$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa File: AS211439.roa (raw, json) Hash identifier: aaOUTc8FeYEcUUIq+vbDlUJT3snCitPHSCC53OazJCM= Subject key identifier: BB:8C:01:B2:52:43:76:AD:8B:82:0B:72:CB:0F:62:23:81:BD:9E:6D Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 5F2BD2EFBD864CD57937B46D523FCF577E71398C Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa Signing time: Wed 24 Jan 2024 15:51:35 +0000 ROA not before: Wed 24 Jan 2024 15:46:35 +0000 ROA not after: Wed 22 Jan 2025 15:51:35 +0000 asID: 211439 IP address blocks: 86.38.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 13:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2b:d2:ef:bd:86:4c:d5:79:37:b4:6d:52:3f:cf:57:7e:71:39:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 24 15:46:35 2024 GMT Not After : Jan 22 15:51:35 2025 GMT Subject: CN=BB8C01B2524376AD8B820B72CB0F622381BD9E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:63:ca:27:d6:f9:86:26:f7:db:ec:6d:82: 1f:0c:ee:b6:f5:24:a3:4a:07:02:cc:d3:1d:53:76: 60:e4:84:74:5e:b5:c2:15:45:69:19:ce:ce:57:30: c6:7e:bc:fc:66:92:90:2f:8b:a5:d0:2a:e2:9e:6e: ca:1e:8c:30:9b:5c:75:61:d4:9e:ac:93:5e:d8:20: 89:d3:59:b3:89:51:74:89:e1:93:50:b6:2a:32:d1: 1c:df:81:6a:f0:a7:0e:fb:22:2b:31:72:45:3e:e8: d1:0f:1f:f6:8b:d0:76:dc:ff:88:bd:5c:bf:31:c3: 95:b0:0a:37:6b:bd:65:7a:51:9a:c8:a1:c7:ef:7b: c3:64:21:62:7e:ea:0b:3f:ae:cd:90:2c:2d:90:23: f3:7f:6a:45:0c:a7:2e:dd:23:e3:ca:af:ab:5d:c6: e7:62:35:c3:c2:9e:3f:87:f2:e2:cf:37:bc:2c:35: 9f:01:fd:5c:38:6e:de:b5:ae:cc:34:95:4f:09:fe: 89:87:03:48:78:36:cf:89:b1:ce:13:e8:7d:ab:cb: d7:12:dd:d6:89:93:52:79:a5:df:07:cb:04:8a:e6: 6c:61:ff:90:fe:74:61:93:15:eb:d4:17:b2:a8:b5: 4d:98:4d:e9:25:80:b6:be:4f:3d:c8:c3:58:21:42: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8C:01:B2:52:43:76:AD:8B:82:0B:72:CB:0F:62:23:81:BD:9E:6D X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS211439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.24.0/24 Signature Algorithm: sha256WithRSAEncryption a6:3b:44:3e:fe:da:fb:4d:43:80:84:d5:9d:c3:72:34:6f:05: 96:96:85:a8:77:bf:d2:99:e8:d7:e1:48:00:02:73:1c:a0:9d: 2c:86:23:d2:51:ce:50:13:68:5a:7e:ee:4e:fd:4c:db:75:c8: 72:61:4f:73:9b:a6:10:b6:3e:a5:13:4d:24:7c:6b:75:78:e4: 00:35:6d:4e:0a:c1:23:4e:17:71:02:1c:d0:67:ca:26:ab:f3: 35:bb:1e:a5:67:b9:79:52:9f:ae:be:9b:d6:a3:4e:da:1d:30: 34:93:80:d6:e0:d8:65:67:8c:19:d6:fa:81:3d:b9:e4:3e:fa: f9:f9:2d:e0:47:d6:cd:1d:8e:57:52:98:33:ca:c5:e8:2c:f4: 77:da:bc:7a:9e:65:7f:ba:b9:7f:9f:24:b4:54:c5:db:6f:02: fb:d6:bc:77:b4:b0:b4:9e:b0:13:38:89:3f:59:58:d5:5f:5e: 76:98:dd:5c:4e:d3:35:2f:cb:25:91:1f:62:74:1f:99:32:24: 9d:d1:ff:62:46:8d:58:10:28:b3:ac:28:b4:70:8b:f1:83:f6: e8:b1:71:95:59:41:bc:18:5f:98:63:d6:ca:66:50:36:bb:b3: e8:b1:46:54:c7:7c:9d:a5:f9:33:3d:ca:22:de:c6:ce:f8:dd: dd:d4:70:b6 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUXyvS772GTNV5N7RtUj/PV35xOYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDAxMjQxNTQ2MzVaFw0yNTAxMjIxNTUxMzVaMDMxMTAvBgNV BAMTKEJCOEMwMUIyNTI0Mzc2QUQ4QjgyMEI3MkNCMEY2MjIzODFCRDlFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vmPKJ9b5hib32+xtgh8M7rb1 JKNKBwLM0x1TdmDkhHRetcIVRWkZzs5XMMZ+vPxmkpAvi6XQKuKebsoejDCbXHVh 1J6sk17YIInTWbOJUXSJ4ZNQtioy0RzfgWrwpw77IisxckU+6NEPH/aL0Hbc/4i9 XL8xw5WwCjdrvWV6UZrIocfve8NkIWJ+6gs/rs2QLC2QI/N/akUMpy7dI+PKr6td xudiNcPCnj+H8uLPN7wsNZ8B/Vw4bt61rsw0lU8J/omHA0h4Ns+Jsc4T6H2ry9cS 3daJk1J5pd8HywSK5mxh/5D+dGGTFevUF7KotU2YTeklgLa+Tz3Iw1ghQm/VAgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUu4wBslJDdq2Lggtyyw9iI4G9nm0wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxMTQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYmGDANBgkqhkiG9w0B AQsFAAOCAQEApjtEPv7a+01DgITVncNyNG8FlpaFqHe/0pno1+FIAAJzHKCdLIYj 0lHOUBNoWn7uTv1M23XIcmFPc5umELY+pRNNJHxrdXjkADVtTgrBI04XcQIc0GfK JqvzNbsepWe5eVKfrr6b1qNO2h0wNJOA1uDYZWeMGdb6gT255D76+fkt4EfWzR2O V1KYM8rF6Cz0d9q8ep5lf7q5f58ktFTF228C+9a8d7SwtJ6wEziJP1lY1V9edpjd XE7TNS/LJZEfYnQfmTIkndH/YkaNWBAos6wotHCL8YP26LFxlVlBvBhfmGPWymZQ Nruz6LFGVMd8naX5Mz3KIt7Gzvjd3dRwtg== -----END CERTIFICATE-----Generated at Sun May 19 15:45:22 2024 by rpki-client on console-fra.rpki-client.org