2f:59:86:3e:75:a5:d7:19:c7:63:f1:9d:05:
                    06:fd:71:a1:d3:41:4c:b4:05:7c:f0:2b:9e:bb:64:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:64:7A:58:DF:E6:C4:95:51:C9:3C:74:54:79:ED:70:94:D9:6C
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:69:4f:f3:9e:d9:49:e6:f2:22:48:1c:a4:23:19:47:d5:
         05:2a:02:53:d6:19:24:e0:99:12:a2:86:b9:69:7f:4e:96:d0:
         86:35:fe:54:c3:9f:08:b6:8c:58:a5:45:6d:90:b8:20:c5:d2:
         12:8b:ef:d8:bc:92:05:a0:ac:5a:ab:ba:28:60:2f:5a:68:40:
         df:0e:82:35:4e:8f:4c:da:a2:47:d5:ec:72:56:0b:38:d8:02:
         23:f1:e2:00:f9:fc:46:58:58:a7:37:15:c0:07:62:70:16:04:
         a3:4e:b1:59:05:15:eb:fa:31:48:34:88:fd:6e:df:f1:31:47:
         e5:43:0b:1c:d9:74:ea:4c:5c:f6:d2:0d:7d:e2:9b:ae:b2:be:
         ea:39:8e:9c:c7:14:26:82:0a:34:02:42:24:12:b1:5f:e2:29:
         79:f1:a4:39:b1:ef:ae:b6:3c:b2:fa:8b:16:04:79:e0:45:c6:
         f0:85:8b:4b:8a:41:4e:77:26:7d:eb:79:9f:6a:fc:1c:4a:e0:
         29:5d:21:61:19:3b:82:c8:e2:fe:81:74:ba:49:ac:a1:4f:43:
         dc:5e:48:a3:db:f4:73:98:02:94:a0:83:3c:b9:e6:96:eb:04:
         07:02:41:d5:2d:47:c6:69:e2:a8:97:7f:ec:e9:4e:f9:d4:a2:
         71:c7:8a:35
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUVFHjDSiCz+U8T7bMLmXt/Q2UziIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAzMTIxNTA2MDBaFw0yNzAzMTExNTExMDBaMDMxMTAvBgNV
BAMTKDI4NkY2NDdBNThERkU2QzQ5NTUxQzkzQzc0NTQ3OUVENzA5NEQ5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcgXAOXyXYoZ/gI/jLV3Y6/7V
CWtb9EtfxGEbrgGatQT+wv74aLapZUMY8xAgxGPCHn3Hgezg283GBc2WdzuB1Q4k
IKVGQH95FyzoBb9SmdV10Vof6rWbloPFFEp9KsRWkHNCmLWjI9Qxo9hWxLqLTa9v
4n6OUGvvrDNknQUCLpqAOKF4En3q5b4s8/rR3lyLxq2+GU3kVvgnPhd4betqF/1q
QYf+uX7A1zlQCUU2rtPJXsn0+ST5IM7QcEgfUqHIdwbd8Gu6ehnc7tgBzSVLtPU6
rAblKEg+JwcOMEO9nkSmL1mGPnWl1xnHY/GdBQb9caHTQUy0BXzwK567ZJbpAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUKG9keljf5sSVUck8dFR57XCU2WwwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzYxMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqSiOMA0GCSqGSIb3DQEB
CwUAA4IBAQBCwWlP857ZSebyIkgcpCMZR9UFKgJT1hkk4JkSooa5aX9OltCGNf5U
w58ItoxYpUVtkLggxdISi+/YvJIFoKxaq7ooYC9aaEDfDoI1To9M2qJH1exyVgs4
2AIj8eIA+fxGWFinNxXAB2JwFgSjTrFZBRXr+jFINIj9bt/xMUflQwsc2XTqTFz2
0g194puusr7qOY6cxxQmggo0AkIkErFf4il58aQ5se+utjyy+osWBHngRcbwhYtL
ikFOdyZ963mfavwcSuApXSFhGTuCyOL+gXS6SayhT0PcXkij2/RzmAKUoIM8ueaW
6wQHAkHVLUfGaeKol3/s6U751KJxx4o1
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:13:36 2026 by rpki-client