$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa File: AS262287.roa (raw, json) Hash identifier: 06lLcLrsMOdnZxrWoUhWk9XvhZIqjGh4EVLiWn+s9xs= Subject key identifier: 88:39:EC:E1:FB:A6:72:7E:DA:1F:32:3F:55:82:29:34:4F:A0:E0:1F Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3E7A21761E50AD43FD3048EE937000EEFF958A4E Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa Signing time: Tue 28 Nov 2023 15:05:06 +0000 ROA not before: Tue 28 Nov 2023 15:00:06 +0000 ROA not after: Tue 26 Nov 2024 15:05:06 +0000 asID: 262287 IP address blocks: 86.38.32.0/24 maxlen: 24 86.38.185.0/24 maxlen: 24 86.38.186.0/24 maxlen: 24 89.116.154.0/24 maxlen: 24 89.116.158.0/24 maxlen: 24 89.116.218.0/24 maxlen: 24 89.116.253.0/24 maxlen: 24 89.117.101.0/24 maxlen: 24 89.117.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 14:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7a:21:76:1e:50:ad:43:fd:30:48:ee:93:70:00:ee:ff:95:8a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Nov 28 15:00:06 2023 GMT Not After : Nov 26 15:05:06 2024 GMT Subject: CN=8839ECE1FBA6727EDA1F323F558229344FA0E01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:96:b5:c9:d6:fb:c9:e9:0a:0b:b5:9e:d6: 3d:34:90:57:87:d8:7e:39:a7:03:98:55:87:8b:3f: 82:18:b2:02:bd:9f:6c:a5:4a:77:0e:1e:8c:c0:7b: b2:79:f5:bc:65:54:96:c7:b9:8c:0d:fd:51:75:87: 13:4b:22:03:06:80:5a:a4:c2:9c:f8:18:0d:2f:45: 43:80:88:3c:b3:a2:11:5d:5f:1c:a3:cb:c8:04:5b: 27:2f:36:55:b3:ef:5b:8b:87:76:18:82:3c:83:88: 8c:24:47:b1:74:fe:5b:2d:f3:9a:47:05:1e:5e:9b: e1:98:ba:50:6f:82:ad:92:ea:08:3d:99:56:9b:90: 0d:06:d9:7a:80:d0:dc:0a:90:87:1c:73:4c:d6:48: 2e:0c:2d:63:d0:24:0b:03:a6:d8:bd:fb:cf:23:38: 81:d4:f4:6f:df:d6:2c:ad:4e:eb:8c:40:70:ce:68: 82:59:e4:7b:56:b2:d9:f9:fb:18:b9:81:d3:7d:a9: 41:67:ab:42:8d:51:45:09:81:52:4f:25:94:83:d8: e8:34:45:d2:5a:11:c0:bf:cc:b5:98:bc:3e:16:ae: 45:c3:37:ff:af:5e:07:53:33:6b:44:24:35:25:b9: 15:f5:31:38:87:06:10:c8:62:1b:55:5e:3c:01:7f: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:EC:E1:FB:A6:72:7E:DA:1F:32:3F:55:82:29:34:4F:A0:E0:1F X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS262287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.32.0/24 86.38.185.0-86.38.186.255 89.116.154.0/24 89.116.158.0/24 89.116.218.0/24 89.116.253.0/24 89.117.101.0/24 89.117.254.0/24 Signature Algorithm: sha256WithRSAEncryption a9:d1:99:99:21:56:ee:89:5c:20:5b:97:09:17:89:01:7e:9d: a8:08:98:ab:fc:6d:e6:6a:cc:e6:e9:92:63:b5:bb:a4:20:99: df:38:50:a6:02:57:51:3d:88:20:88:16:21:2c:46:e4:5b:65: 7b:0a:e1:a4:59:36:82:91:29:6f:40:d6:1c:1b:d6:a2:0a:9e: a4:18:06:27:5c:df:7b:97:c4:4b:17:f2:59:d5:14:d7:f7:29: 6b:e3:26:23:60:82:67:87:cf:c7:8b:6f:77:8f:7b:cf:bb:d7: c6:de:66:73:9e:35:6e:3f:11:f9:a7:6a:c6:47:52:78:59:d0: 25:dc:b3:11:d5:77:8b:64:da:5c:aa:3c:88:9e:49:18:78:d9: 15:72:ee:72:5f:b4:ba:66:db:7b:b1:d8:f4:5f:ea:87:55:96: b9:6b:ac:38:6a:d0:c0:dc:f5:19:c6:e2:fc:70:36:7c:e7:57: c4:69:93:d4:46:e7:cf:0d:c4:99:4a:66:74:bd:bb:5e:6b:b0: 0b:01:8a:85:18:8e:7f:fe:7a:d9:90:9a:39:1c:48:5d:52:86: cc:94:a2:b6:8e:f9:ea:fd:11:0e:39:07:f3:e6:da:e9:88:5f: 12:36:ff:44:a5:a4:18:84:b5:00:da:f4:de:21:d5:56:72:5a: 25:04:b3:f5 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIUPnohdh5QrUP9MEjuk3AA7v+Vik4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzExMjgxNTAwMDZaFw0yNDExMjYxNTA1MDZaMDMxMTAvBgNV BAMTKDg4MzlFQ0UxRkJBNjcyN0VEQTFGMzIzRjU1ODIyOTM0NEZBMEUwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46Ja1ydb7yekKC7We1j00kFeH 2H45pwOYVYeLP4IYsgK9n2ylSncOHozAe7J59bxlVJbHuYwN/VF1hxNLIgMGgFqk wpz4GA0vRUOAiDyzohFdXxyjy8gEWycvNlWz71uLh3YYgjyDiIwkR7F0/lst85pH BR5em+GYulBvgq2S6gg9mVabkA0G2XqA0NwKkIccc0zWSC4MLWPQJAsDpti9+88j OIHU9G/f1iytTuuMQHDOaIJZ5HtWstn5+xi5gdN9qUFnq0KNUUUJgVJPJZSD2Og0 RdJaEcC/zLWYvD4WrkXDN/+vXgdTM2tEJDUluRX1MTiHBhDIYhtVXjwBf3DnAgMB AAGjggJhMIICXTAdBgNVHQ4EFgQUiDns4fumcn7aHzI/VYIpNE+g4B8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzI2MjI4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjBRBggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAFYmIDAMAwQAVia5AwQA Via6AwQAWXSaAwQAWXSeAwQAWXTaAwQAWXT9AwQAWXVlAwQAWXX+MA0GCSqGSIb3 DQEBCwUAA4IBAQCp0ZmZIVbuiVwgW5cJF4kBfp2oCJir/G3maszm6ZJjtbukIJnf OFCmAldRPYggiBYhLEbkW2V7CuGkWTaCkSlvQNYcG9aiCp6kGAYnXN97l8RLF/JZ 1RTX9ylr4yYjYIJnh8/Hi293j3vPu9fG3mZznjVuPxH5p2rGR1J4WdAl3LMR1XeL ZNpcqjyInkkYeNkVcu5yX7S6Ztt7sdj0X+qHVZa5a6w4atDA3PUZxuL8cDZ851fE aZPURufPDcSZSmZ0vbtea7ALAYqFGI5//nrZkJo5HEhdUobMlKK2jvnq/REOOQfz 5trpiF8SNv9EpaQYhLUA2vTeIdVWclolBLP1 -----END CERTIFICATE-----Generated at Wed May 1 18:10:54 2024 by rpki-client on console-ams.rpki-client.org