Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS64160.roa
File:                     AS64160.roa (raw, json)
Hash identifier:          0OmwmWpBF/nU9b4PNkgAPWkMAgtZn36UMZZcy4hN4Mo=
Subject key identifier:   60:9D:FB:6F:62:DC:57:27:F4:E4:05:09:5D:9A:4C:56:6C:D6:59:49
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       012B4F03677434AFBE9A60C98C65925B91BBE16A
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS64160.roa
Signing time:             Mon 21 Sep 2026 18:44:01 +0000
ROA not before:           Mon 21 Sep 2026 18:39:01 +0000
ROA not after:            Mon 20 Sep 2027 18:44:01 +0000
asID:                     64160
IP address blocks:        13.141.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2b:4f:03:67:74:34:af:be:9a:60:c9:8c:65:92:5b:91:bb:e1:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 18:39:01 2026 GMT
            Not After : Sep 20 18:44:01 2027 GMT
        Subject: CN=609DFB6F62DC5727F4E405095D9A4C566CD65949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:61:91:23:7d:71:68:b7:f9:e6:1e:42:52:05:
                    e1:6c:52:7d:25:c5:fb:22:8a:81:c4:02:45:5b:6b:
                    88:c9:99:2f:a5:54:44:81:81:8c:d5:57:14:80:e6:
                    bb:ca:df:68:2a:b1:85:91:51:6e:53:24:27:bf:d3:
                    b9:12:ab:9b:5b:c1:86:2c:ae:b3:d0:63:ba:c6:8c:
                    7f:5d:c8:9e:6f:c4:45:56:cb:77:66:4d:a5:2c:05:
                    77:ef:b6:d7:c6:62:f9:6e:65:ff:ab:f7:5d:51:7b:
                    d8:50:76:b5:9c:17:18:f4:65:4e:35:3b:0c:11:e9:
                    dd:fd:f3:e7:57:d9:1d:c2:15:44:6d:50:50:34:84:
                    de:ee:a4:83:5b:21:26:1e:17:3b:bd:c8:39:70:a6:
                    db:4f:ac:9e:6b:b4:f3:3e:72:52:64:5c:66:41:18:
                    c9:fb:92:78:e0:73:4a:af:6a:1f:73:fd:0d:0c:c1:
                    8e:bb:d5:c9:6a:26:0a:84:95:88:ef:0d:d1:7a:e3:
                    b7:54:0d:0c:6e:9c:46:41:6f:fc:e2:f8:fd:25:f1:
                    4b:11:cf:e8:13:69:b0:3b:ee:3d:b4:58:73:3b:9e:
                    f5:94:39:63:81:dd:dd:18:d8:4e:b0:92:25:5f:cf:
                    20:a5:52:3a:f9:23:38:85:b3:b8:fe:db:cb:4c:a3:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9D:FB:6F:62:DC:57:27:F4:E4:05:09:5D:9A:4C:56:6C:D6:59:49
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS64160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.141.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:11:65:4d:e1:61:08:4d:fe:f0:06:15:85:fb:16:29:e2:15:
         5e:f4:0a:fd:bb:06:9c:19:5b:0c:44:10:59:c8:6e:f0:a0:78:
         01:c8:7c:5b:47:04:dd:7f:08:86:c1:92:f9:7d:d3:b6:4e:2e:
         42:99:c3:0a:ad:36:22:8d:8e:d7:1f:35:23:72:f8:94:ad:0b:
         e0:56:d0:f8:ec:aa:a0:82:ce:0e:34:33:33:06:58:f0:8c:1b:
         0b:06:1d:7d:b9:09:bd:e9:d1:60:6b:77:ea:0f:54:76:ea:22:
         58:48:21:3f:b5:bf:df:e0:d3:ee:e7:83:52:44:05:43:b5:a1:
         6a:6e:00:f4:ba:d3:20:04:85:4e:6a:28:46:ef:fb:db:15:21:
         01:5f:5b:f8:a6:60:c1:7e:d2:5d:61:51:bd:7d:33:d9:91:bd:
         ee:2a:99:76:13:2c:d9:a3:5f:eb:59:62:79:70:46:ad:53:56:
         ef:8b:19:22:f3:6d:4f:a4:3d:23:5c:62:2e:94:8a:6b:d2:31:
         a6:95:71:58:8a:be:85:27:30:a1:e8:f7:7c:4b:45:83:df:5b:
         91:c0:77:19:38:bf:ac:05:34:b3:24:75:1f:bf:7a:36:1a:62:
         d4:cd:a9:5e:6e:d9:18:55:f8:cf:5a:20:a4:8c:cf:49:6e:59:
         9f:66:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:06:57 2026 by rpki-client