$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20648.roa File: AS20648.roa (raw, json) Hash identifier: 2wj9Fswehn6H5OMP9tSSWnPC/+8/2sLhiZklEMrn7UY= Subject key identifier: 6E:B4:FB:5C:E4:B3:AE:47:96:55:B9:D7:AE:DC:B6:CF:5E:2C:E3:A7 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 24CDE169D08B69D5F5B98A889037FFAE6EDB6F78 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20648.roa Signing time: Fri 28 Mar 2025 08:16:19 +0000 ROA not before: Fri 28 Mar 2025 08:11:19 +0000 ROA not after: Fri 27 Mar 2026 08:16:19 +0000 asID: 20648 IP address blocks: 86.38.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 08:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cd:e1:69:d0:8b:69:d5:f5:b9:8a:88:90:37:ff:ae:6e:db:6f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Mar 28 08:11:19 2025 GMT Not After : Mar 27 08:16:19 2026 GMT Subject: CN=6EB4FB5CE4B3AE479655B9D7AEDCB6CF5E2CE3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:d5:2a:97:31:17:90:a4:ba:2f:fa:a4:14: 89:ae:f7:fb:6a:1c:4c:82:46:bf:51:46:48:96:79: ad:03:b7:75:87:b1:b7:e1:1f:8b:5b:bd:0c:4b:2d: 5c:87:d5:be:a4:06:2a:ef:a2:34:b2:9b:9c:95:2b: a2:1c:ed:f8:ea:19:14:39:77:2a:76:2b:51:c3:e2: ea:a5:4c:dc:d6:c0:54:ca:f1:88:ed:e1:0c:74:7b: f1:a1:3b:97:3b:1a:3c:89:33:40:97:05:d1:91:e8: 00:be:db:06:8f:f9:28:43:89:95:a9:da:f9:3a:f8: f5:70:d0:cd:02:dd:c4:b4:2a:01:96:a4:da:c2:6d: c8:8f:99:97:a7:54:16:20:23:99:7e:ae:cf:9c:b6: e9:8d:8e:65:58:c1:40:c9:dc:f0:5b:43:00:2a:6e: 09:8e:69:42:99:aa:f2:6b:4a:e8:ab:4c:4c:bf:23: 0d:2d:21:ed:0b:32:b9:55:88:25:e5:87:e3:43:ac: 45:08:ef:49:4b:23:b3:15:cd:69:32:91:d3:f1:ac: f0:39:5f:4f:e4:1e:a9:08:f5:6a:b6:ff:15:64:36: 40:a3:ca:e7:e3:a9:b3:7f:3e:8b:f8:9f:09:87:db: 90:0e:46:68:7e:3d:c2:66:1f:5e:e7:8e:03:53:6d: 42:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B4:FB:5C:E4:B3:AE:47:96:55:B9:D7:AE:DC:B6:CF:5E:2C:E3:A7 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS20648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.249.0/24 Signature Algorithm: sha256WithRSAEncryption 49:0a:a7:a1:a4:b8:3c:54:bd:51:f3:84:7c:f9:a9:2a:7b:31: 5d:4a:35:16:e8:5e:23:ef:71:ea:3b:3e:93:94:ec:7e:7e:1d: b3:57:b6:6a:31:94:78:04:a8:5f:12:e6:9e:d7:56:82:55:35: eb:a5:75:ed:cc:fe:8d:ac:8d:ec:04:2f:fe:fd:cf:ef:2f:d4: 43:28:30:9a:7e:30:81:8c:01:63:70:0d:b7:d7:30:0a:d3:89: 3f:f0:8b:2c:4c:c2:44:05:2a:f7:87:6c:0c:7b:94:f4:0a:31: 97:bc:ba:d3:48:80:fc:23:33:72:3c:ad:a5:24:04:eb:dc:f3: 4f:75:7c:6a:9a:19:47:69:bf:cb:53:fd:0d:7a:bf:6c:46:1a: 20:90:c3:f0:06:33:da:10:2d:8a:01:56:95:c1:f3:b7:b8:26: 4c:f9:50:8a:53:db:ea:96:4a:14:35:21:78:a1:f7:c8:60:22: b7:2f:aa:8d:e5:b6:56:b3:a1:49:23:75:de:b2:b0:93:4e:12: a1:0d:45:39:ac:ff:08:34:54:06:22:c9:b3:e4:1f:92:bc:7e: 3a:fd:e4:9f:4a:f2:87:98:88:1a:08:d9:8b:63:26:ef:86:65: 82:7c:12:42:58:de:fa:86:64:e1:8d:51:f5:78:2e:4a:cc:60: cc:11:92:b4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUJM3hadCLadX1uYqIkDf/rm7bb3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTAzMjgwODExMTlaFw0yNjAzMjcwODE2MTlaMDMxMTAvBgNV BAMTKDZFQjRGQjVDRTRCM0FFNDc5NjU1QjlEN0FFRENCNkNGNUUyQ0UzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GtUqlzEXkKS6L/qkFImu9/tq HEyCRr9RRkiWea0Dt3WHsbfhH4tbvQxLLVyH1b6kBirvojSym5yVK6Ic7fjqGRQ5 dyp2K1HD4uqlTNzWwFTK8Yjt4Qx0e/GhO5c7GjyJM0CXBdGR6AC+2waP+ShDiZWp 2vk6+PVw0M0C3cS0KgGWpNrCbciPmZenVBYgI5l+rs+ctumNjmVYwUDJ3PBbQwAq bgmOaUKZqvJrSuirTEy/Iw0tIe0LMrlViCXlh+NDrEUI70lLI7MVzWkykdPxrPA5 X0/kHqkI9Wq2/xVkNkCjyufjqbN/Pov4nwmH25AORmh+PcJmH17njgNTbULDAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUbrT7XOSzrkeWVbnXrty2z14s46cwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVib5MA0GCSqGSIb3DQEB CwUAA4IBAQBJCqehpLg8VL1R84R8+akqezFdSjUW6F4j73HqOz6TlOx+fh2zV7Zq MZR4BKhfEuae11aCVTXrpXXtzP6NrI3sBC/+/c/vL9RDKDCafjCBjAFjcA231zAK 04k/8IssTMJEBSr3h2wMe5T0CjGXvLrTSID8IzNyPK2lJATr3PNPdXxqmhlHab/L U/0Ner9sRhogkMPwBjPaEC2KAVaVwfO3uCZM+VCKU9vqlkoUNSF4offIYCK3L6qN 5bZWs6FJI3XesrCTThKhDUU5rP8INFQGIsmz5B+SvH46/eSfSvKHmIgaCNmLYybv hmWCfBJCWN76hmThjVH1eC5KzGDMEZK0 -----END CERTIFICATE-----Generated at Fri Apr 4 20:19:05 2025 by rpki-client