$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: UaiUymEheWxLqtchN8f8739N7CG7cvTMn5rsloIBEJ4= Subject key identifier: B9:96:23:29:AA:43:7C:82:FF:93:CE:FB:66:FD:B7:23:C7:1F:CA:20 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 29C6C742744508C4E6493BDD8C02F7DE268F4B3D Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa Signing time: Tue 30 Jan 2024 12:36:08 +0000 ROA not before: Tue 30 Jan 2024 12:31:08 +0000 ROA not after: Tue 28 Jan 2025 12:36:08 +0000 asID: 7029 IP address blocks: 86.38.4.0/23 maxlen: 24 86.38.184.0/23 maxlen: 24 86.38.186.0/23 maxlen: 24 89.116.242.0/23 maxlen: 24 89.116.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 May 2024 10:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c6:c7:42:74:45:08:c4:e6:49:3b:dd:8c:02:f7:de:26:8f:4b:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 30 12:31:08 2024 GMT Not After : Jan 28 12:36:08 2025 GMT Subject: CN=B9962329AA437C82FF93CEFB66FDB723C71FCA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:38:6c:1f:28:6b:0b:16:46:68:cc:c1:14:02: 3c:e1:d1:6f:89:eb:8f:f9:b4:31:6d:ba:ec:bf:b3: 77:31:37:f8:80:cb:7c:ff:0d:60:81:c3:63:72:4b: d3:60:a3:e5:a1:55:16:e2:4c:e2:78:d0:b2:d0:71: 11:74:b2:f7:c0:fa:a0:77:1f:ea:01:27:e2:24:70: 0f:5e:aa:be:4c:eb:ce:17:b5:a2:ce:23:fb:58:52: 53:ec:dd:30:a9:31:70:d6:07:18:0c:9d:48:10:3e: f2:e5:96:8c:81:ff:8c:6d:aa:88:73:92:3a:84:a9: b5:ef:f3:28:f2:cd:99:6a:57:eb:1c:f5:de:5a:78: fb:7f:85:40:f5:54:b7:71:25:44:9d:cd:58:ca:8e: 05:3f:06:9b:42:de:93:da:0d:e9:19:32:50:08:d3: 9b:45:94:88:ae:87:58:8f:72:01:1d:e7:22:b9:53: 68:f7:1f:44:75:61:d8:c9:22:f2:11:06:c8:de:d7: 35:aa:0f:9b:b0:5b:0d:9b:c0:9e:4f:12:50:54:8e: 03:62:6a:92:bd:c7:f9:6c:9c:0c:2c:a9:af:a1:ba: db:f6:0c:40:fc:63:8f:be:7f:f3:6c:b1:02:06:a8: 1d:e4:9b:25:5c:15:fc:91:88:ac:66:a9:5e:70:e7: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:23:29:AA:43:7C:82:FF:93:CE:FB:66:FD:B7:23:C7:1F:CA:20 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.4.0/23 86.38.184.0/22 89.116.242.0/23 89.116.246.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:c9:53:25:e9:5f:cd:40:71:5a:a6:d5:74:2e:1a:17:8f:af: c9:39:c9:c6:d8:a3:59:f7:11:2d:ee:38:1b:89:08:ab:c8:aa: f8:1b:3c:f0:9b:95:49:b6:a1:0d:de:3a:7b:b7:c0:7b:43:55: 58:ab:78:37:72:16:59:db:b5:6e:77:31:30:db:f5:02:9b:f5: 73:d5:eb:0a:3e:b9:e7:09:4a:9a:4f:d2:03:18:56:5f:95:6b: 8e:8d:a4:c3:98:6c:a2:f1:74:7d:5f:0d:de:b0:e2:c0:49:6e: a3:2d:b6:96:96:14:3e:ac:0f:84:45:47:1a:ec:af:23:79:f7: db:fb:a4:14:c6:5e:a7:cf:0c:4d:21:bf:d8:b7:f4:8b:8f:5a: 8e:51:8e:58:91:db:73:69:6d:c6:78:a7:17:92:55:37:6f:ce: ce:23:03:75:24:6e:d3:c5:a7:80:95:70:38:53:44:88:bb:6e: 97:8e:f2:d9:da:91:3b:58:97:8f:cf:84:88:91:e2:3d:06:20: 1a:ba:c3:73:fa:83:e9:7c:1d:38:d2:5c:be:8f:d0:3d:8b:5d: bd:66:e0:76:40:3c:5e:d3:5b:c3:f9:fd:2a:58:1e:59:1a:83: fe:db:b3:43:6e:69:94:77:7a:4d:4b:1a:8f:02:1f:51:fb:41: 5c:cf:bc:32 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKcbHQnRFCMTmSTvdjAL33iaPSz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDAxMzAxMjMxMDhaFw0yNTAxMjgxMjM2MDhaMDMxMTAvBgNV BAMTKEI5OTYyMzI5QUE0MzdDODJGRjkzQ0VGQjY2RkRCNzIzQzcxRkNBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVOGwfKGsLFkZozMEUAjzh0W+J 64/5tDFtuuy/s3cxN/iAy3z/DWCBw2NyS9Ngo+WhVRbiTOJ40LLQcRF0svfA+qB3 H+oBJ+IkcA9eqr5M684XtaLOI/tYUlPs3TCpMXDWBxgMnUgQPvLlloyB/4xtqohz kjqEqbXv8yjyzZlqV+sc9d5aePt/hUD1VLdxJUSdzVjKjgU/BptC3pPaDekZMlAI 05tFlIiuh1iPcgEd5yK5U2j3H0R1YdjJIvIRBsje1zWqD5uwWw2bwJ5PElBUjgNi apK9x/lsnAwsqa+hutv2DED8Y4++f/NssQIGqB3kmyVcFfyRiKxmqV5w52CXAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUuZYjKapDfIL/k877Zv23I8cfyiAwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFWJgQDBAJWJrgDBAFZdPID BAFZdPYwDQYJKoZIhvcNAQELBQADggEBAJ7JUyXpX81AcVqm1XQuGhePr8k5ycbY o1n3ES3uOBuJCKvIqvgbPPCblUm2oQ3eOnu3wHtDVVireDdyFlnbtW53MTDb9QKb 9XPV6wo+uecJSppP0gMYVl+Va46NpMOYbKLxdH1fDd6w4sBJbqMttpaWFD6sD4RF RxrsryN599v7pBTGXqfPDE0hv9i39IuPWo5RjliR23NpbcZ4pxeSVTdvzs4jA3Uk btPFp4CVcDhTRIi7bpeO8tnakTtYl4/PhIiR4j0GIBq6w3P6g+l8HTjSXL6P0D2L Xb1m4HZAPF7TW8P5/SpYHlkag/7bs0NuaZR3ek1LGo8CH1H7QVzPvDI= -----END CERTIFICATE-----Generated at Tue May 28 19:28:17 2024 by rpki-client on console-ams.rpki-client.org