$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa File: 33372e3233302e36322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: LyC7qCw3OxgXy8YyQ3aB3yYtna+BQsWEcao/vfoEUGE= Subject key identifier: 48:9E:E6:E0:11:1D:76:0F:F9:54:5F:B6:80:0D:5B:37:4C:EE:6E:14 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 78978E45DA40CBA734E5AB49D8C082FC2F72C31E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa Signing time: Thu 04 Apr 2024 12:10:48 +0000 ROA not before: Thu 04 Apr 2024 12:05:48 +0000 ROA not after: Thu 03 Apr 2025 12:10:48 +0000 asID: 834 IP address blocks: 37.230.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 May 2024 16:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:97:8e:45:da:40:cb:a7:34:e5:ab:49:d8:c0:82:fc:2f:72:c3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 4 12:05:48 2024 GMT Not After : Apr 3 12:10:48 2025 GMT Subject: CN=489EE6E0111D760FF9545FB6800D5B374CEE6E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:30:48:d7:2e:9a:03:2f:29:fb:6e:68:f3: 66:d3:8e:e0:d4:8b:34:03:bc:05:ec:a3:98:15:35: 1d:a8:a2:b5:9a:a7:9f:a1:59:73:e2:83:35:cb:10: 4c:25:d0:ff:c0:b7:af:d2:44:41:97:d2:77:b9:83: 8e:8c:11:c5:d9:97:60:f1:9a:6a:64:fd:75:ba:58: 20:f3:d9:01:85:83:5d:0d:10:26:7b:d3:6c:40:58: 46:66:53:f3:8a:77:19:ae:af:b1:82:46:53:12:f3: ad:ef:c1:e7:cb:28:0c:2d:1b:3d:56:f1:10:cc:32: 7f:86:dd:9b:03:37:95:98:a2:a5:48:e4:73:c8:94: 53:e5:4e:35:2e:3b:8f:be:83:2e:78:0e:c9:db:c7: 79:d0:d1:d8:e2:8f:fc:0e:60:08:ca:9a:89:ed:50: d0:77:30:05:e3:5c:54:0c:57:9f:df:ca:2a:4b:8b: 41:3a:8f:4a:fc:cb:e7:ec:54:d6:cb:b7:45:6a:3e: b3:0f:d2:ed:a6:0a:96:46:04:12:6d:0f:eb:4e:b8: 35:9a:81:e3:10:e7:bc:8f:51:31:a3:9d:7c:aa:a5: 40:77:e0:e6:bf:2d:3d:4b:60:ae:ad:fa:2e:8d:45: 91:79:9c:a2:df:b9:20:54:83:90:d1:8d:ba:7e:7a: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9E:E6:E0:11:1D:76:0F:F9:54:5F:B6:80:0D:5B:37:4C:EE:6E:14 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.62.0/24 Signature Algorithm: sha256WithRSAEncryption 70:c9:69:b1:13:03:dc:81:7f:f1:40:16:f1:b9:b6:57:6e:6e: da:40:10:82:05:2d:ec:c6:b1:fa:db:8a:51:e7:21:62:95:3f: 5e:a4:8a:2e:d9:a1:8e:b7:4e:fd:f7:bb:7a:5c:aa:d3:93:9c: cc:86:91:72:9a:b6:7a:95:6a:c8:c7:78:42:4c:24:6f:12:9a: 83:f2:8d:d1:52:09:1e:ab:a6:69:91:fd:e2:b7:87:8e:58:7b: 92:61:8c:00:47:ba:ec:01:cf:d2:36:7f:9e:76:68:b6:83:79: 5d:11:c9:d7:ea:d4:98:9a:99:d2:be:15:9c:89:c2:c4:3c:44: b9:19:21:ef:65:3f:97:34:22:7e:51:69:5c:cd:ac:b6:d5:5e: a0:24:82:f7:8a:86:40:e6:50:64:68:32:6c:7e:e9:b9:86:7f: d6:0c:f7:f1:24:ab:53:68:ba:1d:1d:3a:f2:06:19:1d:62:50: a3:84:20:6c:1d:b3:b2:82:62:17:99:0d:04:9f:b5:b3:e5:29: fd:0b:c6:9f:1a:ed:60:ce:13:33:7c:d5:62:02:5a:61:b0:eb: 7e:2b:b3:1b:94:11:28:68:ec:92:e5:41:0f:d4:80:3e:2d:ec: 54:ab:72:e2:c3:e7:31:9d:23:41:3f:8d:d5:c7:8b:02:5e:26: 8c:11:c4:b6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUeJeORdpAy6c05atJ2MCC/C9ywx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDA0MDQxMjA1NDhaFw0yNTA0MDMxMjEwNDhaMDMxMTAvBgNV BAMTKDQ4OUVFNkUwMTExRDc2MEZGOTU0NUZCNjgwMEQ1QjM3NENFRTZFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/DBI1y6aAy8p+25o82bTjuDU izQDvAXso5gVNR2oorWap5+hWXPigzXLEEwl0P/At6/SREGX0ne5g46MEcXZl2Dx mmpk/XW6WCDz2QGFg10NECZ702xAWEZmU/OKdxmur7GCRlMS863vwefLKAwtGz1W 8RDMMn+G3ZsDN5WYoqVI5HPIlFPlTjUuO4++gy54Dsnbx3nQ0djij/wOYAjKmont UNB3MAXjXFQMV5/fyipLi0E6j0r8y+fsVNbLt0VqPrMP0u2mCpZGBBJtD+tOuDWa geMQ57yPUTGjnXyqpUB34Oa/LT1LYK6t+i6NRZF5nKLfuSBUg5DRjbp+ehy3AgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUSJ7m4BEddg/5VF+2gA1bN0zubhQwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzIzMzMwMmUzNjMyMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY+MA0GCSqGSIb3DQEBCwUA A4IBAQBwyWmxEwPcgX/xQBbxubZXbm7aQBCCBS3sxrH624pR5yFilT9epIou2aGO t07997t6XKrTk5zMhpFymrZ6lWrIx3hCTCRvEpqD8o3RUgkeq6Zpkf3it4eOWHuS YYwAR7rsAc/SNn+edmi2g3ldEcnX6tSYmpnSvhWcicLEPES5GSHvZT+XNCJ+UWlc zay21V6gJIL3ioZA5lBkaDJsfum5hn/WDPfxJKtTaLodHTryBhkdYlCjhCBsHbOy gmIXmQ0En7Wz5Sn9C8afGu1gzhMzfNViAlphsOt+K7MblBEoaOyS5UEP1IA+LexU q3Liw+cxnSNBP43Vx4sCXiaMEcS2 -----END CERTIFICATE-----Generated at Thu May 2 22:11:05 2024 by rpki-client on console-fra.rpki-client.org