$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: mWxBaJRw7FgyGjysJlNItdM/j+8HNZJp1S9izb0yMUE= Subject key identifier: FF:36:D3:D0:0A:A3:AB:4C:85:D9:95:72:38:B5:C2:9B:33:4B:72:F2 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 17E42EDC7F61E26904398E3B8046ADE102714BDF Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa Signing time: Sun 22 Sep 2024 14:51:16 +0000 ROA not before: Sun 22 Sep 2024 14:46:16 +0000 ROA not after: Sun 21 Sep 2025 14:51:16 +0000 asID: 42831 IP address blocks: 89.116.148.0/24 maxlen: 24 89.117.70.0/24 maxlen: 24 89.117.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 02:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e4:2e:dc:7f:61:e2:69:04:39:8e:3b:80:46:ad:e1:02:71:4b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Sep 22 14:46:16 2024 GMT Not After : Sep 21 14:51:16 2025 GMT Subject: CN=FF36D3D00AA3AB4C85D9957238B5C29B334B72F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:b8:a3:eb:a6:f5:b1:3c:88:f0:17:f2:fb: 32:b4:99:e9:05:f5:60:40:8e:51:f1:36:9d:9c:ef: 49:6c:80:41:47:4a:4f:e4:fb:5f:44:ad:b9:a7:2d: bc:00:8d:da:2b:f3:38:b1:2c:4f:a6:56:63:fd:74: 86:01:81:d2:be:23:1f:82:e3:e2:d0:f2:05:d0:a8: 5f:4c:f6:59:cc:7b:cc:1c:ed:a1:56:5f:bd:f4:d7: 81:5c:f4:39:a5:3a:67:74:29:11:43:85:28:1c:7f: 06:1e:a9:52:1d:82:72:1b:c7:eb:1c:4b:a7:8f:eb: 70:7c:75:37:6f:07:44:37:1c:e1:dc:d4:c8:c8:2d: 59:ff:57:c2:06:5b:a4:08:18:de:23:71:18:9b:20: b8:bc:43:c8:4c:ae:bf:54:29:33:96:89:cb:8a:51: 33:c9:56:43:7b:35:ed:51:b2:8f:08:24:e2:69:e1: a7:e1:cf:3a:7f:db:7a:75:b0:ad:66:19:ba:4b:3b: 17:bc:c4:92:20:b0:d1:6f:6e:9e:fd:9c:ba:eb:c6: 0d:4b:c5:96:f9:01:5b:c5:30:80:84:4d:88:88:88: 42:4a:15:e3:f7:3b:4d:14:3e:4a:1e:11:6d:b4:c6: ca:5f:7e:07:0c:21:39:ec:d8:c6:7a:ef:48:ba:19: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:36:D3:D0:0A:A3:AB:4C:85:D9:95:72:38:B5:C2:9B:33:4B:72:F2 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.148.0/24 89.117.70.0/23 Signature Algorithm: sha256WithRSAEncryption c6:09:13:42:e1:3a:d7:fc:ee:ac:a0:10:6f:43:22:be:59:7f: 9d:8f:fc:f3:24:c4:6a:fb:4e:ed:1e:42:b3:ba:13:4f:8d:ba: 8f:34:32:14:69:88:75:b0:16:3f:e3:c1:0b:36:99:4b:64:5c: ce:b9:1b:bb:99:b9:88:8a:87:0f:df:94:dd:40:1d:12:8b:d6: f5:1b:28:5c:5c:87:24:e4:87:2f:2d:ea:9b:c7:59:d5:81:22: 37:d5:62:34:e6:5c:67:81:15:b0:4b:5b:ff:fc:41:98:e1:bd: d7:c9:78:23:5c:14:b3:da:fb:d3:81:83:6f:48:2b:84:66:31: 6c:6c:fd:1c:fe:7c:25:62:16:60:44:81:e7:39:2b:7b:ee:59: 94:1d:01:27:72:2d:ad:7a:4e:ab:af:df:54:54:bd:40:12:7a: ce:3c:37:e8:92:e0:49:96:eb:ef:cf:a5:4a:df:99:b5:a2:9a: d0:e0:63:40:6e:63:0f:17:8d:b5:7b:46:40:63:80:41:2a:f1: 18:95:e0:79:55:ba:f2:fb:70:f1:4b:fa:7f:c4:a7:2b:cf:17: 68:e8:a3:03:ab:96:3e:54:45:81:09:c9:3e:31:7a:94:a3:0d: 58:01:0e:f2:ec:89:18:1e:d4:8d:5f:d2:09:86:e1:fb:3b:e9: b0:aa:44:26 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF+Qu3H9h4mkEOY47gEat4QJxS98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDA5MjIxNDQ2MTZaFw0yNTA5MjExNDUxMTZaMDMxMTAvBgNV BAMTKEZGMzZEM0QwMEFBM0FCNEM4NUQ5OTU3MjM4QjVDMjlCMzM0QjcyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2Lij66b1sTyI8Bfy+zK0mekF 9WBAjlHxNp2c70lsgEFHSk/k+19ErbmnLbwAjdor8zixLE+mVmP9dIYBgdK+Ix+C 4+LQ8gXQqF9M9lnMe8wc7aFWX73014Fc9DmlOmd0KRFDhSgcfwYeqVIdgnIbx+sc S6eP63B8dTdvB0Q3HOHc1MjILVn/V8IGW6QIGN4jcRibILi8Q8hMrr9UKTOWicuK UTPJVkN7Ne1Rso8IJOJp4afhzzp/23p1sK1mGbpLOxe8xJIgsNFvbp79nLrrxg1L xZb5AVvFMICETYiIiEJKFeP3O00UPkoeEW20xspffgcMITns2MZ670i6GXx9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/zbT0Aqjq0yF2ZVyOLXCmzNLcvIwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQyODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXSUAwQBWXVGMA0GCSqG SIb3DQEBCwUAA4IBAQDGCRNC4TrX/O6soBBvQyK+WX+dj/zzJMRq+07tHkKzuhNP jbqPNDIUaYh1sBY/48ELNplLZFzOuRu7mbmIiocP35TdQB0Si9b1GyhcXIck5Icv Leqbx1nVgSI31WI05lxngRWwS1v//EGY4b3XyXgjXBSz2vvTgYNvSCuEZjFsbP0c /nwlYhZgRIHnOSt77lmUHQEnci2tek6rr99UVL1AEnrOPDfokuBJluvvz6VK35m1 oprQ4GNAbmMPF421e0ZAY4BBKvEYleB5Vbry+3DxS/p/xKcrzxdo6KMDq5Y+VEWB Cck+MXqUow1YAQ7y7IkYHtSNX9IJhuH7O+mwqkQm -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org