$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: J6AOgjaJoGGV7JYU5XyV1cW5gjOwIbhE4pNsnuNepUs= Subject key identifier: 91:23:65:D1:BF:CD:B5:04:8E:97:3F:BC:4C:31:1C:76:EA:4D:EC:B0 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 368438ABCADC8579F0F7A3FAA8779F076438DCD3 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209043.roa Signing time: Sat 28 Oct 2023 00:00:08 +0000 ROA not before: Fri 27 Oct 2023 23:55:08 +0000 ROA not after: Sat 26 Oct 2024 00:00:08 +0000 asID: 209043 IP address blocks: 89.116.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 13:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:84:38:ab:ca:dc:85:79:f0:f7:a3:fa:a8:77:9f:07:64:38:dc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 27 23:55:08 2023 GMT Not After : Oct 26 00:00:08 2024 GMT Subject: CN=912365D1BFCDB5048E973FBC4C311C76EA4DECB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:00:b7:f7:8e:19:64:37:a7:ab:f7:70:d2:94: ad:73:f4:9b:95:c1:d2:aa:7f:f0:af:32:95:a7:0d: f7:90:7a:ae:e5:94:75:fd:87:52:d0:6b:3a:3e:a1: 50:81:9d:62:8f:2e:57:6a:06:35:9a:04:92:6f:3e: 66:52:c8:e6:30:16:1a:8f:24:99:ee:af:e5:ab:95: fe:0c:de:6e:b4:db:3f:0f:85:f0:e4:15:d2:5e:fe: fe:44:7b:af:a4:dd:ac:f4:37:d7:3a:f6:8a:9d:67: 07:fd:29:10:8a:0d:df:5e:ee:53:00:3f:ec:57:73: e3:3c:d2:53:c1:e2:89:43:5e:31:7d:2f:63:74:e3: ff:a5:64:58:2f:f8:0d:61:4e:ca:ba:52:37:f6:90: 99:6a:6e:56:c2:f8:8e:21:9f:f7:5a:3c:5a:85:0d: fd:63:fb:73:7d:47:22:57:34:90:38:be:83:92:f4: b2:d3:f5:17:e0:99:28:14:67:8c:e7:28:3f:e3:8b: 8f:7b:4a:85:3d:80:85:cc:1a:9f:4b:6b:55:65:4d: 9c:90:f2:2f:46:38:d5:f2:a8:90:42:e5:bd:d8:24: 8a:d3:5f:40:5f:cf:4d:50:f4:7a:47:98:cb:d3:37: 0c:e1:19:ba:e3:f9:58:73:97:18:63:24:f8:fb:25: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:23:65:D1:BF:CD:B5:04:8E:97:3F:BC:4C:31:1C:76:EA:4D:EC:B0 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.137.0/24 Signature Algorithm: sha256WithRSAEncryption a9:03:67:58:a5:9b:1b:9f:34:48:6b:f8:13:c2:fd:dd:43:28: b4:9e:c7:83:90:f6:43:a6:64:8f:8c:58:0e:0b:74:5e:40:c9: 16:94:33:b4:e1:74:bd:48:fa:05:70:3e:3c:13:6b:12:83:9f: b4:a6:28:0b:61:c3:61:80:d8:30:4d:78:4a:2e:99:3f:49:81: 59:98:22:7a:3a:52:f0:5e:52:8a:e2:a7:e1:a3:a6:3f:e2:63: b2:57:93:a1:32:ea:6f:7e:a2:0d:67:a6:52:53:77:3b:19:b2: 4a:a4:8d:3a:84:55:ed:22:c0:82:ec:ea:b2:03:e2:6b:f5:ff: 13:d0:57:d1:34:d1:c2:01:13:00:52:50:86:4f:5b:c2:6f:cd: a2:8f:98:9c:91:89:cb:76:36:05:8d:b6:75:8e:3b:65:fe:11: 8f:72:bc:fe:16:fa:18:fd:2d:ac:7f:18:63:ae:5e:da:e5:ee: f6:dd:3e:cd:ad:8a:ce:29:fc:9c:cd:4b:11:02:0e:62:59:0f: 73:8d:36:29:d8:0a:f6:da:e3:e8:0d:f5:bb:7d:07:2c:a8:2d: d4:0b:41:d4:ad:fa:95:d9:7a:4c:ee:ce:03:71:d3:61:17:83: 9b:d1:44:5b:29:ff:95:56:7b:3f:cc:aa:60:63:6b:27:1a:2a: de:e5:f1:1a -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUNoQ4q8rchXnw96P6qHefB2Q43NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzEwMjcyMzU1MDhaFw0yNDEwMjYwMDAwMDhaMDMxMTAvBgNV BAMTKDkxMjM2NUQxQkZDREI1MDQ4RTk3M0ZCQzRDMzExQzc2RUE0REVDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzALf3jhlkN6er93DSlK1z9JuV wdKqf/CvMpWnDfeQeq7llHX9h1LQazo+oVCBnWKPLldqBjWaBJJvPmZSyOYwFhqP JJnur+Wrlf4M3m602z8PhfDkFdJe/v5Ee6+k3az0N9c69oqdZwf9KRCKDd9e7lMA P+xXc+M80lPB4olDXjF9L2N04/+lZFgv+A1hTsq6Ujf2kJlqblbC+I4hn/daPFqF Df1j+3N9RyJXNJA4voOS9LLT9RfgmSgUZ4znKD/ji497SoU9gIXMGp9La1VlTZyQ 8i9GONXyqJBC5b3YJIrTX0Bfz01Q9HpHmMvTNwzhGbrj+VhzlxhjJPj7JVlrAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUkSNl0b/NtQSOlz+8TDEcdupN7LAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwOTA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0iTANBgkqhkiG9w0B AQsFAAOCAQEAqQNnWKWbG580SGv4E8L93UMotJ7Hg5D2Q6Zkj4xYDgt0XkDJFpQz tOF0vUj6BXA+PBNrEoOftKYoC2HDYYDYME14Si6ZP0mBWZgiejpS8F5SiuKn4aOm P+JjsleToTLqb36iDWemUlN3OxmySqSNOoRV7SLAguzqsgPia/X/E9BX0TTRwgET AFJQhk9bwm/Noo+YnJGJy3Y2BY22dY47Zf4Rj3K8/hb6GP0trH8YY65e2uXu9t0+ za2Kzin8nM1LEQIOYlkPc402KdgK9trj6A31u30HLKgt1AtB1K36ldl6TO7OA3HT YReDm9FEWyn/lVZ7P8yqYGNrJxoq3uXxGg== -----END CERTIFICATE-----Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org