$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa File: AS200019.roa (raw, json) Hash identifier: Yw++WP3J5E7Ejr4uMC+Asvag5fV2ZkqYnDCWc1Banus= Subject key identifier: 32:C9:51:B6:B8:2B:CA:E5:8B:BE:F1:B2:7D:9E:11:6F:94:77:B7:CE Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 41698FEC47EDD6702BF679DF147D8A763F44D4B3 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa Signing time: Tue 12 Dec 2023 17:40:54 +0000 ROA not before: Tue 12 Dec 2023 17:35:54 +0000 ROA not after: Tue 10 Dec 2024 17:40:54 +0000 asID: 200019 IP address blocks: 89.117.64.0/22 maxlen: 24 89.117.104.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 89.117.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 May 2024 16:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:69:8f:ec:47:ed:d6:70:2b:f6:79:df:14:7d:8a:76:3f:44:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 12 17:35:54 2023 GMT Not After : Dec 10 17:40:54 2024 GMT Subject: CN=32C951B6B82BCAE58BBEF1B27D9E116F9477B7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:cd:f9:e0:c0:1d:fa:a7:85:1b:94:8b:d6: 95:de:f6:1b:fb:35:66:e9:64:c8:97:8a:f6:3f:d2: c6:97:c6:8d:b7:ce:c2:09:ae:ac:f3:e9:0f:11:dc: 36:bc:63:92:5e:96:1a:b7:76:ff:26:30:19:5f:86: d7:5e:3e:f3:60:c6:8c:ed:80:20:61:61:d3:bb:12: 5a:6f:d5:9f:a5:4f:2b:b6:40:6e:71:ec:fa:a9:03: 94:cf:bc:31:f8:29:54:a9:c3:01:03:23:b8:f5:64: 52:b8:92:c1:1c:5a:2f:b7:95:c0:65:c7:11:19:56: 1d:65:4f:f3:fc:f6:d8:d7:66:63:c2:67:4c:a0:67: a4:2e:74:a9:26:9a:1e:1c:af:10:96:b6:70:f4:5e: a4:5f:71:a4:11:97:16:d6:7f:2d:d7:2f:23:c1:cf: 3c:82:ef:cb:d7:48:77:22:50:5f:6f:27:54:25:cf: 8a:9d:5e:d9:02:32:d6:65:88:ed:70:c6:a6:c3:23: 66:19:db:27:35:1f:70:00:05:b8:12:30:60:11:69: 17:0f:55:fc:30:69:64:43:34:ef:b9:6c:aa:3a:e2: f8:32:10:91:ae:ea:11:6a:16:6c:4d:f5:40:03:a5: 3f:6e:9a:91:f2:b8:ca:74:d5:20:43:dc:c6:12:bc: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:51:B6:B8:2B:CA:E5:8B:BE:F1:B2:7D:9E:11:6F:94:77:B7:CE X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS200019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.64.0/22 89.117.104.0/22 89.117.132.0/22 89.117.160.0/22 Signature Algorithm: sha256WithRSAEncryption b0:28:3b:ac:8c:31:55:10:76:4a:79:67:e5:31:e8:c1:fc:b6: 2f:50:30:e6:2c:fc:f1:ae:e8:2b:66:5d:f1:23:89:b7:04:a0: c7:40:df:74:e3:b4:a0:4a:7f:99:42:e0:20:41:23:fb:b5:2d: e2:25:0b:e0:c7:e2:a7:ea:54:ae:28:fe:1a:25:9e:fa:c3:5d: dc:fa:d0:7c:66:e4:84:b4:5a:34:b5:65:41:53:33:ce:69:93: e8:93:f4:d1:92:52:1b:ea:0e:1b:18:ec:d2:40:df:df:3d:ff: b6:3f:ff:d3:fd:f2:c0:4a:d7:2c:41:88:1b:78:0d:27:10:f9: a7:91:9a:25:7d:ba:df:ad:48:1e:0b:49:97:4d:71:47:c4:36: 7e:28:4d:0b:66:67:4d:37:d1:ab:17:70:a2:2c:74:d8:b2:19: 98:4c:f3:eb:bb:1b:c1:9e:cd:c4:65:b9:e9:6f:e5:ff:5c:1e: 67:08:d3:72:df:42:68:a1:80:d8:86:09:d5:31:1f:e4:78:51: ee:79:27:b9:11:3a:ee:ea:b5:b4:2f:13:a8:2f:f1:4e:ee:04: 58:38:a7:03:a2:87:e3:19:2d:2c:60:4b:29:c6:51:31:fa:c6: e9:48:56:54:e8:45:1f:19:a4:bd:e4:fd:17:84:a5:8f:e2:03: 04:d0:c9:4a -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUQWmP7Eft1nAr9nnfFH2Kdj9E1LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzEyMTIxNzM1NTRaFw0yNDEyMTAxNzQwNTRaMDMxMTAvBgNV BAMTKDMyQzk1MUI2QjgyQkNBRTU4QkJFRjFCMjdEOUUxMTZGOTQ3N0I3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWis354MAd+qeFG5SL1pXe9hv7 NWbpZMiXivY/0saXxo23zsIJrqzz6Q8R3Da8Y5Jelhq3dv8mMBlfhtdePvNgxozt gCBhYdO7Elpv1Z+lTyu2QG5x7PqpA5TPvDH4KVSpwwEDI7j1ZFK4ksEcWi+3lcBl xxEZVh1lT/P89tjXZmPCZ0ygZ6QudKkmmh4crxCWtnD0XqRfcaQRlxbWfy3XLyPB zzyC78vXSHciUF9vJ1Qlz4qdXtkCMtZliO1wxqbDI2YZ2yc1H3AABbgSMGARaRcP VfwwaWRDNO+5bKo64vgyEJGu6hFqFmxN9UADpT9umpHyuMp01SBD3MYSvClRAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUMslRtrgryuWLvvGyfZ4Rb5R3t84wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwMDAxOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAll1QAMEAll1aAMEAll1 hAMEAll1oDANBgkqhkiG9w0BAQsFAAOCAQEAsCg7rIwxVRB2Snln5THowfy2L1Aw 5iz88a7oK2Zd8SOJtwSgx0DfdOO0oEp/mULgIEEj+7Ut4iUL4Mfip+pUrij+GiWe +sNd3PrQfGbkhLRaNLVlQVMzzmmT6JP00ZJSG+oOGxjs0kDf3z3/tj//0/3ywErX LEGIG3gNJxD5p5GaJX26361IHgtJl01xR8Q2fihNC2ZnTTfRqxdwoix02LIZmEzz 67sbwZ7NxGW56W/l/1weZwjTct9CaKGA2IYJ1TEf5HhR7nknuRE67uq1tC8TqC/x Tu4EWDinA6KH4xktLGBLKcZRMfrG6UhWVOhFHxmkveT9F4Slj+IDBNDJSg== -----END CERTIFICATE-----Generated at Tue May 14 09:08:18 2024 by rpki-client on console-ams.rpki-client.org