$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: ta7Myhsa3SuAysrFjbPX69ISDZQsjQdp6I3cNULHjfs= Subject key identifier: C2:15:77:3E:D4:0A:9B:9D:B6:B8:13:9C:70:9D:D7:DB:5D:20:46:26 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 49F487E1DBAEC28FFED87520D797CD4158F290F0 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa Signing time: Wed 17 Apr 2024 06:53:39 +0000 ROA not before: Wed 17 Apr 2024 06:48:39 +0000 ROA not after: Wed 16 Apr 2025 06:53:39 +0000 asID: 29802 IP address blocks: 89.116.60.0/24 maxlen: 24 89.116.61.0/24 maxlen: 24 89.116.63.0/24 maxlen: 24 89.116.68.0/24 maxlen: 24 89.116.165.0/24 maxlen: 24 89.116.215.0/24 maxlen: 24 89.117.64.0/24 maxlen: 24 89.117.65.0/24 maxlen: 24 89.117.80.0/24 maxlen: 24 89.117.83.0/24 maxlen: 24 89.117.107.0/24 maxlen: 24 89.117.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Apr 2024 23:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f4:87:e1:db:ae:c2:8f:fe:d8:75:20:d7:97:cd:41:58:f2:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Apr 17 06:48:39 2024 GMT Not After : Apr 16 06:53:39 2025 GMT Subject: CN=C215773ED40A9B9DB6B8139C709DD7DB5D204626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:05:89:d2:a3:c5:5e:8d:6c:38:79:8c:11:5d: 47:d8:4b:2a:9f:b1:8b:9a:e3:cc:9d:95:4d:68:b4: 14:34:41:79:e0:71:a0:b3:e2:50:62:dc:85:6a:02: 8a:89:8f:fe:70:c1:17:77:a6:40:0a:7e:55:31:25: 71:de:6d:2d:3c:67:e7:71:a9:b8:f9:ea:63:2b:08: 77:c2:5f:18:11:4e:5d:7c:42:eb:59:c8:3a:03:ec: b8:fb:1a:8e:41:c0:d5:fc:1a:89:3b:dd:b2:5f:7a: ba:4e:92:c7:b1:8b:26:05:61:8d:af:9e:19:b0:a1: 07:2f:6c:df:81:b1:a1:c0:a4:a7:f2:2c:3b:36:d3: a3:27:85:da:f5:8d:f0:9c:f7:8d:80:fb:bb:80:b1: 38:48:f0:13:f0:1e:95:9b:d4:b5:de:54:f6:68:e4: bc:ec:67:4e:fb:dd:ef:54:98:22:a7:01:96:99:e9: c1:17:02:9a:17:31:56:8d:8e:f7:f4:56:93:15:1b: 13:73:a2:e2:2b:cd:c4:39:dd:4c:cf:df:73:27:3a: ac:14:fb:a9:54:70:a9:46:b6:02:ba:c8:dd:f0:d1: 90:40:44:e3:3c:5f:5b:14:41:ab:23:ef:85:16:0f: 83:51:c2:aa:93:6c:b5:1b:c4:5b:13:c0:bf:47:ee: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:15:77:3E:D4:0A:9B:9D:B6:B8:13:9C:70:9D:D7:DB:5D:20:46:26 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.60.0/23 89.116.63.0/24 89.116.68.0/24 89.116.165.0/24 89.116.215.0/24 89.117.64.0/23 89.117.80.0/24 89.117.83.0/24 89.117.107.0/24 89.117.154.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:d1:e0:08:7b:8c:0a:37:c5:f8:db:29:70:5e:3b:2a:8d:ec: 0e:a8:76:0a:1d:5b:2d:dd:ad:29:c3:9b:cf:95:8c:ce:1c:1c: d5:a1:12:55:e4:2e:52:c9:c7:d7:ea:c9:88:07:ad:76:b3:f4: 0d:9c:1e:aa:ae:52:dd:0e:4b:35:43:da:c4:5e:62:75:b8:0f: 44:92:a3:d4:6f:9b:36:4e:b5:3d:99:25:40:c1:05:b3:c6:5f: 86:61:67:b0:8d:b6:53:7f:85:99:4d:e1:09:47:b2:11:58:e3: b0:f0:16:fa:f5:90:6e:71:f8:6c:01:ff:32:00:e5:08:6c:cf: af:6e:bf:ed:e7:15:ef:7a:34:19:5d:57:5d:c7:57:79:74:df: 17:c4:18:fb:34:c9:c4:43:2a:9c:19:04:8e:a6:2b:9f:a7:ad: 40:60:da:1c:41:74:3b:6f:13:a3:ea:93:d8:f6:79:b3:27:bd: ff:d3:e2:21:0f:fb:3a:4a:a0:59:ce:37:28:62:93:5f:ca:55: 5f:56:cc:2c:78:81:98:f4:fb:9b:23:79:11:33:1c:b3:ae:41: a7:5c:1f:48:d8:12:34:59:da:2f:64:0d:2c:fe:2c:38:49:83: 07:17:ec:6a:13:be:65:5e:58:10:47:8c:69:5a:73:a9:38:96: 2b:5a:b0:26 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUSfSH4duuwo/+2HUg15fNQVjykPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDA0MTcwNjQ4MzlaFw0yNTA0MTYwNjUzMzlaMDMxMTAvBgNV BAMTKEMyMTU3NzNFRDQwQTlCOURCNkI4MTM5QzcwOUREN0RCNUQyMDQ2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOBYnSo8VejWw4eYwRXUfYSyqf sYua48ydlU1otBQ0QXngcaCz4lBi3IVqAoqJj/5wwRd3pkAKflUxJXHebS08Z+dx qbj56mMrCHfCXxgRTl18QutZyDoD7Lj7Go5BwNX8Gok73bJferpOksexiyYFYY2v nhmwoQcvbN+BsaHApKfyLDs206Mnhdr1jfCc942A+7uAsThI8BPwHpWb1LXeVPZo 5LzsZ0773e9UmCKnAZaZ6cEXApoXMVaNjvf0VpMVGxNzouIrzcQ53UzP33MnOqwU +6lUcKlGtgK6yN3w0ZBAROM8X1sUQasj74UWD4NRwqqTbLUbxFsTwL9H7s7JAgMB AAGjggJkMIICYDAdBgNVHQ4EFgQUwhV3PtQKm522uBOccJ3X210gRiYwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBWXQ8AwQAWXQ/AwQAWXRE AwQAWXSlAwQAWXTXAwQBWXVAAwQAWXVQAwQAWXVTAwQAWXVrAwQAWXWaMA0GCSqG SIb3DQEBCwUAA4IBAQAO0eAIe4wKN8X42ylwXjsqjewOqHYKHVst3a0pw5vPlYzO HBzVoRJV5C5SycfX6smIB612s/QNnB6qrlLdDks1Q9rEXmJ1uA9EkqPUb5s2TrU9 mSVAwQWzxl+GYWewjbZTf4WZTeEJR7IRWOOw8Bb69ZBucfhsAf8yAOUIbM+vbr/t 5xXvejQZXVddx1d5dN8XxBj7NMnEQyqcGQSOpiufp61AYNocQXQ7bxOj6pPY9nmz J73/0+IhD/s6SqBZzjcoYpNfylVfVswseIGY9PubI3kRMxyzrkGnXB9I2BI0Wdov ZA0s/iw4SYMHF+xqE75lXlgQR4xpWnOpOJYrWrAm -----END CERTIFICATE-----Generated at Tue Apr 30 07:33:39 2024 by rpki-client on console-fra.rpki-client.org