$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203230343733.roa File: 33372e3233302e34382e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: g3Z7XkRUYM3iMrCS5t9I9/pOc5oVNpkBcOp5mSt7PKw= Subject key identifier: 22:6C:54:23:9C:55:0C:2B:C6:6A:D3:C5:B9:28:FA:53:BF:C2:88:88 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1EC9370A4B6CB314B9C0A20912144CEFC956A504 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203230343733.roa Signing time: Fri 26 Jul 2024 15:44:05 +0000 ROA not before: Fri 26 Jul 2024 15:39:05 +0000 ROA not after: Fri 25 Jul 2025 15:44:05 +0000 asID: 20473 IP address blocks: 37.230.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Sep 2024 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c9:37:0a:4b:6c:b3:14:b9:c0:a2:09:12:14:4c:ef:c9:56:a5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Jul 26 15:39:05 2024 GMT Not After : Jul 25 15:44:05 2025 GMT Subject: CN=226C54239C550C2BC66AD3C5B928FA53BFC28888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:80:0e:c5:ca:30:83:7c:8b:4c:fc:06:e8: 34:89:77:d3:ec:0d:84:84:de:92:8b:2e:df:60:61: 0c:b9:b5:55:bc:1c:14:d6:e0:68:17:b0:2e:e1:59: 29:52:5d:07:f1:9e:a0:e5:cc:7c:e1:96:6f:ac:6b: 44:32:79:1c:0f:75:35:ef:3d:e2:9c:7c:87:23:c3: 1f:e7:93:72:bd:b6:69:55:a6:cf:c9:d8:87:3c:17: 63:1d:87:f6:4f:84:50:17:fa:2d:87:29:42:32:dd: 7b:5f:c1:9e:4c:db:d2:da:18:3a:ec:4d:a5:70:17: 4e:0c:61:07:28:3a:63:36:56:d5:ca:c2:a8:40:3a: 4f:7f:67:5c:ff:ce:14:8e:53:6c:79:d1:24:32:02: e3:98:12:77:45:d4:dd:f2:d2:87:03:fb:45:90:56: 46:ba:30:7e:ed:f1:1b:49:15:f6:a1:68:90:9f:fe: bf:5c:36:94:e8:8c:67:11:c0:e8:4c:f5:af:08:ac: cc:c3:be:93:5b:e2:06:2e:05:7b:02:6a:48:df:88: 89:3c:ba:6f:a7:f7:12:1f:f4:29:23:94:c8:24:2f: c1:6d:0f:bc:11:b0:9f:a1:7d:0c:ad:fa:27:86:cf: cb:b1:39:ae:57:3d:02:f1:c5:d5:6a:20:b7:7c:64: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6C:54:23:9C:55:0C:2B:C6:6A:D3:C5:B9:28:FA:53:BF:C2:88:88 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34382e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.48.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ef:41:3f:2c:ba:d5:40:a2:a5:c5:1a:87:ed:15:aa:3b:11: 78:65:36:f8:64:e3:bd:ad:cc:d7:44:c3:3e:ce:41:d0:ff:60: 07:0d:a5:a0:42:b5:e9:8a:65:b8:39:f9:45:a6:0f:67:dd:6a: ba:15:ff:dc:c7:7a:9d:2c:e8:59:37:17:5c:e3:fc:57:e2:7b: f4:2b:e6:03:d8:41:ae:c1:c6:c1:43:48:61:6e:54:61:24:81: f5:ab:eb:02:2c:23:5a:d7:00:39:c2:68:bb:83:68:3d:e0:e7: de:a2:82:e2:ce:7a:3a:0c:51:ee:01:05:c6:0f:40:9c:a7:0e: d2:d2:64:31:16:8c:2a:6c:d3:1a:42:58:cd:b5:17:65:1b:14: 2c:82:db:30:83:e8:24:85:d4:3f:e0:25:cb:5e:4c:33:85:9c: aa:30:44:1b:b3:08:b4:5b:9c:f9:a1:4a:cb:ed:3b:8b:b5:80: fd:77:e4:a8:13:9b:af:76:02:a6:dd:ec:78:59:b7:c2:b2:16: 64:a8:27:fa:df:30:e4:5f:be:bd:5e:1c:c8:1d:f8:36:b6:78: 35:37:ee:3d:4e:58:04:89:88:57:0f:00:d8:2e:e5:da:17:ba: a1:87:53:c7:cf:fe:40:c6:e3:11:9d:70:bc:42:38:e3:8c:ee: 67:3d:a7:47 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUHsk3CktssxS5wKIJEhRM78lWpQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDA3MjYxNTM5MDVaFw0yNTA3MjUxNTQ0MDVaMDMxMTAvBgNV BAMTKDIyNkM1NDIzOUM1NTBDMkJDNjZBRDNDNUI5MjhGQTUzQkZDMjg4ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQIAOxcowg3yLTPwG6DSJd9Ps DYSE3pKLLt9gYQy5tVW8HBTW4GgXsC7hWSlSXQfxnqDlzHzhlm+sa0QyeRwPdTXv PeKcfIcjwx/nk3K9tmlVps/J2Ic8F2Mdh/ZPhFAX+i2HKUIy3XtfwZ5M29LaGDrs TaVwF04MYQcoOmM2VtXKwqhAOk9/Z1z/zhSOU2x50SQyAuOYEndF1N3y0ocD+0WQ Vka6MH7t8RtJFfahaJCf/r9cNpTojGcRwOhM9a8IrMzDvpNb4gYuBXsCakjfiIk8 um+n9xIf9CkjlMgkL8FtD7wRsJ+hfQyt+ieGz8uxOa5XPQLxxdVqILd8ZD0nAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUImxUI5xVDCvGatPFuSj6U7/CiIgwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jAwDQYJKoZIhvcN AQELBQADggEBAGvvQT8sutVAoqXFGoftFao7EXhlNvhk472tzNdEwz7OQdD/YAcN paBCtemKZbg5+UWmD2fdaroV/9zHep0s6Fk3F1zj/Ffie/Qr5gPYQa7BxsFDSGFu VGEkgfWr6wIsI1rXADnCaLuDaD3g596iguLOejoMUe4BBcYPQJynDtLSZDEWjCps 0xpCWM21F2UbFCyC2zCD6CSF1D/gJcteTDOFnKowRBuzCLRbnPmhSsvtO4u1gP13 5KgTm692Aqbd7HhZt8KyFmSoJ/rfMORfvr1eHMgd+Da2eDU37j1OWASJiFcPANgu 5doXuqGHU8fP/kDG4xGdcLxCOOOM7mc9p0c= -----END CERTIFICATE-----Generated at Sat Sep 7 12:06:45 2024 by rpki-client on console-fra.rpki-client.org