Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          QAhyvAaGnj3E3I4sVznta3V1wr7ajPdK7tfgUnu3n/g=
Subject key identifier:   68:14:A5:C8:44:91:00:D3:12:0F:B5:A8:47:13:7E:ED:EB:89:45:79
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       14D56BBB23332E00FB1055D4F70F1DC2C50D1613
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS63199.roa
Signing time:             Fri 13 Mar 2026 07:14:50 +0000
ROA not before:           Fri 13 Mar 2026 07:09:50 +0000
ROA not after:            Fri 12 Mar 2027 07:14:50 +0000
asID:                     63199
IP address blocks:        169.40.35.0/24 maxlen: 24
                          169.40.39.0/24 maxlen: 24
                          169.40.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d5:6b:bb:23:33:2e:00:fb:10:55:d4:f7:0f:1d:c2:c5:0d:16:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Mar 13 07:09:50 2026 GMT
            Not After : Mar 12 07:14:50 2027 GMT
        Subject: CN=6814A5C8449100D3120FB5A847137EEDEB894579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:8d:8f:3b:20:77:8a:f0:63:14:66:1e:20:
                    cb:d9:84:b6:63:e2:66:c9:59:f5:5d:7d:dc:96:65:
                    92:3c:6c:c3:00:34:28:03:75:7c:eb:54:1d:c7:d1:
                    bb:53:21:54:19:2d:1a:1d:b9:28:84:8e:ef:a2:56:
                    e7:d6:28:09:16:71:d6:6a:97:0f:8c:fd:0c:1d:35:
                    80:9e:81:e5:50:d1:20:23:b1:27:cb:dc:78:fe:c4:
                    4f:d7:59:58:23:7a:8d:fc:c8:24:17:13:a1:45:b9:
                    b1:b0:5c:d9:c2:fe:2b:3e:cd:96:78:aa:6c:f6:bf:
                    0f:84:43:89:0a:1e:df:70:9f:f2:d8:ff:dc:23:7d:
                    3a:7b:dd:09:0c:6a:6a:d1:56:a2:cc:73:89:8a:47:
                    84:be:34:ca:a2:55:60:3e:e4:b9:15:41:17:71:8a:
                    b0:a8:6d:01:bd:22:d8:c7:62:42:9e:8e:4a:7e:9e:
                    fb:1b:a2:e6:43:d5:22:a0:8b:a4:05:30:42:8b:1f:
                    7a:eb:0a:6d:56:b6:0c:08:09:5a:40:f3:88:47:2d:
                    91:af:af:a3:21:d1:9e:cb:ba:2a:d0:41:70:a9:93:
                    1d:d9:82:b3:a8:81:59:57:36:23:65:56:d4:65:76:
                    bd:7b:fd:cd:1f:64:10:06:9e:bd:5e:0b:ad:d0:f3:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:14:A5:C8:44:91:00:D3:12:0F:B5:A8:47:13:7E:ED:EB:89:45:79
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.35.0/24
                  169.40.39.0/24
                  169.40.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:97:43:75:41:ce:6d:7b:4f:37:d0:8e:1d:3d:4c:74:3c:fc:
         e2:59:80:8e:09:b8:e6:ff:c9:9d:80:86:66:06:bc:81:6f:81:
         5d:b2:fd:87:c1:13:07:54:88:f5:a0:2b:89:df:7f:1b:08:eb:
         3a:f7:9e:bd:60:c0:b6:39:77:d6:ef:6c:ff:9b:e5:8f:91:52:
         9b:02:7f:dd:0f:62:7d:55:6a:b4:1f:1c:23:07:f1:1b:11:06:
         de:31:ba:6e:72:cc:d0:b7:fc:6d:21:17:30:bc:5f:51:3d:2a:
         c9:b8:1b:d0:f0:aa:ba:a2:12:07:7b:13:01:8b:15:1c:e2:27:
         71:13:a6:cf:2b:df:78:26:f4:42:b9:c8:12:f1:df:a5:0e:ca:
         fa:a3:61:b3:b9:1f:e1:47:1d:13:e3:3b:6c:80:7e:79:20:ed:
         03:a5:42:25:24:ae:10:d4:46:66:9c:e2:0c:82:01:a0:3f:2b:
         9f:18:e6:31:71:f3:e0:06:89:a5:22:e8:5f:f4:44:b1:0b:5c:
         f2:b8:9c:09:51:46:9a:8c:3d:2e:17:02:f4:e9:7e:17:d3:d9:
         ad:8e:fa:fc:5a:69:6a:87:4d:4b:a8:21:6c:3d:0d:d9:5d:2c:
         d3:c4:a7:87:93:2d:2f:c7:b2:67:c7:77:fb:60:8b:87:f7:d5:
         30:e3:71:8c
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUFNVruyMzLgD7EFXU9w8dwsUNFhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAzMTMwNzA5NTBaFw0yNzAzMTIwNzE0NTBaMDMxMTAvBgNV
BAMTKDY4MTRBNUM4NDQ5MTAwRDMxMjBGQjVBODQ3MTM3RUVERUI4OTQ1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDI2POyB3ivBjFGYeIMvZhLZj
4mbJWfVdfdyWZZI8bMMANCgDdXzrVB3H0btTIVQZLRoduSiEju+iVufWKAkWcdZq
lw+M/QwdNYCegeVQ0SAjsSfL3Hj+xE/XWVgjeo38yCQXE6FFubGwXNnC/is+zZZ4
qmz2vw+EQ4kKHt9wn/LY/9wjfTp73QkMamrRVqLMc4mKR4S+NMqiVWA+5LkVQRdx
irCobQG9ItjHYkKejkp+nvsbouZD1SKgi6QFMEKLH3rrCm1WtgwICVpA84hHLZGv
r6Mh0Z7LuirQQXCpkx3ZgrOogVlXNiNlVtRldr17/c0fZBAGnr1eC63Q8xHHAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUaBSlyESRANMSD7WoRxN+7euJRXkwHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h
Z2VsbGFuLmlweG8uY29tL3JlcG8vMzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5
ODA5NWRjOTI3LTAvMC9BUzYzMTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqSgjAwQAqSgnAwQAqSiW
MA0GCSqGSIb3DQEBCwUAA4IBAQA4l0N1Qc5te0830I4dPUx0PPziWYCOCbjm/8md
gIZmBryBb4Fdsv2HwRMHVIj1oCuJ338bCOs69569YMC2OXfW72z/m+WPkVKbAn/d
D2J9VWq0HxwjB/EbEQbeMbpucszQt/xtIRcwvF9RPSrJuBvQ8Kq6ohIHexMBixUc
4idxE6bPK994JvRCucgS8d+lDsr6o2GzuR/hRx0T4ztsgH55IO0DpUIlJK4Q1EZm
nOIMggGgPyufGOYxcfPgBomlIuhf9ESxC1zyuJwJUUaajD0uFwL06X4X09mtjvr8
Wmlqh01LqCFsPQ3ZXSzTxKeHky0vx7Jnx3f7YIuH99Uw43GM
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:52:37 2026 by rpki-client