$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: ODhhnk8zqC4p6VU7pGEo+jZm24J8STORCROfq+hTuk8= Subject key identifier: 8C:22:C0:EF:BC:7C:D9:4F:A0:7C:BA:FF:65:87:9F:7C:8F:C8:CA:7F Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3921A96AA6E72E62BBC1550C9A254D66A3C33F77 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS2914.roa Signing time: Tue 07 Feb 2023 15:49:41 +0000 ROA not before: Tue 07 Feb 2023 15:44:41 +0000 ROA not after: Tue 06 Feb 2024 15:49:41 +0000 asID: 2914 IP address blocks: 86.38.180.0/23 maxlen: 24 89.116.46.0/23 maxlen: 24 89.116.72.0/23 maxlen: 24 89.116.74.0/23 maxlen: 24 89.117.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.crl rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/B6E126F80FD68622BA733D13D8E6ABFABCEFBC95.mft rsync://rpki.ripe.net/repository/DEFAULT/tuEm-A_WhiK6cz0T2Oar-rzvvJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Mar 2023 04:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:21:a9:6a:a6:e7:2e:62:bb:c1:55:0c:9a:25:4d:66:a3:c3:3f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Feb 7 15:44:41 2023 GMT Not After : Feb 6 15:49:41 2024 GMT Subject: CN=8C22C0EFBC7CD94FA07CBAFF65879F7C8FC8CA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:3e:f0:0c:a6:2b:1f:44:a7:a8:42:02:e3: 8f:fb:4e:09:b7:be:07:55:ec:ab:32:5b:9f:a8:63: 8b:39:99:4e:56:88:d5:d7:3c:4e:08:8f:23:ba:2d: 25:ed:83:d5:0a:ec:f7:d1:d3:46:d4:fc:d2:ab:d6: 83:d4:7e:e7:67:4e:cf:ed:62:cb:68:66:40:28:98: 84:a9:49:d5:b2:85:2d:fe:c4:b4:48:53:b7:69:59: a7:aa:c3:8c:5d:bd:56:3e:dd:40:ab:bb:41:dc:e1: 36:ca:b8:96:7c:7e:e9:c5:17:a5:86:ef:9a:b8:de: 98:5a:f9:e7:43:4a:c2:82:4d:d9:b6:d2:a3:39:b2: 6a:1a:80:8f:4f:f6:2c:e1:ac:41:aa:cb:e9:5b:ab: 69:5a:a3:6a:ce:4f:c4:72:de:c6:13:1e:e6:d3:3c: 79:c3:57:ae:81:7c:8c:10:d3:c5:fc:51:98:2e:65: e8:7f:aa:42:12:7e:12:7c:54:67:3e:ec:ed:71:d2: f3:71:73:67:50:7f:65:f7:a8:18:db:49:2c:a1:20: b4:52:7d:93:b7:5e:14:7c:16:91:a8:31:2c:0f:ea: 99:db:08:75:df:ee:92:69:b6:0f:f3:16:85:4e:1d: 70:4a:78:f2:07:c5:aa:ad:60:f6:d4:cd:1a:35:92: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:22:C0:EF:BC:7C:D9:4F:A0:7C:BA:FF:65:87:9F:7C:8F:C8:CA:7F X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.telecentras.lt/repo/lt-lrtc-ca/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.180.0/23 89.116.46.0/23 89.116.72.0/22 89.117.142.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:5b:e3:15:f1:93:52:3e:aa:17:b3:39:05:b1:d7:9a:68:73: 29:35:3b:cc:97:c9:48:d6:6c:6a:89:91:0e:4a:e1:16:e7:8c: 4e:a0:37:90:bf:ab:11:54:20:c2:f4:dd:3c:f5:91:17:6e:a7: 0a:91:d8:62:13:1c:df:a3:f5:eb:23:d9:50:d6:59:21:7c:da: 50:5e:42:47:58:97:a2:e2:31:37:47:1a:88:32:2c:2d:75:f6: a9:99:41:90:b5:55:44:1a:f7:f6:f3:89:9a:a7:7a:f2:7b:df: 29:10:96:55:3d:f2:b7:32:d4:dc:d7:87:e8:7d:81:13:86:7c: ca:8b:1e:6d:12:27:8a:71:c4:b8:a5:2b:af:e8:ff:35:6c:9e: a6:78:57:ac:e3:39:d2:ab:56:64:86:6d:8c:66:6f:84:7a:be: b0:5a:10:6d:93:fc:13:45:be:fa:a1:f6:ba:70:76:cd:ae:85: 42:18:00:a8:75:cd:68:9b:75:ef:d0:a8:a1:c6:10:d6:9d:df: 58:0f:dc:da:6e:30:40:44:a2:e9:8c:ba:c1:b6:14:2c:db:d0: 2a:73:ea:5a:95:88:89:24:89:14:36:f8:e4:fb:6f:bd:5e:3d: b1:15:3c:3c:b7:3f:47:86:07:40:31:36:3e:f5:4f:73:3b:25: 30:02:d8:42 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUOSGpaqbnLmK7wVUMmiVNZqPDP3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzAyMDcxNTQ0NDFaFw0yNDAyMDYxNTQ5NDFaMDMxMTAvBgNV BAMTKDhDMjJDMEVGQkM3Q0Q5NEZBMDdDQkFGRjY1ODc5RjdDOEZDOENBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FT7wDKYrH0SnqEIC44/7Tgm3 vgdV7KsyW5+oY4s5mU5WiNXXPE4IjyO6LSXtg9UK7PfR00bU/NKr1oPUfudnTs/t YstoZkAomISpSdWyhS3+xLRIU7dpWaeqw4xdvVY+3UCru0Hc4TbKuJZ8funFF6WG 75q43pha+edDSsKCTdm20qM5smoagI9P9izhrEGqy+lbq2lao2rOT8Ry3sYTHubT PHnDV66BfIwQ08X8UZguZeh/qkISfhJ8VGc+7O1x0vNxc2dQf2X3qBjbSSyhILRS fZO3XhR8FpGoMSwP6pnbCHXf7pJptg/zFoVOHXBKePIHxaqtYPbUzRo1kgARAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUjCLA77x82U+gfLr/ZYeffI/Iyn8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDB2BggrBgEFBQcB AQRqMGgwZgYIKwYBBQUHMAKGWnJzeW5jOi8vcnBraS50ZWxlY2VudHJhcy5sdC9y ZXBvL2x0LWxydGMtY2EvMy9EMzQ2MDY5NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5 OTQ4RUYyNzlDLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5j Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzUyOGEyMThmLWFkMjgtNDBkMi1i ZDdmLTM1MGVhZGEzZDcwNS0wLzAvQVMyOTE0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVia0AwQBWXQu AwQCWXRIAwQBWXWOMA0GCSqGSIb3DQEBCwUAA4IBAQCNW+MV8ZNSPqoXszkFsdea aHMpNTvMl8lI1mxqiZEOSuEW54xOoDeQv6sRVCDC9N089ZEXbqcKkdhiExzfo/Xr I9lQ1lkhfNpQXkJHWJei4jE3RxqIMiwtdfapmUGQtVVEGvf284map3rye98pEJZV PfK3MtTc14fofYEThnzKix5tEieKccS4pSuv6P81bJ6meFes4znSq1Zkhm2MZm+E er6wWhBtk/wTRb76ofa6cHbNroVCGACodc1om3Xv0KihxhDWnd9YD9zabjBARKLp jLrBthQs29Aqc+palYiJJIkUNvjk+2+9Xj2xFTw8tz9HhgdAMTY+9U9zOyUwAthC -----END CERTIFICATE-----Generated at Wed Mar 15 11:44:57 2023 by rpki-client on console-fra.rpki-client.org