$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa File: AS207152.roa (raw, json) Hash identifier: F6n72yWsegRpIg+DGqpH3kysU3ibZmZQHKmv7ycaKss= Subject key identifier: DE:60:AB:69:03:DB:4F:A4:AB:E9:DA:50:DB:14:C6:E4:88:C2:23:E0 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 7B3565424363932043A56449919B788B5A38DF51 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa Signing time: Tue 30 Jan 2024 12:40:40 +0000 ROA not before: Tue 30 Jan 2024 12:35:40 +0000 ROA not after: Tue 28 Jan 2025 12:40:40 +0000 asID: 207152 IP address blocks: 86.38.184.0/23 maxlen: 24 86.38.186.0/23 maxlen: 24 86.38.246.0/23 maxlen: 24 89.116.172.0/23 maxlen: 24 89.116.210.0/23 maxlen: 24 89.117.88.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 13:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:35:65:42:43:63:93:20:43:a5:64:49:91:9b:78:8b:5a:38:df:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 30 12:35:40 2024 GMT Not After : Jan 28 12:40:40 2025 GMT Subject: CN=DE60AB6903DB4FA4ABE9DA50DB14C6E488C223E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:50:95:f1:c1:d2:ef:31:e2:24:c7:a6:f1: a9:0e:a8:f7:c5:1c:53:a0:41:ed:9a:db:a9:19:04: 85:7b:ef:49:53:da:5e:5d:e1:42:ed:ee:fd:78:d0: d5:d9:c0:7e:09:4a:a7:a4:96:d3:78:77:05:f9:67: 4b:c5:ec:37:c5:5d:64:5d:fe:7d:d0:de:0e:5d:59: 7c:8d:4b:48:9e:a0:85:27:26:d1:00:62:1b:51:a6: 74:39:89:23:1e:bf:7d:ef:e1:9a:07:33:f9:35:c4: 90:06:1b:ae:9d:1c:60:25:82:ef:53:41:4c:fd:c4: 12:13:8c:21:3e:fc:9a:fe:60:55:95:23:73:49:11: 1b:e4:bb:91:1c:f9:60:f5:d6:1c:a4:bc:ef:96:c4: 9a:65:71:a0:f1:24:6b:59:0a:fc:ee:40:ca:d5:40: 4e:da:0f:59:6d:af:1f:ef:24:db:66:0f:b5:9c:6e: 08:58:c2:5d:9d:c5:b1:f9:3a:b1:96:c9:0b:47:58: a6:19:63:e4:c3:23:d5:68:2b:f4:18:f1:d3:dd:97: cf:e3:2e:71:80:1e:6c:b1:fb:24:3e:96:26:e8:58: c7:53:15:4f:39:4a:fc:7c:0d:b4:76:5e:cd:d6:74: c2:4c:fd:a5:13:b4:fd:d0:ec:d0:19:d3:f2:70:4f: 2e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:60:AB:69:03:DB:4F:A4:AB:E9:DA:50:DB:14:C6:E4:88:C2:23:E0 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.184.0/22 86.38.246.0/23 89.116.172.0/23 89.116.210.0/23 89.117.88.0/22 89.117.132.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:b7:c8:38:9a:3e:7e:94:d6:bb:36:51:d1:17:0e:64:ed:93: cc:cd:81:60:ee:f7:ba:24:56:bb:70:fe:fb:d3:de:2e:a2:53: f8:0d:80:67:b7:30:2a:f3:07:21:44:60:64:7c:95:6c:29:8d: b9:43:d3:79:ac:3e:95:1f:53:22:b8:0b:b9:c7:49:e7:fe:93: 8b:fd:25:b4:e3:aa:62:dc:b3:25:31:3d:d6:81:6e:03:f6:ba: f2:28:a8:cc:a1:ce:7c:99:71:67:77:25:48:bd:3a:f8:e7:0b: ef:42:23:31:3d:60:54:a1:17:96:9b:94:2e:56:a9:ea:c0:3a: e0:07:96:a5:21:80:14:14:c1:fd:a0:ea:30:12:27:e8:33:1f: 6b:9b:9c:8a:91:fa:4d:35:ae:ec:f9:ac:78:15:2c:d8:82:df: f8:52:a8:a7:25:b1:76:2b:8a:f7:60:e5:05:67:18:64:7c:29: 35:65:e7:19:64:b7:8f:45:6e:13:49:0d:ee:cc:8c:c1:66:2f: 0f:3d:c9:a9:a4:0f:a6:8a:31:25:87:bf:d3:fa:7f:e5:6c:82: c6:aa:d0:a5:89:87:34:60:c7:f9:a8:5c:1d:13:05:b9:4b:1d: 73:72:5b:aa:d5:87:9a:34:20:d5:55:90:17:c6:f6:44:ac:5d: c2:f0:6b:05 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUezVlQkNjkyBDpWRJkZt4i1o431EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDAxMzAxMjM1NDBaFw0yNTAxMjgxMjQwNDBaMDMxMTAvBgNV BAMTKERFNjBBQjY5MDNEQjRGQTRBQkU5REE1MERCMTRDNkU0ODhDMjIzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBu1CV8cHS7zHiJMem8akOqPfF HFOgQe2a26kZBIV770lT2l5d4ULt7v140NXZwH4JSqekltN4dwX5Z0vF7DfFXWRd /n3Q3g5dWXyNS0ieoIUnJtEAYhtRpnQ5iSMev33v4ZoHM/k1xJAGG66dHGAlgu9T QUz9xBITjCE+/Jr+YFWVI3NJERvku5Ec+WD11hykvO+WxJplcaDxJGtZCvzuQMrV QE7aD1ltrx/vJNtmD7WcbghYwl2dxbH5OrGWyQtHWKYZY+TDI9VoK/QY8dPdl8/j LnGAHmyx+yQ+liboWMdTFU85Svx8DbR2Xs3WdMJM/aUTtP3Q7NAZ0/JwTy5VAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQU3mCraQPbT6Sr6dpQ2xTG5IjCI+AwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNzE1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAlYmuAMEAVYm9gMEAVl0 rAMEAVl00gMEAll1WAMEAll1hDANBgkqhkiG9w0BAQsFAAOCAQEAK7fIOJo+fpTW uzZR0RcOZO2TzM2BYO73uiRWu3D++9PeLqJT+A2AZ7cwKvMHIURgZHyVbCmNuUPT eaw+lR9TIrgLucdJ5/6Ti/0ltOOqYtyzJTE91oFuA/a68iiozKHOfJlxZ3clSL06 +OcL70IjMT1gVKEXlpuULlap6sA64AeWpSGAFBTB/aDqMBIn6DMfa5ucipH6TTWu 7PmseBUs2ILf+FKopyWxdiuK92DlBWcYZHwpNWXnGWS3j0VuE0kN7syMwWYvDz3J qaQPpooxJYe/0/p/5WyCxqrQpYmHNGDH+ahcHRMFuUsdc3JbqtWHmjQg1VWQF8b2 RKxdwvBrBQ== -----END CERTIFICATE-----Generated at Sun May 19 17:04:57 2024 by rpki-client on console-ams.rpki-client.org