$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa File: AS204372.roa (raw, json) Hash identifier: o3/JIDraRQFzowJoVC0Rg/3vL8Se7j9tB9uMM/wRvmQ= Subject key identifier: C7:C1:C7:46:32:9E:BF:42:AD:D2:D5:8B:E8:A2:54:70:43:AC:51:B4 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3B9B94B4BCB2CD25565037CF4063333C2E5F9D29 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa Signing time: Mon 18 Dec 2023 21:05:08 +0000 ROA not before: Mon 18 Dec 2023 21:00:08 +0000 ROA not after: Mon 16 Dec 2024 21:05:08 +0000 asID: 204372 IP address blocks: 89.116.127.0/24 maxlen: 24 89.117.70.0/24 maxlen: 24 89.117.71.0/24 maxlen: 24 89.117.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 13:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9b:94:b4:bc:b2:cd:25:56:50:37:cf:40:63:33:3c:2e:5f:9d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 18 21:00:08 2023 GMT Not After : Dec 16 21:05:08 2024 GMT Subject: CN=C7C1C746329EBF42ADD2D58BE8A2547043AC51B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:a9:cb:0e:4c:d6:c1:df:3f:d0:ad:21:bf: fd:dd:54:47:5b:c1:94:30:69:f4:5b:3b:21:cc:07: 27:79:19:b4:ba:e6:be:d0:1e:d3:31:28:f4:b6:16: c7:66:30:9e:9c:d8:c7:4a:91:07:27:87:88:4e:89: da:2f:18:dd:3c:6e:d8:fc:56:b3:a6:4e:b8:63:80: 33:c5:f6:69:32:dc:6e:4e:65:5b:74:88:12:4b:05: cc:c2:72:a8:66:a4:2d:0c:ab:76:42:6c:8e:49:5a: 1d:e6:5e:a8:9f:5d:48:cd:71:f3:39:c0:14:ee:dd: 54:3d:ec:3d:99:36:11:6e:b2:b4:3e:fa:ba:0d:7b: f0:02:3c:64:14:c8:3a:da:28:6a:59:7a:7b:08:0e: 76:14:08:67:c4:c2:50:da:bf:2b:37:6b:5e:c4:41: 37:d4:58:b9:b6:8a:74:ac:48:43:0b:30:a2:87:26: 6e:1a:fc:f3:e8:5c:6f:1b:0c:9e:96:60:ef:06:24: bc:16:de:5b:cf:5a:ca:93:42:fa:10:27:f0:63:00: de:0a:77:8d:0d:e5:a7:e8:ed:45:9b:ea:3c:1f:c4: c2:e0:92:b9:8a:e1:7d:c7:27:2d:f5:de:08:a5:f0: 47:ec:d8:0b:68:e5:e7:66:d9:b3:fb:4a:13:bd:64: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C1:C7:46:32:9E:BF:42:AD:D2:D5:8B:E8:A2:54:70:43:AC:51:B4 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS204372.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.127.0/24 89.117.70.0/23 89.117.87.0/24 Signature Algorithm: sha256WithRSAEncryption c0:f5:4c:0a:ab:da:e5:1d:1f:98:e0:97:e0:0e:e5:eb:08:ea: ac:39:93:1d:89:c8:19:78:2e:ac:7e:b6:1c:3f:51:2e:5f:00: d1:dd:8b:2f:da:12:be:6e:d6:98:f9:8e:bc:64:b9:18:19:6e: c9:a0:b8:2e:48:5b:3d:38:9f:03:0e:e0:71:37:bb:96:03:b1: 92:ff:a6:f6:ba:60:a4:69:2c:9f:56:29:0c:5e:fc:09:cf:f9: 3e:0f:10:81:3f:58:6a:b5:d4:47:70:d8:bc:12:74:f6:c7:e3: 5b:c6:af:21:1e:fa:7e:92:3f:19:27:a2:41:6c:38:a2:fb:75: 8e:0c:e1:e3:be:c0:c5:00:f6:d1:9f:dc:f2:72:c0:2b:d6:dc: 45:87:b6:50:fc:e1:17:00:d2:b0:88:e1:7f:9a:85:db:5f:cf: 9e:ee:9b:c9:57:50:15:c1:82:2a:b6:c7:1b:a4:6c:20:cb:37: 2b:87:40:ad:ae:24:4f:bc:84:e1:01:b9:38:e5:ae:5a:b3:a6: e4:01:fc:df:a9:6f:4c:8e:ea:be:7d:70:40:45:6e:42:ea:fd: a5:fc:df:96:37:fb:3c:41:05:50:70:87:cb:fe:8d:7c:89:d4: 04:1f:d9:1f:77:88:de:50:8b:b8:1b:41:b5:88:c6:4f:38:23: d5:d7:ef:27 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUO5uUtLyyzSVWUDfPQGMzPC5fnSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzEyMTgyMTAwMDhaFw0yNDEyMTYyMTA1MDhaMDMxMTAvBgNV BAMTKEM3QzFDNzQ2MzI5RUJGNDJBREQyRDU4QkU4QTI1NDcwNDNBQzUxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPDanLDkzWwd8/0K0hv/3dVEdb wZQwafRbOyHMByd5GbS65r7QHtMxKPS2FsdmMJ6c2MdKkQcnh4hOidovGN08btj8 VrOmTrhjgDPF9mky3G5OZVt0iBJLBczCcqhmpC0Mq3ZCbI5JWh3mXqifXUjNcfM5 wBTu3VQ97D2ZNhFusrQ++roNe/ACPGQUyDraKGpZensIDnYUCGfEwlDavys3a17E QTfUWLm2inSsSEMLMKKHJm4a/PPoXG8bDJ6WYO8GJLwW3lvPWsqTQvoQJ/BjAN4K d40N5afo7UWb6jwfxMLgkrmK4X3HJy313gil8Efs2Ato5edm2bP7ShO9ZJFLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUx8HHRjKev0Kt0tWL6KJUcEOsUbQwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNDM3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFl0fwMEAVl1RgMEAFl1 VzANBgkqhkiG9w0BAQsFAAOCAQEAwPVMCqva5R0fmOCX4A7l6wjqrDmTHYnIGXgu rH62HD9RLl8A0d2LL9oSvm7WmPmOvGS5GBluyaC4LkhbPTifAw7gcTe7lgOxkv+m 9rpgpGksn1YpDF78Cc/5Pg8QgT9YarXUR3DYvBJ09sfjW8avIR76fpI/GSeiQWw4 ovt1jgzh477AxQD20Z/c8nLAK9bcRYe2UPzhFwDSsIjhf5qF21/Pnu6byVdQFcGC KrbHG6RsIMs3K4dAra4kT7yE4QG5OOWuWrOm5AH836lvTI7qvn1wQEVuQur9pfzf ljf7PEEFUHCHy/6NfInUBB/ZH3eI3lCLuBtBtYjGTzgj1dfvJw== -----END CERTIFICATE-----Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org