$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323135363732.roa File: 352e38332e3232312e302f32342d3234203d3e20323135363732.roa (raw, json) Hash identifier: XrhRThrBXnZ5m3cQXcFXspVP/D3hOZ3bcg+wRs9krWM= Subject key identifier: F3:7E:BB:B3:B8:F7:C6:3B:D4:39:41:0E:05:6D:84:40:C0:35:91:CB Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 7427010C4816EDA3C1037124EF39B3C156A4912E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323135363732.roa Signing time: Wed 16 Oct 2024 12:30:54 +0000 ROA not before: Wed 16 Oct 2024 12:25:54 +0000 ROA not after: Wed 15 Oct 2025 12:30:54 +0000 asID: 215672 IP address blocks: 5.83.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 19:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:27:01:0c:48:16:ed:a3:c1:03:71:24:ef:39:b3:c1:56:a4:91:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Oct 16 12:25:54 2024 GMT Not After : Oct 15 12:30:54 2025 GMT Subject: CN=F37EBBB3B8F7C63BD439410E056D8440C03591CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:84:f6:2e:0e:27:a9:11:99:f3:46:e2:b7: e9:10:9b:78:96:a1:3a:ce:f8:fb:29:1f:65:b2:32: 0a:bf:bf:63:3c:08:94:53:75:c7:a4:46:d4:f7:01: 82:1d:d3:8f:39:cc:41:3f:48:45:cb:4c:a3:31:9d: f8:cd:39:41:ff:98:9d:e0:ab:2c:ee:d5:0b:03:87: 16:9e:99:06:51:39:bc:44:cf:eb:ff:f0:70:57:41: 48:ac:50:e7:3f:8d:ec:22:7e:ee:37:34:6f:fb:9e: c3:e1:78:a4:d0:c8:09:0f:9b:ca:fd:e3:db:25:0c: 0a:04:df:74:a7:24:f6:6c:89:bb:1f:06:3e:1b:41: 36:07:88:ef:56:4f:1f:38:13:98:e9:22:30:ff:f3: f7:01:b9:27:ef:63:c3:9f:61:a6:8e:10:79:47:51: 25:a6:28:cf:b6:26:7c:1a:45:e5:70:6d:a9:9d:da: 95:fd:f0:c9:62:7c:b6:da:19:12:5c:44:7d:be:0f: a9:cc:d4:9b:05:28:49:2d:51:e5:72:4e:6b:23:d0: d3:0f:a7:f1:3a:f1:47:ec:b0:1d:f2:a1:f4:8f:f2: 51:13:3c:aa:d2:df:ed:99:09:ac:64:4e:51:5e:fb: 8d:ef:bb:50:6d:26:54:b6:c2:32:70:83:b9:1a:89: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:BB:B3:B8:F7:C6:3B:D4:39:41:0E:05:6D:84:40:C0:35:91:CB X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/352e38332e3232312e302f32342d3234203d3e20323135363732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:5e:1e:f5:25:8b:39:ef:64:55:5d:df:a8:22:1c:d3:f8:09: 6b:2c:e1:97:7d:a5:97:75:93:12:24:f7:cd:89:2f:b6:ec:74: 45:a8:78:38:78:89:93:4a:76:31:fb:1f:12:2e:8d:50:d0:bf: 58:ba:85:80:6a:3d:8e:6c:dc:86:cc:2f:6e:99:22:95:07:73: 3f:50:09:7b:14:2d:14:8f:e7:b0:7d:c2:56:14:57:05:b0:53: d8:4f:97:f0:c2:04:2e:da:b1:a6:59:c2:de:b4:bb:d5:9e:8c: 1e:f2:10:44:3f:38:5b:c6:7c:10:62:b5:4e:b1:be:dd:ac:38: da:f7:5e:e3:46:b3:fc:4e:72:f3:a9:2e:23:12:9c:b6:0c:28: 33:96:ae:5b:66:77:74:58:22:30:9d:5d:d6:7a:e9:90:94:3f: 73:86:c4:9d:f6:cd:5f:4f:a0:ae:d0:d1:bf:3e:78:7d:30:85: ef:19:f9:0f:8a:84:a1:5b:fc:be:28:ed:ba:bd:7d:b2:c6:39: 0b:44:9f:2f:4e:f3:27:67:99:2e:79:24:61:70:f4:1a:cd:86: 7a:6b:27:1a:f4:a3:00:16:0d:30:7e:76:ac:e8:6e:d4:3a:cf: 52:a8:30:fc:f8:db:57:89:f6:f1:c6:34:d3:9a:8d:b2:11:13: ed:d9:90:38 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgIUdCcBDEgW7aPBA3Ek7zmzwVakkS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDEwMTYxMjI1NTRaFw0yNTEwMTUxMjMwNTRaMDMxMTAvBgNV BAMTKEYzN0VCQkIzQjhGN0M2M0JENDM5NDEwRTA1NkQ4NDQwQzAzNTkxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUoT2Lg4nqRGZ80bit+kQm3iW oTrO+PspH2WyMgq/v2M8CJRTdcekRtT3AYId0485zEE/SEXLTKMxnfjNOUH/mJ3g qyzu1QsDhxaemQZRObxEz+v/8HBXQUisUOc/jewifu43NG/7nsPheKTQyAkPm8r9 49slDAoE33SnJPZsibsfBj4bQTYHiO9WTx84E5jpIjD/8/cBuSfvY8OfYaaOEHlH USWmKM+2JnwaReVwbamd2pX98MlifLbaGRJcRH2+D6nM1JsFKEktUeVyTmsj0NMP p/E68UfssB3yofSP8lETPKrS3+2ZCaxkTlFe+43vu1BtJlS2wjJwg7kaiVUZAgMB AAGjggJgMIICXDAdBgNVHQ4EFgQU8367s7j3xjvUOUEOBW2EQMA1kcswHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzM1MmUzODMzMmUzMjMyMzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzUzNjM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFU90wDQYJKoZIhvcN AQELBQADggEBAE9eHvUliznvZFVd36giHNP4CWss4Zd9pZd1kxIk982JL7bsdEWo eDh4iZNKdjH7HxIujVDQv1i6hYBqPY5s3IbML26ZIpUHcz9QCXsULRSP57B9wlYU VwWwU9hPl/DCBC7asaZZwt60u9WejB7yEEQ/OFvGfBBitU6xvt2sONr3XuNGs/xO cvOpLiMSnLYMKDOWrltmd3RYIjCdXdZ66ZCUP3OGxJ32zV9PoK7Q0b8+eH0whe8Z +Q+KhKFb/L4o7bq9fbLGOQtEny9O8ydnmS55JGFw9BrNhnprJxr0owAWDTB+dqzo btQ6z1KoMPz421eJ9vHGNNOajbIRE+3ZkDg= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org