$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20333936333536.roa File: 352e38332e3231382e302f32342d3234203d3e20333936333536.roa (raw, json) Hash identifier: gnx1tlvtNxZvXXwvMf1AfuRDIVQ0iQp7FLUFUP17EhI= Subject key identifier: D2:1B:7D:48:C3:39:C1:41:A6:3D:2B:C8:A2:51:15:8C:8E:5D:E0:BF Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 5DFE3B388648AEFE5B2A8022DB8B9BA3C43FADD0 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20333936333536.roa Signing time: Wed 04 Sep 2024 17:21:37 +0000 ROA not before: Wed 04 Sep 2024 17:16:37 +0000 ROA not after: Wed 03 Sep 2025 17:21:37 +0000 asID: 396356 IP address blocks: 5.83.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 05:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fe:3b:38:86:48:ae:fe:5b:2a:80:22:db:8b:9b:a3:c4:3f:ad:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Sep 4 17:16:37 2024 GMT Not After : Sep 3 17:21:37 2025 GMT Subject: CN=D21B7D48C339C141A63D2BC8A251158C8E5DE0BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:3f:1d:3a:2f:2d:4c:e0:72:9e:d5:89:55: ee:9b:e5:aa:3f:1b:c0:42:e1:58:8a:f6:ea:d7:55: c1:5b:49:c2:3e:6d:ea:11:bd:65:c6:40:1e:1c:ed: 28:2d:e1:e4:41:7a:cb:f1:da:a7:ee:67:5e:36:95: 9e:75:91:4b:9f:cb:00:95:57:3a:33:d9:00:88:37: 74:f2:5f:40:63:76:3c:25:71:16:56:8c:2a:cf:9a: be:88:01:6c:48:74:85:eb:42:e5:41:e3:80:7f:f2: 99:ab:bd:09:ea:e1:9c:46:5f:9a:60:e0:2e:f4:30: 9c:13:08:b7:6b:ed:f8:4c:22:cd:3a:13:21:7a:fb: b1:61:bc:88:13:67:79:b0:f8:d3:5d:b6:42:a8:1c: bd:de:9d:2a:33:64:22:83:b3:02:3d:7b:2a:3d:a9: 93:1d:b4:17:2c:b3:d8:5c:c5:14:b7:9a:4e:a6:9a: be:5c:aa:84:e9:a6:94:76:80:fb:d4:63:70:bc:ae: 15:62:f3:60:72:4d:1e:ed:7d:aa:e0:30:b7:39:54: 31:b8:19:20:23:30:1e:f6:89:12:18:f6:29:ae:71: fe:ff:c9:98:ce:ea:40:6f:c8:f2:ea:c8:9d:bd:e7: b5:a1:13:35:be:c0:0d:37:02:51:27:cb:1a:66:83: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1B:7D:48:C3:39:C1:41:A6:3D:2B:C8:A2:51:15:8C:8E:5D:E0:BF X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3231382e302f32342d3234203d3e20333936333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.218.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d2:f1:43:69:e7:53:67:79:4c:42:c5:4d:a4:96:30:ed:9c: 63:67:31:e4:67:8d:14:4f:9c:ac:eb:02:be:60:92:de:5b:80: 4a:76:2d:77:6e:8f:11:bf:b1:5a:6a:8b:db:c8:73:d1:b1:5a: c4:ef:12:88:f8:b4:8a:9d:63:a2:c1:3d:95:96:a6:89:b9:4a: ee:98:e0:0b:4f:91:a6:59:18:8c:04:91:7c:c5:b0:af:46:99: 0d:f6:cf:53:6e:05:62:1d:c5:6c:6d:9b:a6:a1:cb:88:86:de: 00:bc:c8:4b:e1:d1:0e:0a:c5:eb:36:18:7e:5d:0a:46:1b:f7: b9:b7:35:52:c0:d4:69:a5:bb:dc:72:ca:37:73:e5:54:06:13: 3e:ae:63:f4:82:a5:82:73:2f:d5:ca:7e:04:88:2c:7e:b9:73: 42:2e:6e:62:a2:c9:8e:44:d5:9e:e6:b4:65:c6:2c:15:00:39: c3:4e:78:ac:9c:c0:cc:f0:a1:06:b1:eb:d0:8a:e1:63:58:4d: fe:f5:12:3c:9e:1f:15:15:8f:01:bd:86:9e:84:a0:30:ea:8d: 81:e9:a0:ff:e6:1f:26:97:d9:94:e2:50:b2:43:b0:88:48:b6: cf:80:c1:c6:b1:a0:23:87:07:63:fd:94:35:25:73:7b:b8:9c: 54:9f:83:9c -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUXf47OIZIrv5bKoAi24ubo8Q/rdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDA5MDQxNzE2MzdaFw0yNTA5MDMxNzIxMzdaMDMxMTAvBgNV BAMTKEQyMUI3RDQ4QzMzOUMxNDFBNjNEMkJDOEEyNTExNThDOEU1REUwQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgOj8dOi8tTOByntWJVe6b5ao/ G8BC4ViK9urXVcFbScI+beoRvWXGQB4c7Sgt4eRBesvx2qfuZ142lZ51kUufywCV Vzoz2QCIN3TyX0BjdjwlcRZWjCrPmr6IAWxIdIXrQuVB44B/8pmrvQnq4ZxGX5pg 4C70MJwTCLdr7fhMIs06EyF6+7FhvIgTZ3mw+NNdtkKoHL3enSozZCKDswI9eyo9 qZMdtBcss9hcxRS3mk6mmr5cqoTpppR2gPvUY3C8rhVi82ByTR7tfargMLc5VDG4 GSAjMB72iRIY9imucf7/yZjO6kBvyPLqyJ2957WhEzW+wA03AlEnyxpmgye1AgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU0ht9SMM5wUGmPSvIolEVjI5d4L8wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMxMzgyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMzM5MzYzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU9owDQYJKoZIhvcN AQELBQADggEBABDS8UNp51NneUxCxU2kljDtnGNnMeRnjRRPnKzrAr5gkt5bgEp2 LXdujxG/sVpqi9vIc9GxWsTvEoj4tIqdY6LBPZWWpom5Su6Y4AtPkaZZGIwEkXzF sK9GmQ32z1NuBWIdxWxtm6ahy4iG3gC8yEvh0Q4Kxes2GH5dCkYb97m3NVLA1Gml u9xyyjdz5VQGEz6uY/SCpYJzL9XKfgSILH65c0IubmKiyY5E1Z7mtGXGLBUAOcNO eKycwMzwoQax69CK4WNYTf71EjyeHxUVjwG9hp6EoDDqjYHpoP/mHyaX2ZTiULJD sIhIts+AwcaxoCOHB2P9lDUlc3u4nFSfg5w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:39 2025 by rpki-client