$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20393936.roa File: 352e38332e3231322e302f32342d3234203d3e20393936.roa (raw, json) Hash identifier: T3es8ujNVlPqJC/SCmalPSe8bohmunC1nrdffCgjbqE= Subject key identifier: D8:7D:FB:18:7B:BA:0E:4F:CE:2F:99:91:A5:EC:A9:81:95:FB:70:9A Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 2D4236E9A1314ED8C3B2C30900CC9600480A1F3D Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20393936.roa Signing time: Thu 29 Feb 2024 14:10:09 +0000 ROA not before: Thu 29 Feb 2024 14:05:09 +0000 ROA not after: Thu 27 Feb 2025 14:10:09 +0000 asID: 996 IP address blocks: 5.83.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Jun 2024 10:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:42:36:e9:a1:31:4e:d8:c3:b2:c3:09:00:cc:96:00:48:0a:1f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Feb 29 14:05:09 2024 GMT Not After : Feb 27 14:10:09 2025 GMT Subject: CN=D87DFB187BBA0E4FCE2F9991A5ECA98195FB709A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:e8:ad:3c:2f:38:2f:70:21:2b:89:3a:80: bc:69:ee:b6:2a:49:e9:8d:52:68:32:68:b9:bd:68: 1e:70:03:f7:b5:e8:50:73:b8:d5:6d:ce:8b:8e:ac: b7:30:85:f5:ca:22:ac:f9:93:67:9b:91:fc:b4:41: 38:99:ea:24:f4:ac:53:1d:c7:00:46:7e:e1:ec:24: 20:54:ca:99:af:ed:28:8c:29:1f:68:73:27:1b:bf: d8:fa:9e:8b:d1:4a:2d:20:a3:59:81:3d:7b:3c:29: 22:e4:28:15:14:4e:99:fe:7c:19:58:b6:55:72:e0: 1f:cf:e8:a7:73:67:04:06:e1:86:22:5d:77:d5:10: f4:d7:24:d8:9f:fa:c4:d0:86:0a:f6:4b:e3:3a:e9: 64:17:23:8f:ef:80:0f:de:ab:31:47:e6:b5:e8:0c: 24:b4:19:96:5b:c6:e3:9f:7b:52:60:c7:0e:f3:85: 5b:31:59:2a:90:5a:30:a1:8a:b7:c5:ea:8b:85:11: f0:e6:20:bb:0d:16:e7:3b:b4:2d:ba:f2:bf:5c:03: c2:3d:85:05:48:85:ab:a7:08:e2:5b:c1:6a:35:a6: f2:45:bb:b6:f5:9f:de:34:6d:be:bf:ef:b7:ee:c2: cc:8d:a0:7a:37:8b:b9:a0:e1:f5:ef:5e:94:e1:db: e5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7D:FB:18:7B:BA:0E:4F:CE:2F:99:91:A5:EC:A9:81:95:FB:70:9A X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231322e302f32342d3234203d3e20393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.212.0/24 Signature Algorithm: sha256WithRSAEncryption 02:6f:64:34:52:b1:fc:d0:1b:da:2d:25:ae:4f:4d:32:06:1d: dd:55:94:c6:3c:67:22:f1:c8:f1:c5:db:cc:f2:b9:26:0e:ea: cd:c1:44:c8:56:99:91:27:ad:39:b4:c8:dc:08:51:b8:9c:7b: b5:06:86:52:f2:9f:de:68:2f:50:55:d6:c7:73:48:d0:a1:d6: 6b:b4:9d:6e:77:6f:9c:ce:97:44:e3:2b:b5:ff:8c:fc:b9:76: b3:df:d5:50:5a:5a:c4:93:b2:09:f6:6f:3a:70:b8:9d:1b:68: 16:8e:d5:5e:12:36:92:1d:42:5c:e9:10:e8:db:99:4e:b4:e2: 14:0b:a0:56:9d:da:78:16:79:b6:2b:25:9c:9c:53:55:73:55: 4d:7d:89:59:99:84:f8:f6:ee:22:8d:ee:d9:dc:cf:d5:dc:bb: 16:b5:d5:96:18:c1:a8:ca:f0:a5:d9:33:af:d5:8e:08:67:8f: 60:26:8e:a1:cd:d7:c2:46:b7:24:ea:1b:1e:d7:ac:3e:5a:e2: 7f:5d:f2:ac:32:0c:03:81:3f:84:86:d4:98:e0:ca:01:aa:13: 41:44:0d:51:a4:ea:e5:e5:52:06:68:6a:53:8d:55:9a:6f:b7: 89:45:8a:60:2f:49:3d:f2:6d:f0:d5:27:43:44:ba:43:60:0d: 48:c1:ed:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIULUI26aExTtjDssMJAMyWAEgKHz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDAyMjkxNDA1MDlaFw0yNTAyMjcxNDEwMDlaMDMxMTAvBgNV BAMTKEQ4N0RGQjE4N0JCQTBFNEZDRTJGOTk5MUE1RUNBOTgxOTVGQjcwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PuitPC84L3AhK4k6gLxp7rYq SemNUmgyaLm9aB5wA/e16FBzuNVtzouOrLcwhfXKIqz5k2ebkfy0QTiZ6iT0rFMd xwBGfuHsJCBUypmv7SiMKR9ocycbv9j6novRSi0go1mBPXs8KSLkKBUUTpn+fBlY tlVy4B/P6KdzZwQG4YYiXXfVEPTXJNif+sTQhgr2S+M66WQXI4/vgA/eqzFH5rXo DCS0GZZbxuOfe1Jgxw7zhVsxWSqQWjChirfF6ouFEfDmILsNFuc7tC268r9cA8I9 hQVIhaunCOJbwWo1pvJFu7b1n940bb6/77fuwsyNoHo3i7mg4fXvXpTh2+ULAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU2H37GHu6Dk/OL5mRpeypgZX7cJowHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzUyZTM4MzMyZTMyMzEzMjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM5MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAVT1DANBgkqhkiG9w0BAQsFAAOC AQEAAm9kNFKx/NAb2i0lrk9NMgYd3VWUxjxnIvHI8cXbzPK5Jg7qzcFEyFaZkSet ObTI3AhRuJx7tQaGUvKf3mgvUFXWx3NI0KHWa7SdbndvnM6XROMrtf+M/Ll2s9/V UFpaxJOyCfZvOnC4nRtoFo7VXhI2kh1CXOkQ6NuZTrTiFAugVp3aeBZ5tislnJxT VXNVTX2JWZmE+PbuIo3u2dzP1dy7FrXVlhjBqMrwpdkzr9WOCGePYCaOoc3Xwka3 JOobHtesPlrif13yrDIMA4E/hIbUmODKAaoTQUQNUaTq5eVSBmhqU41Vmm+3iUWK YC9JPfJt8NUnQ0S6Q2ANSMHt+A== -----END CERTIFICATE-----Generated at Sat Jun 1 13:38:28 2024 by rpki-client on console-fra.rpki-client.org