$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232382e302f32342d3234203d3e203631333137.roa File: 33372e312e3232382e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: omzi5V5Bzn9RXDtP/DIwE67P7l+WWZP4qrwkk2Di+Y0= Subject key identifier: C2:A6:83:AF:93:8B:4F:EB:23:16:48:DA:D9:42:07:25:75:D0:DB:52 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 3ED11F13B1FB1D5AA71272DB556D8E458680BA16 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232382e302f32342d3234203d3e203631333137.roa Signing time: Tue 07 Nov 2023 11:37:30 +0000 ROA not before: Tue 07 Nov 2023 11:32:30 +0000 ROA not after: Tue 05 Nov 2024 11:37:30 +0000 asID: 61317 IP address blocks: 37.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 14:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d1:1f:13:b1:fb:1d:5a:a7:12:72:db:55:6d:8e:45:86:80:ba:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Nov 7 11:32:30 2023 GMT Not After : Nov 5 11:37:30 2024 GMT Subject: CN=C2A683AF938B4FEB231648DAD942072575D0DB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:4f:7e:fa:dc:c0:12:2a:24:e9:c4:49:14: 48:90:82:b4:cb:71:35:2a:65:e8:f2:db:61:12:24: 83:11:ce:4c:f4:74:e5:23:41:29:e6:45:90:0c:04: a7:51:34:34:42:48:6f:35:5d:4c:04:bb:83:22:9e: 85:02:fe:f6:b0:12:fe:2f:52:bf:34:95:c4:83:c6: f5:25:08:bd:58:65:79:28:9a:d4:4a:79:4d:9f:3e: c2:87:ae:ee:27:46:16:33:92:89:5e:5d:36:59:cd: d2:37:bc:de:9a:6d:08:b8:bc:42:29:d0:5f:52:e2: fb:82:0a:fc:92:22:f3:e1:09:af:9f:ec:0e:b6:4a: 71:e8:98:aa:89:4f:41:1c:ea:1f:e5:44:af:c0:d6: 28:67:97:ad:ee:45:6b:76:29:6f:bc:42:ff:15:32: b8:ae:73:ed:ed:72:ec:92:9a:fb:54:41:09:a1:2c: 98:4b:cd:43:44:44:4e:a6:fa:81:36:c0:b9:39:66: 64:f7:7f:73:a8:1f:d8:87:95:6e:74:07:6c:2a:0d: a5:a4:43:c0:51:19:12:cf:d1:84:6f:03:b3:16:9f: e7:5b:1f:d2:d1:d9:28:fd:67:59:fc:e8:b5:db:00: f3:91:08:42:d7:73:6a:20:5b:ec:aa:f1:fe:41:db: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:83:AF:93:8B:4F:EB:23:16:48:DA:D9:42:07:25:75:D0:DB:52 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232382e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.228.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:74:4c:66:24:7f:66:50:02:95:2a:68:1b:fc:71:1b:dc:78: 51:03:b1:ea:84:f4:61:03:99:40:ca:12:48:05:4c:e0:f1:ef: 68:b7:73:85:7b:8e:6d:9f:6a:75:40:d4:1e:77:ef:35:af:97: 7f:65:77:1c:9c:1d:8d:c0:ca:21:49:01:1d:2d:50:fc:d8:34: 9d:39:df:72:b3:29:b2:0c:2f:8d:49:35:8b:9a:3d:b6:ab:6e: 9b:f9:e6:c0:be:78:eb:0f:1c:da:25:f9:7b:52:21:63:98:7f: 45:7c:a8:0d:4a:1c:dd:24:92:db:4c:db:07:21:94:99:c1:1a: d4:dc:5d:4f:5f:99:de:c9:5c:ca:6d:65:d9:d3:bb:09:46:50: 52:ef:86:58:69:a7:a0:44:84:4c:55:4b:7c:93:0d:7c:4d:45: f8:ec:b1:ef:b7:ad:c9:d8:4c:5f:5c:65:d2:0e:aa:fa:1a:b8: b5:3a:b6:20:95:c3:c0:99:e8:d4:bb:ff:8f:99:0f:7b:d3:ae: a9:e2:d2:b6:35:b8:44:1f:32:ee:0d:bf:1c:39:6d:64:af:57: e9:4c:56:d2:1a:7f:6f:bc:a1:7b:0a:5e:58:e5:e7:80:07:04: e6:40:4b:d7:da:a4:36:af:e2:fa:3f:d8:b7:19:a6:ef:b2:9b: e1:ac:da:b9 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUPtEfE7H7HVqnEnLbVW2ORYaAuhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yMzExMDcxMTMyMzBaFw0yNDExMDUxMTM3MzBaMDMxMTAvBgNV BAMTKEMyQTY4M0FGOTM4QjRGRUIyMzE2NDhEQUQ5NDIwNzI1NzVEMERCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrkk9++tzAEiok6cRJFEiQgrTL cTUqZejy22ESJIMRzkz0dOUjQSnmRZAMBKdRNDRCSG81XUwEu4MinoUC/vawEv4v Ur80lcSDxvUlCL1YZXkomtRKeU2fPsKHru4nRhYzkoleXTZZzdI3vN6abQi4vEIp 0F9S4vuCCvySIvPhCa+f7A62SnHomKqJT0Ec6h/lRK/A1ihnl63uRWt2KW+8Qv8V Mriuc+3tcuySmvtUQQmhLJhLzUNERE6m+oE2wLk5ZmT3f3OoH9iHlW50B2wqDaWk Q8BRGRLP0YRvA7MWn+dbH9LR2Sj9Z1n86LXbAPORCELXc2ogW+yq8f5B2zxnAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUwqaDr5OLT+sjFkja2UIHJXXQ21IwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzgyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQHkMA0GCSqGSIb3DQEB CwUAA4IBAQB8dExmJH9mUAKVKmgb/HEb3HhRA7HqhPRhA5lAyhJIBUzg8e9ot3OF e45tn2p1QNQed+81r5d/ZXccnB2NwMohSQEdLVD82DSdOd9ysymyDC+NSTWLmj22 q26b+ebAvnjrDxzaJfl7UiFjmH9FfKgNShzdJJLbTNsHIZSZwRrU3F1PX5neyVzK bWXZ07sJRlBS74ZYaaegRIRMVUt8kw18TUX47LHvt63J2ExfXGXSDqr6Gri1OrYg lcPAmejUu/+PmQ97066p4tK2NbhEHzLuDb8cOW1kr1fpTFbSGn9vvKF7Cl5Y5eeA BwTmQEvX2qQ2r+L6P9i3GabvspvhrNq5 -----END CERTIFICATE-----Generated at Sat May 4 01:50:55 2024 by rpki-client on console-ams.rpki-client.org