$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e203538303631.roa File: 352e38332e3231302e302f32342d3234203d3e203538303631.roa (raw, json) Hash identifier: PXNDHKb+gJj2S9ms6rA4mVcZIw7Rm52iQ/xB61pOr+o= Subject key identifier: 9B:7D:EF:C3:D1:A2:BE:67:3A:65:21:A3:05:0E:11:34:D8:D7:86:B4 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 0FF5119EB40101AA44DB346EFF8DA22AD5BEA375 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e203538303631.roa Signing time: Mon 26 Feb 2024 00:36:26 +0000 ROA not before: Mon 26 Feb 2024 00:31:26 +0000 ROA not after: Mon 24 Feb 2025 00:36:26 +0000 asID: 58061 IP address blocks: 5.83.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Jun 2024 23:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f5:11:9e:b4:01:01:aa:44:db:34:6e:ff:8d:a2:2a:d5:be:a3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Feb 26 00:31:26 2024 GMT Not After : Feb 24 00:36:26 2025 GMT Subject: CN=9B7DEFC3D1A2BE673A6521A3050E1134D8D786B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:08:8d:7d:12:ef:4b:9a:62:09:fc:a6:32: e5:21:99:84:3c:13:ff:77:2c:82:b8:60:5d:1c:37: 59:5f:c9:ff:76:fc:2e:fd:18:75:1f:39:8d:f2:72: c9:6d:af:84:5e:b9:b2:54:8f:d4:66:a4:1f:08:ec: 8b:54:52:03:81:55:f8:fd:d7:2a:5b:e1:26:d0:b3: 3b:9b:4a:cc:31:c5:fe:d3:35:79:b8:7a:34:0d:a2: c2:03:81:05:73:29:6c:c2:24:86:a8:10:3b:0c:38: 91:e6:ff:88:87:23:34:c6:ac:e2:be:da:64:6b:10: 1a:af:bd:af:7f:4d:97:e9:c3:8c:e0:41:ae:a1:b7: a6:dc:86:93:bb:08:91:07:5b:30:29:29:62:ac:25: 8c:80:c5:b4:57:15:8d:80:bf:69:67:52:c5:30:f2: db:90:4d:d4:b0:7f:e6:e2:eb:fc:87:35:bf:a7:ab: 87:7c:8a:55:4d:da:0e:5d:c1:7d:13:81:ae:6d:9c: 88:88:6b:8c:84:72:58:74:11:2c:13:70:3f:e5:63: 3f:5c:76:b7:c4:53:2a:53:07:9a:2b:ac:e1:ce:04: 56:a2:16:0f:6d:6b:20:a4:77:bc:a2:7c:3a:4a:1b: 6d:79:7a:c6:1a:0e:6e:a4:82:e1:8e:8f:48:d2:43: c8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7D:EF:C3:D1:A2:BE:67:3A:65:21:A3:05:0E:11:34:D8:D7:86:B4 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231302e302f32342d3234203d3e203538303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.210.0/24 Signature Algorithm: sha256WithRSAEncryption 42:3a:c0:67:77:04:72:c1:9f:f3:b8:e2:eb:97:30:12:d5:a4: 51:05:f7:5f:ab:c8:98:f7:3e:2a:ae:1f:6e:0b:de:1e:3a:e8: 21:cf:0a:32:7c:9a:07:52:92:20:a5:97:36:18:60:5d:b0:eb: 91:83:be:13:a0:8c:4b:05:7d:c7:e8:e1:a8:59:44:0b:7e:cf: be:02:3a:23:33:e3:97:26:e6:e5:2e:fd:1c:06:f5:74:92:e2: 94:6c:6a:96:d4:2b:47:07:fb:2a:e6:a8:85:d8:1b:ac:81:b2: 71:44:9a:28:98:9a:d4:93:6a:49:59:ea:84:da:21:8e:41:8e: b2:a3:02:2c:ec:56:cb:b8:3c:d7:53:3a:c8:a6:1e:dd:e6:c7: 92:d4:96:f9:bc:9d:f9:d6:6d:4e:4b:a0:0e:a6:d5:a1:5e:81: 5f:3e:ca:51:60:20:fa:87:30:08:a8:16:99:ce:4a:cf:df:d8: 0e:0f:f9:e7:96:3b:2d:27:24:46:5e:7e:82:59:5c:94:b0:db: 51:01:41:7a:cf:ff:0c:6f:b6:7e:24:50:be:fe:fb:5b:3e:45: fb:e5:62:8f:97:69:57:0a:7e:16:9c:37:27:cf:cc:84:32:48: 10:d3:64:a8:75:84:ac:c2:fe:7b:94:00:97:1f:36:9b:dd:8b: c4:a9:24:28 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUD/URnrQBAapE2zRu/42iKtW+o3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDAyMjYwMDMxMjZaFw0yNTAyMjQwMDM2MjZaMDMxMTAvBgNV BAMTKDlCN0RFRkMzRDFBMkJFNjczQTY1MjFBMzA1MEUxMTM0RDhENzg2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYAiNfRLvS5piCfymMuUhmYQ8 E/93LIK4YF0cN1lfyf92/C79GHUfOY3ycsltr4ReubJUj9RmpB8I7ItUUgOBVfj9 1ypb4SbQszubSswxxf7TNXm4ejQNosIDgQVzKWzCJIaoEDsMOJHm/4iHIzTGrOK+ 2mRrEBqvva9/TZfpw4zgQa6ht6bchpO7CJEHWzApKWKsJYyAxbRXFY2Av2lnUsUw 8tuQTdSwf+bi6/yHNb+nq4d8ilVN2g5dwX0Tga5tnIiIa4yEclh0ESwTcD/lYz9c drfEUypTB5orrOHOBFaiFg9tayCkd7yifDpKG215esYaDm6kguGOj0jSQ8iHAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUm33vw9Givmc6ZSGjBQ4RNNjXhrQwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNTM4MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVPSMA0GCSqGSIb3DQEB CwUAA4IBAQBCOsBndwRywZ/zuOLrlzAS1aRRBfdfq8iY9z4qrh9uC94eOughzwoy fJoHUpIgpZc2GGBdsOuRg74ToIxLBX3H6OGoWUQLfs++AjojM+OXJublLv0cBvV0 kuKUbGqW1CtHB/sq5qiF2BusgbJxRJoomJrUk2pJWeqE2iGOQY6yowIs7FbLuDzX UzrIph7d5seS1Jb5vJ351m1OS6AOptWhXoFfPspRYCD6hzAIqBaZzkrP39gOD/nn ljstJyRGXn6CWVyUsNtRAUF6z/8Mb7Z+JFC+/vtbPkX75WKPl2lXCn4WnDcnz8yE MkgQ02SodYSswv57lACXHzab3YvEqSQo -----END CERTIFICATE-----Generated at Tue Jun 4 10:37:46 2024 by rpki-client on console-fra.rpki-client.org