Route Origin Authorization

$ rpki-client -vvvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          wyAIVTDEukdWWAtVeaFIA18fFIJGdOAkLJQB5m4nUOk=
Subject key identifier:   18:CD:12:35:A5:D5:D5:65:48:CB:55:13:15:29:F3:8A:DE:18:6D:A1
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       7951581B625D99C68054FABFA816829CD01957C4
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa
Signing time:             Mon 21 Sep 2026 11:01:19 +0000
ROA not before:           Mon 21 Sep 2026 10:56:19 +0000
ROA not after:            Mon 20 Sep 2027 11:01:19 +0000
asID:                     9009
IP address blocks:        169.40.128.0/24 maxlen: 24
                          169.40.130.0/23 maxlen: 24
                          169.40.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 17:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:51:58:1b:62:5d:99:c6:80:54:fa:bf:a8:16:82:9c:d0:19:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Sep 21 10:56:19 2026 GMT
            Not After : Sep 20 11:01:19 2027 GMT
        Subject: CN=18CD1235A5D5D56548CB55131529F38ADE186DA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:3a:df:eb:9d:32:b2:e9:84:27:0f:e2:28:
                    0c:61:39:6b:0b:cd:21:da:bd:7d:cf:a5:64:16:01:
                    d6:a8:cb:a0:59:4a:46:a2:eb:00:53:94:0d:8b:6c:
                    e6:b8:ea:5c:c0:d1:e1:58:41:2a:86:ca:6a:07:10:
                    75:93:e6:ff:d6:a5:6b:1a:7d:dd:57:1c:91:71:a8:
                    d8:39:83:5f:7b:eb:db:fd:36:3d:31:1b:f5:c8:4e:
                    43:a4:84:d4:33:66:66:d2:be:29:d2:11:6f:c9:6a:
                    31:47:c8:6f:d9:dd:7e:a8:8b:e1:2a:2d:50:dd:36:
                    4c:a2:e7:03:0a:06:e5:61:cb:5f:cf:0d:62:44:f7:
                    be:4c:d1:8c:ba:27:f2:a8:06:7d:45:6e:46:b4:c4:
                    35:5b:6f:8e:55:5e:5c:0e:20:a7:60:89:8d:54:32:
                    69:b3:da:77:8d:90:2b:56:3c:a9:d0:25:ae:13:55:
                    49:39:b6:1d:d8:ac:17:8d:32:c5:92:43:b4:6e:8d:
                    b2:af:5e:1b:e0:e6:f9:c1:2b:ee:f3:e6:e2:51:21:
                    f2:35:ce:9f:a0:28:a2:04:9c:37:aa:96:dd:ab:cd:
                    00:62:24:bd:c6:0e:5c:48:67:93:d0:31:a1:1c:e0:
                    3a:d8:50:52:40:45:8b:84:57:7a:84:b9:52:7f:ed:
                    94:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CD:12:35:A5:D5:D5:65:48:CB:55:13:15:29:F3:8A:DE:18:6D:A1
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.128.0/24
                  169.40.130.0/23
                  169.40.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:7b:c1:34:a9:0f:d5:12:af:30:a6:ba:54:61:13:bd:f9:aa:
         71:19:15:7e:cc:35:be:69:be:36:4b:02:9e:59:32:98:bc:fe:
         48:4e:26:ea:dc:1e:bb:d1:9e:9b:5b:61:6d:98:76:d1:42:91:
         ad:c6:f2:2d:b1:55:f4:64:35:17:48:54:b2:4a:bb:60:a0:fb:
         c0:09:3c:65:e8:af:6f:88:de:56:58:76:7e:a7:67:17:19:fa:
         5a:d1:23:37:74:9d:14:77:5c:0f:23:5d:88:aa:6d:0b:12:be:
         b4:fc:dd:bd:05:99:42:e0:88:6a:9f:83:9a:a2:df:45:bd:54:
         8a:8b:4e:a0:89:46:ed:cf:0c:63:f2:ef:1e:38:f6:db:8f:fd:
         6b:e9:18:88:8c:65:88:2b:47:9a:be:aa:51:b6:09:01:ce:a2:
         7f:41:c0:46:7d:2b:82:57:48:43:48:71:8f:84:f7:61:77:46:
         f3:31:26:c4:33:c8:e2:40:70:db:e9:b5:23:87:bc:19:b1:11:
         02:a9:ec:d3:f8:4f:f2:53:cc:16:1b:d0:f5:33:23:4f:d1:55:
         44:19:08:cc:88:c9:31:b0:45:51:0c:ee:ef:76:92:c9:47:23:
         a7:88:37:6d:d4:11:71:6d:7d:18:93:ec:01:5a:92:17:90:59:
         fa:1b:75:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:20:34 2026 by rpki-client