$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203631333137.roa File: 33372e3233302e35312e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: dP5qSFfyvnVd9mBalYOAeVAd2nNNAz77P3i8KevvCqk= Subject key identifier: 09:66:77:05:E8:0C:DA:1C:47:42:C7:20:38:41:0E:47:F2:99:49:5F Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 0541CDF56BDADBB97ACFB1EA4A4737826927D382 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203631333137.roa Signing time: Fri 07 Mar 2025 22:37:01 +0000 ROA not before: Fri 07 Mar 2025 22:32:01 +0000 ROA not after: Fri 06 Mar 2026 22:37:01 +0000 asID: 61317 IP address blocks: 37.230.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 08:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:41:cd:f5:6b:da:db:b9:7a:cf:b1:ea:4a:47:37:82:69:27:d3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Mar 7 22:32:01 2025 GMT Not After : Mar 6 22:37:01 2026 GMT Subject: CN=09667705E80CDA1C4742C72038410E47F299495F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e6:14:fe:ce:63:bb:c4:11:bc:84:a2:a0:ad: 10:bb:f5:d2:9f:a0:89:50:c5:82:6a:9d:3e:b1:c3: c9:b1:f2:b7:0f:14:3b:24:0e:62:3e:36:18:43:79: 79:c9:aa:91:a4:2c:3d:91:da:dd:0d:48:51:7e:24: ff:a0:54:19:50:cf:a7:6d:ce:24:79:33:96:3a:ee: c6:5a:cf:9b:10:1e:dd:c6:3d:df:e1:49:23:f1:0a: c4:32:0d:74:d3:8d:78:37:a1:22:32:1f:47:50:3e: 21:0f:7c:9d:34:f1:7f:bf:53:eb:70:4f:54:f5:42: 2f:77:bd:46:02:82:f3:44:4f:13:34:bf:9b:54:24: 86:b2:5b:86:5f:7d:e4:62:c1:d2:eb:7f:01:b0:91: 61:61:d0:dc:d3:6b:42:76:c3:f9:9a:5d:91:2c:74: f8:6b:01:a9:22:ba:20:16:65:ab:7c:e3:95:41:2c: bb:c3:cc:a0:c0:21:e1:11:7d:50:ae:dc:f0:cf:f1: bb:1b:c2:39:51:45:11:38:de:3d:0e:be:e9:64:33: c4:5f:85:d4:50:b8:b6:cc:21:da:1c:88:33:ee:5b: 79:32:59:26:d4:4b:20:ae:fc:c7:a2:af:27:dd:fe: 62:7c:de:5f:d4:81:7a:64:c9:83:38:88:8b:26:0d: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:66:77:05:E8:0C:DA:1C:47:42:C7:20:38:41:0E:47:F2:99:49:5F X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35312e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.51.0/24 Signature Algorithm: sha256WithRSAEncryption 40:95:75:cb:a4:72:ac:d3:16:8d:19:f5:b5:7b:5f:88:f6:3f: 06:86:1e:46:9c:ae:0a:1a:64:80:29:93:93:80:9a:30:ef:5f: f0:ad:7a:c4:30:15:78:d2:d3:19:3c:19:a4:e4:74:73:b7:06: ac:3a:54:4b:8d:9a:a7:95:5a:56:c3:24:7f:f0:91:cc:1e:8f: 65:ef:6b:01:ba:a0:e6:ff:e2:d2:b0:d3:20:be:60:d8:57:22: b5:58:fe:a9:9f:67:e7:93:6d:79:4d:e4:8d:31:85:00:79:8d: 18:52:96:10:55:15:14:50:4f:b4:50:aa:a4:fa:ac:47:9c:28: d8:42:a1:a2:90:84:5c:0e:68:e7:3a:50:32:43:3c:0b:12:97: 5d:67:6b:d6:c1:f6:92:87:9a:f2:19:41:1e:30:b4:fa:44:e9: f9:48:6a:af:7e:74:b9:3b:b9:31:20:a5:a5:63:5a:76:d8:43: 0f:0c:e0:58:a0:01:23:2c:c7:bc:e2:7f:fc:c8:6d:ce:19:b4: 06:9f:81:37:33:88:d5:a9:61:c4:1f:cc:a9:40:ef:4c:67:d2: 41:8e:b8:5a:11:41:c6:1d:31:be:4b:10:9c:5a:a7:9f:a3:ed: e8:80:a2:78:f4:11:c2:28:ee:4a:86:64:93:f0:fc:ea:cf:b0: 5b:67:b7:67 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUBUHN9Wva27l6z7HqSkc3gmkn04IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTAzMDcyMjMyMDFaFw0yNjAzMDYyMjM3MDFaMDMxMTAvBgNV BAMTKDA5NjY3NzA1RTgwQ0RBMUM0NzQyQzcyMDM4NDEwRTQ3RjI5OTQ5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5hT+zmO7xBG8hKKgrRC79dKf oIlQxYJqnT6xw8mx8rcPFDskDmI+NhhDeXnJqpGkLD2R2t0NSFF+JP+gVBlQz6dt ziR5M5Y67sZaz5sQHt3GPd/hSSPxCsQyDXTTjXg3oSIyH0dQPiEPfJ008X+/U+tw T1T1Qi93vUYCgvNETxM0v5tUJIayW4ZffeRiwdLrfwGwkWFh0NzTa0J2w/maXZEs dPhrAakiuiAWZat845VBLLvDzKDAIeERfVCu3PDP8bsbwjlRRRE43j0OvulkM8Rf hdRQuLbMIdociDPuW3kyWSbUSyCu/Meiryfd/mJ83l/UgXpkyYM4iIsmDZvlAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQUCWZ3BegM2hxHQscgOEEOR/KZSV8wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAl5jMwDQYJKoZIhvcN AQELBQADggEBAECVdcukcqzTFo0Z9bV7X4j2PwaGHkacrgoaZIApk5OAmjDvX/Ct esQwFXjS0xk8GaTkdHO3Bqw6VEuNmqeVWlbDJH/wkcwej2XvawG6oOb/4tKw0yC+ YNhXIrVY/qmfZ+eTbXlN5I0xhQB5jRhSlhBVFRRQT7RQqqT6rEecKNhCoaKQhFwO aOc6UDJDPAsSl11na9bB9pKHmvIZQR4wtPpE6flIaq9+dLk7uTEgpaVjWnbYQw8M 4FigASMsx7zif/zIbc4ZtAafgTcziNWpYcQfzKlA70xn0kGOuFoRQcYdMb5LEJxa p5+j7eiAonj0EcIo7kqGZJPw/OrPsFtnt2c= -----END CERTIFICATE-----Generated at Fri Apr 4 19:38:18 2025 by rpki-client