$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa File: AS19437.roa (raw, json) Hash identifier: 7rOhZpy5RyQVeeYGfihYpCSZ/IFzWKe9fOLtpaXnc40= Subject key identifier: A9:73:27:83:89:4D:E5:B3:25:46:5F:3C:05:60:B3:55:5E:35:F5:61 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 4E418983DA303BB93E2C3CD6A4C602E4AAAA876A Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa Signing time: Fri 02 Feb 2024 08:34:22 +0000 ROA not before: Fri 02 Feb 2024 08:29:22 +0000 ROA not after: Fri 31 Jan 2025 08:34:22 +0000 asID: 19437 IP address blocks: 86.38.189.0/24 maxlen: 24 89.117.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:41:89:83:da:30:3b:b9:3e:2c:3c:d6:a4:c6:02:e4:aa:aa:87:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Feb 2 08:29:22 2024 GMT Not After : Jan 31 08:34:22 2025 GMT Subject: CN=A9732783894DE5B325465F3C0560B3555E35F561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2c:a1:a8:86:b2:41:79:87:7e:d7:28:50:76: a7:cf:7f:99:6c:b9:ac:7d:0c:55:e6:19:19:24:5b: 74:34:e1:28:d4:5d:77:e9:79:c3:bf:c0:4e:99:fe: 67:6d:e5:d9:15:fb:7a:f2:3d:8f:e1:3a:58:68:d1: 73:33:19:8c:9d:ff:7f:3d:c1:5e:e7:b6:b9:a7:fc: 62:3d:6e:45:05:9c:a7:42:fb:60:97:07:10:a4:a7: 40:50:94:05:af:1c:d2:86:26:60:2e:17:0e:56:ac: 88:19:b0:23:2e:3e:a1:25:60:64:eb:c5:6d:ba:04: 1e:1a:af:20:b4:74:7e:4b:30:bb:11:e0:36:b2:cf: 2c:15:da:63:2e:88:ae:b5:7e:49:d4:69:de:9d:70: c1:ba:e4:e7:17:c7:8b:43:08:d2:97:82:2e:e9:66: ca:56:42:7d:45:41:3e:13:95:8b:0f:df:23:d1:f8: 3e:87:a7:ca:13:d0:0a:33:c7:79:f7:a2:65:26:01: 59:1f:d1:7a:00:bc:8a:8a:ab:eb:c5:38:ff:d0:c7: fd:69:53:0e:7f:f2:d1:6a:df:ef:fa:7d:92:a5:09: 30:20:03:ef:e9:30:cb:78:f6:f5:8d:c5:20:c8:7b: bc:5f:99:df:d4:2d:e6:6e:65:50:dc:bc:d6:31:f3: 6c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:73:27:83:89:4D:E5:B3:25:46:5F:3C:05:60:B3:55:5E:35:F5:61 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.189.0/24 89.117.66.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:53:32:cf:f2:66:22:43:96:e6:5c:de:86:97:2d:77:76:5b: 61:fe:71:90:39:03:b5:59:8b:58:2f:40:d9:fa:ef:80:b5:35: f9:cf:87:fd:49:5f:11:43:35:75:aa:95:03:a3:95:4e:84:35: 02:87:fb:c5:b0:45:66:99:9a:8f:37:e7:56:ad:99:e1:1d:dc: e8:ee:b5:de:ac:63:09:8f:59:61:16:48:c4:78:be:f7:85:46: e7:36:13:23:45:32:9c:f8:d3:8d:41:0b:0a:8b:43:07:09:0e: 28:b0:ba:63:03:30:ad:d2:dd:c3:ad:4d:64:ec:cc:fc:fc:d0: f7:05:79:d6:4f:a9:ac:be:0d:8c:9f:65:27:04:25:16:17:b9: e1:82:8e:28:9f:63:bc:8b:7e:86:24:25:05:74:39:ac:05:47: 24:91:47:11:1e:7a:88:18:40:ff:52:41:58:39:8e:0e:06:c2: 05:63:8e:b7:9d:5c:0b:b1:a0:aa:dc:64:84:4c:1b:4a:dc:ee: a2:71:bf:80:4d:0c:9c:32:ae:3a:e4:12:b7:51:4c:98:db:0b: 75:7f:e1:28:d6:18:54:28:de:90:9a:d0:b2:7b:3f:6b:af:d0: 67:6a:59:c4:5b:0f:45:90:ed:f8:b3:f1:74:8d:97:b6:e6:ad: aa:1d:a7:28 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTkGJg9owO7k+LDzWpMYC5Kqqh2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDAyMDIwODI5MjJaFw0yNTAxMzEwODM0MjJaMDMxMTAvBgNV BAMTKEE5NzMyNzgzODk0REU1QjMyNTQ2NUYzQzA1NjBCMzU1NUUzNUY1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLKGohrJBeYd+1yhQdqfPf5ls uax9DFXmGRkkW3Q04SjUXXfpecO/wE6Z/mdt5dkV+3ryPY/hOlho0XMzGYyd/389 wV7ntrmn/GI9bkUFnKdC+2CXBxCkp0BQlAWvHNKGJmAuFw5WrIgZsCMuPqElYGTr xW26BB4aryC0dH5LMLsR4DayzywV2mMuiK61fknUad6dcMG65OcXx4tDCNKXgi7p ZspWQn1FQT4TlYsP3yPR+D6Hp8oT0Aozx3n3omUmAVkf0XoAvIqKq+vFOP/Qx/1p Uw5/8tFq3+/6fZKlCTAgA+/pMMt49vWNxSDIe7xfmd/ULeZuZVDcvNYx82xZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqXMng4lN5bMlRl88BWCzVV419WEwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5NDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVia9AwQAWXVCMA0GCSqG SIb3DQEBCwUAA4IBAQAuUzLP8mYiQ5bmXN6Gly13dlth/nGQOQO1WYtYL0DZ+u+A tTX5z4f9SV8RQzV1qpUDo5VOhDUCh/vFsEVmmZqPN+dWrZnhHdzo7rXerGMJj1lh FkjEeL73hUbnNhMjRTKc+NONQQsKi0MHCQ4osLpjAzCt0t3DrU1k7Mz8/ND3BXnW T6msvg2Mn2UnBCUWF7nhgo4on2O8i36GJCUFdDmsBUckkUcRHnqIGED/UkFYOY4O BsIFY463nVwLsaCq3GSETBtK3O6icb+ATQycMq465BK3UUyY2wt1f+Eo1hhUKN6Q mtCyez9rr9BnalnEWw9FkO34s/F0jZe25q2qHaco -----END CERTIFICATE-----Generated at Sat May 11 02:35:27 2024 by rpki-client on console-fra.rpki-client.org