$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa File: 33372e312e3232372e302f32342d3234203d3e20333933393432.roa (raw, json) Hash identifier: tT49HwPs0awdX3JzswQhWnPydG5somERG5gp25N4gp0= Subject key identifier: 58:3E:F2:0D:32:EA:B0:75:0A:D5:9C:89:29:0E:F7:45:78:60:D1:F7 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 2560ABED160A6D4AA0D97FE2184A87096350AB79 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa Signing time: Wed 25 Dec 2024 01:55:14 +0000 ROA not before: Wed 25 Dec 2024 01:50:14 +0000 ROA not after: Wed 24 Dec 2025 01:55:14 +0000 asID: 393942 IP address blocks: 37.1.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 06 Feb 2025 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:60:ab:ed:16:0a:6d:4a:a0:d9:7f:e2:18:4a:87:09:63:50:ab:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Dec 25 01:50:14 2024 GMT Not After : Dec 24 01:55:14 2025 GMT Subject: CN=583EF20D32EAB0750AD59C89290EF7457860D1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:62:dc:a1:13:0a:99:5a:3e:0c:d9:d4:3f: 4d:00:db:a7:c3:14:95:65:1c:dd:21:91:fe:e1:30: a1:6b:74:96:2d:21:28:08:1d:e4:a2:00:87:ba:cb: ba:d8:d0:1b:b7:9b:7d:42:39:71:5c:e5:17:fa:28: 95:5a:4b:7c:22:2e:d1:c2:7e:cb:44:c9:bf:87:dd: 0d:f2:73:d6:f8:9c:90:0c:af:00:2d:50:61:59:d0: 85:6b:a5:31:a9:39:8a:68:0a:ca:0a:ec:0d:8b:08: 14:ad:dc:f0:4a:ee:5d:fa:c9:2d:8f:b8:93:46:85: 88:15:00:61:59:54:a5:58:7e:63:21:45:32:9d:03: fd:11:da:a5:dc:09:37:87:57:0b:c7:6b:88:3e:25: 37:f9:6b:40:2f:3b:eb:40:4c:f0:09:22:8c:cf:f3: b9:72:f4:55:52:d9:e2:b8:73:7d:33:fc:16:7b:1c: 75:74:4f:f8:48:18:25:d3:f9:ca:25:d6:60:98:ea: e4:61:7f:89:65:16:b9:b9:42:0a:21:39:99:ce:6a: d0:9a:a8:71:ca:ae:20:9f:8b:b7:b3:54:da:21:bc: 0f:2f:ae:82:cc:40:44:9f:cd:07:1a:f8:d4:f4:ab: 2f:44:e1:27:dd:3a:ff:e7:e0:85:b1:14:1a:b8:87: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3E:F2:0D:32:EA:B0:75:0A:D5:9C:89:29:0E:F7:45:78:60:D1:F7 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e312e3232372e302f32342d3234203d3e20333933393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.227.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b5:b4:6e:3e:a8:68:83:c5:c4:97:92:45:62:d1:6b:00:ab: d0:d6:29:c3:33:a8:88:f3:62:f0:c5:fd:3c:fd:56:a6:92:e1: f5:a2:0e:10:c3:04:ce:61:8c:b1:96:b8:c9:64:61:d2:52:b5: 6e:c1:54:14:d5:26:52:c5:5d:d6:e9:af:b5:35:c4:2d:22:1e: 36:37:3f:9c:b4:a6:6b:3f:c8:bf:58:69:10:5c:20:d7:dc:ab: a9:d2:75:4c:0a:1a:3a:7d:4e:ef:aa:b3:b2:89:aa:26:7b:a5: 75:b3:41:75:84:5d:60:85:f0:e8:3f:f0:84:f6:a6:5c:94:96: 81:30:f7:20:1b:36:45:e2:ab:31:37:4e:bc:97:16:a6:4a:1f: 09:aa:ea:36:88:28:1e:d8:59:a0:53:90:96:68:b7:3f:1b:83: 04:60:b0:f6:8a:39:db:18:98:14:98:a3:bc:74:e6:e2:64:d1: fe:a4:dd:7d:73:27:02:55:f3:36:da:26:10:a7:ba:43:57:b2: 01:ca:5b:6e:ec:b3:ab:13:3a:59:26:bd:76:b3:58:e8:0f:1b: 44:40:1e:45:12:d5:c1:63:64:e3:52:f7:e4:00:99:86:c3:3b: 05:0e:43:dc:c4:5b:9a:f4:85:6e:70:aa:44:ea:25:25:cb:b2: 5b:c8:05:1b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUJWCr7RYKbUqg2X/iGEqHCWNQq3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDEyMjUwMTUwMTRaFw0yNTEyMjQwMTU1MTRaMDMxMTAvBgNV BAMTKDU4M0VGMjBEMzJFQUIwNzUwQUQ1OUM4OTI5MEVGNzQ1Nzg2MEQxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2mLcoRMKmVo+DNnUP00A26fD FJVlHN0hkf7hMKFrdJYtISgIHeSiAIe6y7rY0Bu3m31COXFc5Rf6KJVaS3wiLtHC fstEyb+H3Q3yc9b4nJAMrwAtUGFZ0IVrpTGpOYpoCsoK7A2LCBSt3PBK7l36yS2P uJNGhYgVAGFZVKVYfmMhRTKdA/0R2qXcCTeHVwvHa4g+JTf5a0AvO+tATPAJIozP 87ly9FVS2eK4c30z/BZ7HHV0T/hIGCXT+col1mCY6uRhf4llFrm5QgohOZnOatCa qHHKriCfi7ezVNohvA8vroLMQESfzQca+NT0qy9E4SfdOv/n4IWxFBq4h/MBAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUWD7yDTLqsHUK1ZyJKQ73RXhg0fcwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMxMmUzMjMyMzcyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMzM5MzMzOTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlAeMwDQYJKoZIhvcN AQELBQADggEBABi1tG4+qGiDxcSXkkVi0WsAq9DWKcMzqIjzYvDF/Tz9VqaS4fWi DhDDBM5hjLGWuMlkYdJStW7BVBTVJlLFXdbpr7U1xC0iHjY3P5y0pms/yL9YaRBc INfcq6nSdUwKGjp9Tu+qs7KJqiZ7pXWzQXWEXWCF8Og/8IT2plyUloEw9yAbNkXi qzE3TryXFqZKHwmq6jaIKB7YWaBTkJZotz8bgwRgsPaKOdsYmBSYo7x05uJk0f6k 3X1zJwJV8zbaJhCnukNXsgHKW27ss6sTOlkmvXazWOgPG0RAHkUS1cFjZONS9+QA mYbDOwUOQ9zEW5r0hW5wqkTqJSXLslvIBRs= -----END CERTIFICATE-----Generated at Wed Feb 5 08:47:14 2025 by rpki-client