$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212609.roa File: AS212609.roa (raw, json) Hash identifier: h0u3SMmslMVdfZDfS9klaanYyBtidsfoipILxuDXC9Q= Subject key identifier: B8:95:FD:F8:41:2F:EA:CC:C1:58:48:95:AC:7C:EB:C6:79:B6:87:E8 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 178582D5BA0849D3A6DEB1E25F0745DB2F290A8A Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212609.roa Signing time: Sat 28 Oct 2023 00:00:07 +0000 ROA not before: Fri 27 Oct 2023 23:55:07 +0000 ROA not after: Sat 26 Oct 2024 00:00:07 +0000 asID: 212609 IP address blocks: 82.140.183.0/24 maxlen: 24 86.38.24.0/24 maxlen: 24 89.116.242.0/24 maxlen: 24 89.117.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:85:82:d5:ba:08:49:d3:a6:de:b1:e2:5f:07:45:db:2f:29:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 27 23:55:07 2023 GMT Not After : Oct 26 00:00:07 2024 GMT Subject: CN=B895FDF8412FEACCC1584895AC7CEBC679B687E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:1f:c0:13:44:77:b0:10:0d:6d:dd:4a:f7: 6d:fc:69:df:55:c0:6b:47:6e:b5:93:35:5a:cf:0e: a5:0c:e4:c3:34:08:48:de:52:bc:69:a1:e7:e8:a2: 2b:63:b3:92:c9:cc:5b:90:54:38:82:cf:88:34:69: ff:ef:4f:de:bf:f4:2d:86:24:28:19:21:e2:e7:73: 28:b2:86:cb:7d:4e:3a:96:d5:db:2d:6a:90:f4:08: a8:f0:14:ba:6b:90:cc:04:b7:9c:93:f4:9c:c2:f3: 15:93:5a:51:bb:80:76:2b:99:cc:f2:17:6d:66:d2: 4b:fc:0d:b8:b2:3a:62:ad:8c:72:a4:15:73:4f:70: 4d:01:17:37:6a:7e:60:93:63:bc:6d:4a:a2:1c:ec: 54:9d:5d:fb:9c:35:9e:fa:63:66:8e:8a:e4:b4:9b: f5:b2:1d:71:94:ef:67:af:c0:79:04:2b:24:85:51: da:82:83:08:32:57:c0:14:5b:00:24:33:98:af:ca: 51:00:a2:3e:25:fe:a9:c3:db:66:ee:de:25:e9:7d: 1d:a7:67:42:0a:de:d1:4d:8b:d3:1f:df:35:81:bb: 23:64:a0:1f:e5:92:1f:43:c1:31:64:75:82:6a:f2: 30:b6:b6:fd:bf:0b:24:96:99:05:7c:6e:96:07:e7: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:95:FD:F8:41:2F:EA:CC:C1:58:48:95:AC:7C:EB:C6:79:B6:87:E8 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS212609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.140.183.0/24 86.38.24.0/24 89.116.242.0/24 89.117.5.0/24 Signature Algorithm: sha256WithRSAEncryption a2:d5:0f:a4:9f:cb:0c:1f:e8:c3:69:00:bb:3c:cc:d7:90:dd: 72:92:0a:b9:00:32:7c:ff:69:7b:c9:40:e1:72:12:76:2d:80: fd:03:9d:e9:7b:c1:93:37:5e:7e:30:8c:f6:5d:7d:b8:99:82: a5:e4:da:6f:bf:7c:ac:63:56:8c:bd:83:19:5a:40:2c:4d:72: 11:94:5f:6e:42:88:e9:f9:52:31:8f:21:45:83:cf:1c:ee:62: bb:5c:e8:33:43:d4:af:6f:f9:ba:87:45:fe:c6:c0:a1:bd:7d: 0e:c4:d6:4c:3e:2e:45:ac:fe:bd:d3:e7:65:b6:b9:8c:2c:88: ca:d2:b6:67:19:93:ce:97:59:95:23:6a:4f:38:f9:e8:6f:0f: 38:94:64:1d:f1:e3:c2:f5:d7:db:92:29:3a:0c:31:f7:7f:08: a6:e5:75:9e:91:18:45:04:12:af:9a:27:17:8f:51:92:58:13: a8:6e:31:71:88:d3:82:fd:28:45:cc:76:e1:ef:f6:bd:f8:a0: 2b:9c:69:dc:92:5e:a0:d0:e6:10:4f:c0:a5:51:f5:4b:4c:dc: 29:3a:42:9e:8e:ab:c1:8a:cb:3d:3d:20:aa:4e:b1:40:8c:74: ee:7f:2c:f1:3f:fd:36:d9:06:8e:62:fa:39:47:d4:83:48:26: d2:4d:d6:e8 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUF4WC1boISdOm3rHiXwdF2y8pCoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzEwMjcyMzU1MDdaFw0yNDEwMjYwMDAwMDdaMDMxMTAvBgNV BAMTKEI4OTVGREY4NDEyRkVBQ0NDMTU4NDg5NUFDN0NFQkM2NzlCNjg3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/h/AE0R3sBANbd1K9238ad9V wGtHbrWTNVrPDqUM5MM0CEjeUrxpoefooitjs5LJzFuQVDiCz4g0af/vT96/9C2G JCgZIeLncyiyhst9TjqW1dstapD0CKjwFLprkMwEt5yT9JzC8xWTWlG7gHYrmczy F21m0kv8DbiyOmKtjHKkFXNPcE0BFzdqfmCTY7xtSqIc7FSdXfucNZ76Y2aOiuS0 m/WyHXGU72evwHkEKySFUdqCgwgyV8AUWwAkM5ivylEAoj4l/qnD22bu3iXpfR2n Z0IK3tFNi9Mf3zWBuyNkoB/lkh9DwTFkdYJq8jC2tv2/CySWmQV8bpYH52AXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUuJX9+EEv6szBWEiVrHzrxnm2h+gwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIxMjYwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFKMtwMEAFYmGAMEAFl0 8gMEAFl1BTANBgkqhkiG9w0BAQsFAAOCAQEAotUPpJ/LDB/ow2kAuzzM15DdcpIK uQAyfP9pe8lA4XISdi2A/QOd6XvBkzdefjCM9l19uJmCpeTab798rGNWjL2DGVpA LE1yEZRfbkKI6flSMY8hRYPPHO5iu1zoM0PUr2/5uodF/sbAob19DsTWTD4uRaz+ vdPnZba5jCyIytK2ZxmTzpdZlSNqTzj56G8POJRkHfHjwvXX25IpOgwx938IpuV1 npEYRQQSr5onF49RklgTqG4xcYjTgv0oRcx24e/2vfigK5xp3JJeoNDmEE/ApVH1 S0zcKTpCno6rwYrLPT0gqk6xQIx07n8s8T/9NtkGjmL6OUfUg0gm0k3W6A== -----END CERTIFICATE-----Generated at Sat May 18 22:27:18 2024 by rpki-client on console-ams.rpki-client.org