$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa File: AS13213.roa (raw, json) Hash identifier: IkAimB6JgIEMOb85KkjKjkfnFU804p3UdSTwcvCV50c= Subject key identifier: A9:B6:18:4D:BC:86:52:54:21:32:50:85:2E:AD:F3:A2:34:3F:C4:9D Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 65698E061C62E4B381A5BBCDCF30A1139580E9C1 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa Signing time: Fri 24 May 2024 13:50:57 +0000 ROA not before: Fri 24 May 2024 13:45:57 +0000 ROA not after: Fri 23 May 2025 13:50:57 +0000 asID: 13213 IP address blocks: 89.116.200.0/24 maxlen: 24 89.116.241.0/24 maxlen: 24 89.117.155.0/24 maxlen: 24 89.117.160.0/24 maxlen: 24 89.117.161.0/24 maxlen: 24 89.117.162.0/24 maxlen: 24 89.117.163.0/24 maxlen: 24 89.117.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 07:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:69:8e:06:1c:62:e4:b3:81:a5:bb:cd:cf:30:a1:13:95:80:e9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: May 24 13:45:57 2024 GMT Not After : May 23 13:50:57 2025 GMT Subject: CN=A9B6184DBC865254213250852EADF3A2343FC49D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:80:41:85:4d:d2:65:7c:8c:55:fc:55:d6: d5:84:d2:f3:0c:4f:2e:d5:60:ec:37:24:d4:32:52: 1a:23:1c:93:29:53:2f:95:94:23:42:4c:6b:72:57: 7f:a1:88:34:7f:39:a4:79:ce:7e:9f:35:e8:b7:04: 04:72:25:4d:74:5f:36:7b:65:ff:2a:35:14:31:7a: 27:5a:8d:ea:3c:4f:2f:37:3c:b7:98:f9:cb:94:ab: ab:0d:16:00:dc:12:41:5c:1a:b2:1a:b4:4e:8e:94: 9f:92:c6:14:17:b0:62:f2:03:09:0b:b1:4e:da:99: da:0c:76:f2:4f:5c:60:e7:81:4f:ac:35:81:c9:77: 7e:02:17:f0:b0:3e:f6:7e:ee:cb:cf:98:d0:35:3d: 4b:8b:77:d2:97:4d:65:79:ee:1d:07:d4:ff:61:73: d8:22:d6:72:c3:1d:e9:3f:ea:f9:70:c9:30:b1:52: c3:b5:b9:11:b6:0a:6d:14:b6:7d:fb:42:c5:b5:38: a7:b9:6e:a9:7c:2d:69:dd:3b:aa:14:5a:4f:1d:5d: bc:0a:c8:4e:2a:c9:2a:f0:20:43:a8:04:d0:31:3d: ba:13:8d:e6:b4:8b:5b:97:54:2e:37:55:c4:96:4d: 5b:ef:bc:ef:95:b4:ee:72:95:fc:3f:47:69:eb:10: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B6:18:4D:BC:86:52:54:21:32:50:85:2E:AD:F3:A2:34:3F:C4:9D X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS13213.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.200.0/24 89.116.241.0/24 89.117.155.0/24 89.117.160.0/22 89.117.218.0/24 Signature Algorithm: sha256WithRSAEncryption ad:59:93:fa:d0:d7:35:68:2d:e2:dc:42:c2:52:33:03:68:db: 42:2a:90:f4:84:a5:7f:1c:e6:7c:90:4f:d7:0e:54:cc:89:42: b6:0d:15:dc:27:30:46:8b:e0:51:29:dd:90:98:54:ed:9c:46: dd:36:8f:43:ef:65:17:06:26:2c:d7:4e:1b:41:1f:a8:31:af: 36:d9:97:91:c8:10:d6:27:2d:e6:11:1c:55:36:f6:ac:e0:2b: e8:fc:b4:c7:9e:44:f5:21:b3:38:ef:62:46:56:27:9b:28:72: d6:ed:32:46:9d:9e:ea:ed:17:19:7f:eb:b9:27:4a:43:40:b6: b7:f5:e2:91:5b:44:d0:f1:c1:4e:c5:70:bf:05:be:9e:53:26: e6:e1:cc:a4:da:30:7f:36:56:99:44:bb:a5:87:9f:b0:6f:ef: dc:55:af:14:1e:3a:d4:ed:56:ed:d3:e1:02:8d:36:68:5d:32: 98:60:81:e8:88:9e:8c:f3:2d:54:38:3f:97:5c:13:bb:1e:3f: e1:9d:06:df:7a:4a:f8:b5:81:e3:49:39:52:ac:b6:8d:93:a0: 78:55:c0:c2:be:ff:26:af:bb:33:a8:17:a9:ac:78:12:8b:dd: 2d:f4:55:be:12:a8:aa:06:ec:30:15:63:91:7e:95:d2:e2:01: 28:ae:af:94 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUZWmOBhxi5LOBpbvNzzChE5WA6cEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDA1MjQxMzQ1NTdaFw0yNTA1MjMxMzUwNTdaMDMxMTAvBgNV BAMTKEE5QjYxODREQkM4NjUyNTQyMTMyNTA4NTJFQURGM0EyMzQzRkM0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoV4BBhU3SZXyMVfxV1tWE0vMM Ty7VYOw3JNQyUhojHJMpUy+VlCNCTGtyV3+hiDR/OaR5zn6fNei3BARyJU10XzZ7 Zf8qNRQxeidajeo8Ty83PLeY+cuUq6sNFgDcEkFcGrIatE6OlJ+SxhQXsGLyAwkL sU7amdoMdvJPXGDngU+sNYHJd34CF/CwPvZ+7svPmNA1PUuLd9KXTWV57h0H1P9h c9gi1nLDHek/6vlwyTCxUsO1uRG2Cm0Utn37QsW1OKe5bql8LWndO6oUWk8dXbwK yE4qySrwIEOoBNAxPboTjea0i1uXVC43VcSWTVvvvO+VtO5ylfw/R2nrEApJAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUqbYYTbyGUlQhMlCFLq3zojQ/xJ0wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEzMjEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWXTIAwQAWXTxAwQAWXWb AwQCWXWgAwQAWXXaMA0GCSqGSIb3DQEBCwUAA4IBAQCtWZP60Nc1aC3i3ELCUjMD aNtCKpD0hKV/HOZ8kE/XDlTMiUK2DRXcJzBGi+BRKd2QmFTtnEbdNo9D72UXBiYs 104bQR+oMa822ZeRyBDWJy3mERxVNvas4Cvo/LTHnkT1IbM472JGViebKHLW7TJG nZ7q7RcZf+u5J0pDQLa39eKRW0TQ8cFOxXC/Bb6eUybm4cyk2jB/NlaZRLulh5+w b+/cVa8UHjrU7Vbt0+ECjTZoXTKYYIHoiJ6M8y1UOD+XXBO7Hj/hnQbfekr4tYHj STlSrLaNk6B4VcDCvv8mr7szqBeprHgSi90t9FW+EqiqBuwwFWORfpXS4gEorq+U -----END CERTIFICATE-----Generated at Fri May 31 22:12:27 2024 by rpki-client on console-fra.rpki-client.org