$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS210732.roa File: AS210732.roa (raw, json) Hash identifier: 5Yp6yDtLibBVF/yeSgjaF1XTZF976RJ4NJIjQwv+YIE= Subject key identifier: 03:55:5B:A6:51:98:95:4D:33:79:A5:CB:64:9B:52:A4:6F:BE:86:D0 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 639948CEDAE6AE00629DABCA0E0485E061C9EEDD Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS210732.roa Signing time: Tue 01 Apr 2025 20:06:13 +0000 ROA not before: Tue 01 Apr 2025 20:01:13 +0000 ROA not after: Tue 31 Mar 2026 20:06:13 +0000 asID: 210732 IP address blocks: 89.117.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 12 Apr 2025 23:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:99:48:ce:da:e6:ae:00:62:9d:ab:ca:0e:04:85:e0:61:c9:ee:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Apr 1 20:01:13 2025 GMT Not After : Mar 31 20:06:13 2026 GMT Subject: CN=03555BA65198954D3379A5CB649B52A46FBE86D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:f6:c4:83:20:28:ab:53:9d:f1:b8:85:e2: 7b:19:e5:6d:22:d3:88:e4:53:ce:e7:8a:a1:92:6f: 80:49:cc:67:23:f9:38:87:22:62:47:c4:36:7e:5a: 45:bb:ad:58:2f:eb:a2:86:06:a0:df:d4:2b:70:ad: 7a:fa:07:ad:c0:ea:39:f3:77:e6:54:7b:3a:e8:e4: 2e:0f:3b:dc:b4:76:94:c3:72:af:bb:87:8b:46:bb: a2:a3:7f:45:46:84:c4:37:e0:3a:15:18:20:ca:db: b3:6c:d3:96:36:0d:5e:f0:f6:ab:07:98:c5:dc:89: ac:30:4c:dc:af:d4:71:a5:03:b5:ed:d7:f6:da:00: b5:d2:ea:65:dd:99:6a:66:55:31:08:bd:99:6a:9b: 1f:06:60:e8:eb:c7:38:06:61:08:01:0c:b6:0e:e4: 3e:7b:13:49:d0:27:a1:5d:de:1d:a8:70:e3:b3:19: ff:cc:49:a2:36:23:67:6f:b7:03:66:28:f6:df:51: 58:38:ad:99:43:8b:39:cd:36:cf:16:c5:b7:73:77: 96:c7:25:75:a3:48:5a:bf:a0:ae:7e:da:d8:03:55: 77:c2:6a:39:67:6b:15:74:21:0e:ea:49:f4:fe:3e: 4e:a1:fd:0b:c8:e1:f3:fc:a5:48:32:22:72:64:df: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:55:5B:A6:51:98:95:4D:33:79:A5:CB:64:9B:52:A4:6F:BE:86:D0 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS210732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.87.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:f3:a7:a8:07:0f:5d:0a:39:d0:a6:da:a7:72:37:ca:d2:5c: 03:93:86:42:16:44:f9:e4:31:91:88:9d:8c:8d:64:2b:d7:d8: 79:c4:75:9c:25:4d:20:ed:f0:5c:28:de:ec:f3:d9:e1:a0:6d: 60:0e:68:17:d8:4b:56:7f:91:57:ef:94:d2:f5:39:9a:96:25: e5:1a:60:29:db:41:12:ff:a7:b0:14:32:1c:52:e0:b7:77:d0: 18:65:19:fa:a3:85:6c:28:f0:81:3e:a1:8b:1c:9f:ba:38:91: e1:a1:0a:df:c4:93:48:55:f6:06:c0:3f:50:39:f2:87:f2:49: e3:4c:a6:b2:21:d3:39:43:47:b5:f2:24:7c:47:d3:b4:50:ef: 61:a3:53:12:1f:0b:05:85:38:cb:62:6e:eb:04:91:8e:4f:a1: 2c:26:ae:5e:d9:ff:36:f9:fa:03:9e:22:3e:99:ea:36:91:fb: c7:49:64:7b:92:4e:fa:35:a0:d2:42:dd:17:f8:6d:06:7f:39: 65:78:04:9e:3f:03:f9:b2:14:cc:51:05:01:7b:dc:8a:a1:5c: c4:ef:1f:50:43:51:86:89:c2:8d:66:69:8a:88:a1:72:ac:7f: 5e:c3:25:c4:df:d1:58:ae:70:93:17:92:4c:2d:db:df:32:f7: ee:ec:6c:d9 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUY5lIztrmrgBinavKDgSF4GHJ7t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTA0MDEyMDAxMTNaFw0yNjAzMzEyMDA2MTNaMDMxMTAvBgNV BAMTKDAzNTU1QkE2NTE5ODk1NEQzMzc5QTVDQjY0OUI1MkE0NkZCRTg2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95fbEgyAoq1Od8biF4nsZ5W0i 04jkU87niqGSb4BJzGcj+TiHImJHxDZ+WkW7rVgv66KGBqDf1CtwrXr6B63A6jnz d+ZUezro5C4PO9y0dpTDcq+7h4tGu6Kjf0VGhMQ34DoVGCDK27Ns05Y2DV7w9qsH mMXciawwTNyv1HGlA7Xt1/baALXS6mXdmWpmVTEIvZlqmx8GYOjrxzgGYQgBDLYO 5D57E0nQJ6Fd3h2ocOOzGf/MSaI2I2dvtwNmKPbfUVg4rZlDiznNNs8Wxbdzd5bH JXWjSFq/oK5+2tgDVXfCajlnaxV0IQ7qSfT+Pk6h/QvI4fP8pUgyInJk3/ldAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUA1VbplGYlU0zeaXLZJtSpG++htAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxMDczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl1VzANBgkqhkiG9w0B AQsFAAOCAQEAXvOnqAcPXQo50Kbap3I3ytJcA5OGQhZE+eQxkYidjI1kK9fYecR1 nCVNIO3wXCje7PPZ4aBtYA5oF9hLVn+RV++U0vU5mpYl5RpgKdtBEv+nsBQyHFLg t3fQGGUZ+qOFbCjwgT6hixyfujiR4aEK38STSFX2BsA/UDnyh/JJ40ymsiHTOUNH tfIkfEfTtFDvYaNTEh8LBYU4y2Ju6wSRjk+hLCauXtn/Nvn6A54iPpnqNpH7x0lk e5JO+jWg0kLdF/htBn85ZXgEnj8D+bIUzFEFAXvciqFcxO8fUENRhonCjWZpioih cqx/XsMlxN/RWK5wkxeSTC3b3zL37uxs2Q== -----END CERTIFICATE-----Generated at Sat Apr 12 17:29:08 2025 by rpki-client