$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa File: 33372e312e3232362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 4C7TB7dGixh8aai4OzI5nDVvFrdjcGzKjaUGpZz29kE= Subject key identifier: 5D:0D:15:83:CD:39:75:24:4D:EC:7B:8E:D1:77:4B:1C:F5:5B:1E:E7 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 45E95CEE21A019C41B287FFD1DB0751A34C5CB26 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa Signing time: Fri 17 Jan 2025 08:03:02 +0000 ROA not before: Fri 17 Jan 2025 07:58:02 +0000 ROA not after: Fri 16 Jan 2026 08:03:02 +0000 asID: 834 IP address blocks: 37.1.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Feb 2025 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e9:5c:ee:21:a0:19:c4:1b:28:7f:fd:1d:b0:75:1a:34:c5:cb:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jan 17 07:58:02 2025 GMT Not After : Jan 16 08:03:02 2026 GMT Subject: CN=5D0D1583CD3975244DEC7B8ED1774B1CF55B1EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:af:a1:47:76:a9:72:f9:ab:90:28:f3:92: 00:c4:03:3e:94:fb:ed:95:b4:6c:14:ab:8f:22:21: 70:1f:ac:0d:9c:01:64:da:ac:c0:86:a6:9b:69:49: d8:85:4e:cf:b6:fc:39:51:82:d0:b6:97:46:6f:a9: 6a:bc:3c:e8:2d:d6:c8:0e:d2:8c:55:de:ed:04:9d: f9:2d:47:18:a9:eb:a2:00:0b:f2:15:25:96:45:98: bb:18:b3:9e:98:83:87:d2:63:7c:87:ee:34:9f:b9: 9b:2c:9d:48:41:d4:63:a3:f7:c1:9f:7e:97:bc:72: 51:45:0a:e0:82:34:5c:d3:54:ba:f4:88:79:78:4e: 27:9f:83:b8:b3:20:6e:a9:2d:db:60:45:fc:bd:33: bf:4e:3a:81:37:b4:1f:3a:75:f8:50:9e:7b:b1:d3: 84:23:97:5f:89:e3:89:3a:1b:98:60:ff:94:bc:70: 48:fa:70:48:54:98:a6:63:85:6d:38:3e:e3:5c:bf: 9d:23:1f:36:aa:41:6f:74:83:d4:7c:3d:4c:eb:e6: be:30:e2:9e:4f:6d:f9:ab:97:3a:61:44:47:d7:03: 16:3f:63:30:b4:c0:ae:93:08:ef:81:bf:00:b1:53: 2c:a6:1b:8a:ab:58:a7:5f:00:e5:4c:bc:bb:bf:d6: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:15:83:CD:39:75:24:4D:EC:7B:8E:D1:77:4B:1C:F5:5B:1E:E7 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.226.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:7e:35:fb:b1:b3:82:70:0a:99:e2:98:89:33:6c:cd:09:a8: b8:82:69:d1:e9:64:1e:d1:68:fc:ae:d7:a8:96:38:33:52:2d: 2c:6c:38:b9:c7:9c:71:cb:4c:9c:ce:54:89:f8:ec:54:38:75: d4:30:11:96:c5:1c:70:4c:12:5a:94:b9:be:1d:37:74:96:8d: ca:b2:3c:a0:f8:83:1a:36:da:8c:76:f7:c9:d4:7b:98:f4:fa: 0a:d2:de:b3:b4:38:e7:66:61:5d:59:34:9a:88:60:64:46:8f: c9:2f:bd:0c:7f:0a:3a:e1:70:bc:8c:08:27:d3:e1:75:b8:cb: a2:6a:a1:79:89:81:ef:2d:be:8e:84:c7:a9:f2:98:76:2e:32: d3:9c:13:ab:ef:5d:6c:cb:26:49:0f:50:32:55:39:5d:7a:4d: 55:d5:a5:e8:c4:c8:74:57:dc:b4:36:98:93:e7:79:36:63:91: e0:2a:50:c8:e4:a7:b1:31:ad:30:42:9e:69:78:3c:42:b7:d5: 72:53:73:42:03:c7:3a:ff:0f:80:25:87:64:f6:ad:6c:b9:aa: b7:db:6d:7b:95:c9:02:6f:8c:c4:16:aa:2b:83:04:39:be:5d: be:27:cf:43:c9:ec:a1:b0:f0:af:b8:98:00:30:de:75:20:14: e6:e3:81:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIURelc7iGgGcQbKH/9HbB1GjTFyyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTAxMTcwNzU4MDJaFw0yNjAxMTYwODAzMDJaMDMxMTAvBgNV BAMTKDVEMEQxNTgzQ0QzOTc1MjQ0REVDN0I4RUQxNzc0QjFDRjU1QjFFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEa+hR3apcvmrkCjzkgDEAz6U ++2VtGwUq48iIXAfrA2cAWTarMCGpptpSdiFTs+2/DlRgtC2l0ZvqWq8POgt1sgO 0oxV3u0EnfktRxip66IAC/IVJZZFmLsYs56Yg4fSY3yH7jSfuZssnUhB1GOj98Gf fpe8clFFCuCCNFzTVLr0iHl4Tiefg7izIG6pLdtgRfy9M79OOoE3tB86dfhQnnux 04Qjl1+J44k6G5hg/5S8cEj6cEhUmKZjhW04PuNcv50jHzaqQW90g9R8PUzr5r4w 4p5PbfmrlzphREfXAxY/YzC0wK6TCO+BvwCxUyymG4qrWKdfAOVMvLu/1gbPAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUXQ0Vg805dSRN7HuO0XdLHPVbHucwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGbBggrBgEFBQcBCwSBjjCBizCBiAYIKwYBBQUHMAuGfHJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzMzNzJlMzEyZTMyMzIzNjJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACUB4jANBgkqhkiG9w0BAQsFAAOC AQEAXX41+7GzgnAKmeKYiTNszQmouIJp0elkHtFo/K7XqJY4M1ItLGw4uceccctM nM5UifjsVDh11DARlsUccEwSWpS5vh03dJaNyrI8oPiDGjbajHb3ydR7mPT6CtLe s7Q452ZhXVk0mohgZEaPyS+9DH8KOuFwvIwIJ9PhdbjLomqheYmB7y2+joTHqfKY di4y05wTq+9dbMsmSQ9QMlU5XXpNVdWl6MTIdFfctDaYk+d5NmOR4CpQyOSnsTGt MEKeaXg8QrfVclNzQgPHOv8PgCWHZPatbLmqt9tte5XJAm+MxBaqK4MEOb5dvifP Q8nsobDwr7iYADDedSAU5uOBww== -----END CERTIFICATE-----Generated at Wed Feb 5 08:59:53 2025 by rpki-client