$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2033333230.roa File: 33372e3233302e36312e302f32342d3234203d3e2033333230.roa (raw, json) Hash identifier: b+vFJ8Sug+u8FU7b40hZko1AQt+ncKPDrFE6Zf4NMVI= Subject key identifier: B1:7A:E5:77:15:7C:98:1F:A4:4A:D0:4F:67:6A:8A:A5:77:76:70:77 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 271D6ADE08A9478852E3465DD27FA4EB9EA745D8 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2033333230.roa Signing time: Tue 24 Sep 2024 03:11:38 +0000 ROA not before: Tue 24 Sep 2024 03:06:38 +0000 ROA not after: Tue 23 Sep 2025 03:11:38 +0000 asID: 3320 IP address blocks: 37.230.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 11:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1d:6a:de:08:a9:47:88:52:e3:46:5d:d2:7f:a4:eb:9e:a7:45:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Sep 24 03:06:38 2024 GMT Not After : Sep 23 03:11:38 2025 GMT Subject: CN=B17AE577157C981FA44AD04F676A8AA577767077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:0a:7c:46:52:f0:f1:ba:44:da:34:c4:87: cf:b6:44:d4:23:8f:5e:30:f7:aa:47:7f:aa:24:9e: a2:3e:54:70:5b:2b:87:e2:44:41:4e:1a:3f:ed:e3: 57:dd:fc:fb:ca:d4:75:42:9b:b8:87:1d:33:e5:a1: 87:5b:e7:e6:39:16:89:ad:9b:60:c6:24:56:b0:9b: d0:be:79:9a:31:9b:0b:ea:f6:9e:73:ee:24:9a:ed: 3e:90:24:42:c1:8d:73:90:ac:ab:f6:5d:35:b8:98: 50:67:eb:5b:57:e6:f5:3c:ec:52:6b:ea:bb:57:84: 6f:ef:eb:89:55:91:a2:05:fb:3b:94:f7:d8:11:ec: 3d:63:43:2b:36:7e:4d:bd:40:ca:cc:1c:82:0d:db: 2f:99:d3:09:e2:7d:ef:89:44:f5:be:ed:f5:f4:31: e0:1f:68:ef:b5:5c:ee:a1:fd:50:3d:5b:cd:54:e7: 77:d0:c5:55:75:93:76:a4:c0:9f:3b:7b:87:b8:91: 0d:de:b5:57:c0:f2:7a:1e:7a:64:d7:ff:75:99:e5: c1:85:36:94:94:44:4a:e3:3c:5d:a2:e1:89:97:c1: eb:d0:7e:53:e7:64:82:e2:bf:3c:35:6b:d3:d6:10: f3:d9:fb:18:d0:f4:82:5a:47:82:ad:03:d3:00:49: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7A:E5:77:15:7C:98:1F:A4:4A:D0:4F:67:6A:8A:A5:77:76:70:77 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36312e302f32342d3234203d3e2033333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.61.0/24 Signature Algorithm: sha256WithRSAEncryption 39:5a:0f:f6:e0:a6:6c:d8:0d:64:ec:32:30:ee:0d:79:d8:bb: 97:d1:85:9b:83:4b:18:4e:f4:ea:21:31:53:fd:a4:2e:9f:63: cd:e5:a5:30:42:8f:09:5c:4a:e9:50:e4:53:0f:d3:60:c3:7c: 09:40:db:54:7a:8a:12:c4:f0:1e:71:d9:7c:6f:a2:e2:c0:37: bb:2b:26:8a:5c:ee:86:6a:8a:17:93:91:40:7f:a8:82:37:0a: 69:3d:bc:ad:b3:7d:47:fb:1d:ed:ad:cf:4c:84:6a:2d:7b:96: 1d:fd:75:74:dc:ed:17:a0:ed:55:07:e9:58:a4:ad:85:b6:5e: 80:35:c9:1d:e8:f9:b3:16:b5:4a:fd:bd:04:72:d4:c8:46:d4: 3b:94:f8:11:c1:8a:0c:5f:d4:2a:6a:ac:08:31:f5:68:ab:1a: c6:0b:e2:20:ef:5b:c8:0e:aa:f1:c8:66:bb:28:b6:a1:ce:bb: c7:75:60:b7:37:ef:06:5b:34:9b:66:49:ed:03:5a:0a:fd:b4: f3:8b:99:e1:61:de:9a:21:bf:58:d3:bd:70:81:e5:c2:46:f2: 2a:a2:fa:55:e4:bf:7a:f2:5d:5d:26:5b:92:4d:a1:96:4a:d9: df:f8:ca:cb:c7:ab:1e:11:c2:72:67:e8:ee:01:10:93:54:70: 46:94:1c:5a -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUJx1q3gipR4hS40Zd0n+k656nRdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDA5MjQwMzA2MzhaFw0yNTA5MjMwMzExMzhaMDMxMTAvBgNV BAMTKEIxN0FFNTc3MTU3Qzk4MUZBNDRBRDA0RjY3NkE4QUE1Nzc3NjcwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2gp8RlLw8bpE2jTEh8+2RNQj j14w96pHf6oknqI+VHBbK4fiREFOGj/t41fd/PvK1HVCm7iHHTPloYdb5+Y5Fomt m2DGJFawm9C+eZoxmwvq9p5z7iSa7T6QJELBjXOQrKv2XTW4mFBn61tX5vU87FJr 6rtXhG/v64lVkaIF+zuU99gR7D1jQys2fk29QMrMHIIN2y+Z0wnife+JRPW+7fX0 MeAfaO+1XO6h/VA9W81U53fQxVV1k3akwJ87e4e4kQ3etVfA8noeemTX/3WZ5cGF NpSURErjPF2i4YmXwevQflPnZILivzw1a9PWEPPZ+xjQ9IJaR4KtA9MAScufAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUsXrldxV8mB+kStBPZ2qKpXd2cHcwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY9MA0GCSqGSIb3DQEB CwUAA4IBAQA5Wg/24KZs2A1k7DIw7g152LuX0YWbg0sYTvTqITFT/aQun2PN5aUw Qo8JXErpUORTD9Ngw3wJQNtUeooSxPAecdl8b6LiwDe7KyaKXO6GaooXk5FAf6iC NwppPbyts31H+x3trc9MhGote5Yd/XV03O0XoO1VB+lYpK2Ftl6ANckd6PmzFrVK /b0EctTIRtQ7lPgRwYoMX9QqaqwIMfVoqxrGC+Ig71vIDqrxyGa7KLahzrvHdWC3 N+8GWzSbZkntA1oK/bTzi5nhYd6aIb9Y071wgeXCRvIqovpV5L968l1dJluSTaGW Stnf+MrLx6seEcJyZ+juARCTVHBGlBxa -----END CERTIFICATE-----Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org