$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa File: 37372e37352e3139362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: NIZTfELNzxNCMoPmEsmzO0UzUD+MjztYcW+Dg1W51aY= Subject key identifier: DF:A6:6B:BC:D5:EF:C7:1B:71:48:18:A1:09:D3:79:EE:7B:24:4F:4B Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 57C37C81FCE2544755C43E40D9004C438D87FE9B Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa Signing time: Mon 15 Apr 2024 06:55:15 +0000 ROA not before: Mon 15 Apr 2024 06:50:15 +0000 ROA not after: Mon 14 Apr 2025 06:55:15 +0000 asID: 834 IP address blocks: 77.75.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 05:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c3:7c:81:fc:e2:54:47:55:c4:3e:40:d9:00:4c:43:8d:87:fe:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 15 06:50:15 2024 GMT Not After : Apr 14 06:55:15 2025 GMT Subject: CN=DFA66BBCD5EFC71B714818A109D379EE7B244F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:81:34:16:aa:5c:df:c5:41:d3:95:8b:83:1a: e5:35:62:30:5a:35:1b:ea:8a:2c:73:6e:ef:8e:a6: ef:4b:4a:2d:62:d1:55:60:c6:df:d7:fd:0d:7d:fa: db:55:e3:3b:ca:ee:ae:7f:a3:90:3a:d5:b7:7f:31: b2:70:0f:dd:83:22:93:f9:5e:be:67:b8:9d:19:13: 16:27:b9:24:76:08:45:ec:14:6b:94:09:af:5d:2b: 45:6e:5c:ff:47:13:c8:90:7f:52:55:58:cc:5e:66: 02:fd:bb:b3:db:1c:c3:62:29:d0:5d:ea:0e:25:c8: e3:db:bc:0f:86:25:76:39:d2:a5:ff:b2:3c:69:ee: e9:be:ea:e7:14:b4:73:b9:f6:04:7c:48:1c:37:88: e3:70:fc:1e:18:da:01:b1:81:f9:e2:d7:7d:85:a9: fe:10:d5:4e:8d:62:24:fb:70:ae:07:34:d2:2c:e9: bf:9a:a2:80:9d:c1:35:bc:26:dc:4a:8f:b7:8f:2b: e4:14:ff:61:20:21:47:2d:20:21:c3:e9:14:35:f2: a0:9a:bf:a4:a1:f9:bf:37:60:b5:1d:dd:17:9f:f4: ac:41:66:25:9c:cf:ab:ee:94:46:74:4a:b7:8d:48: ef:d3:fa:16:6d:5a:98:2d:d4:0e:46:66:22:3f:89: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A6:6B:BC:D5:EF:C7:1B:71:48:18:A1:09:D3:79:EE:7B:24:4F:4B X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/37372e37352e3139362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.196.0/24 Signature Algorithm: sha256WithRSAEncryption 03:0f:f7:75:37:06:db:c5:2e:05:49:c9:85:16:0d:ae:17:59: 0d:f2:65:58:96:06:eb:be:88:38:29:65:11:9b:fa:d5:e4:23: 0c:a8:63:08:ab:87:db:19:f6:2b:c9:c1:54:19:d7:87:7a:02: 60:75:51:57:4f:0d:e0:9c:a3:3c:a8:b9:02:a6:27:0c:f3:ce: e0:c1:a0:5c:4d:c7:ec:8e:87:79:fb:2b:1d:47:ff:8a:60:38: 7e:f5:82:c3:3c:11:2c:54:5c:ed:d2:f0:6b:32:e3:31:77:95: 9d:0c:58:f9:3e:41:db:3b:d9:f6:31:f6:0e:59:ca:91:5b:c0: 2d:19:e7:62:09:71:76:63:83:8a:8c:96:20:e7:d8:4e:e1:77: 31:57:f6:24:19:bb:a0:29:a2:ca:58:b6:40:fe:78:76:bf:ae: 0b:7a:9f:58:b0:30:c1:0f:a5:f6:5d:20:33:91:06:31:85:96: 2c:a5:f5:87:a6:bb:46:c2:2b:86:66:98:4b:ce:24:3f:65:4f: 71:7a:5f:9d:63:7d:c2:fa:12:03:3c:44:93:cc:0e:b9:5d:6e: f7:06:e6:6c:ce:d3:fc:5c:06:8e:f2:a4:9e:26:b2:e8:a7:c3: 48:3d:5a:df:c2:03:99:54:be:d9:bc:9a:e8:20:eb:c4:14:12: f6:9f:1c:02 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUV8N8gfziVEdVxD5A2QBMQ42H/pswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNDA0MTUwNjUwMTVaFw0yNTA0MTQwNjU1MTVaMDMxMTAvBgNV BAMTKERGQTY2QkJDRDVFRkM3MUI3MTQ4MThBMTA5RDM3OUVFN0IyNDRGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDygTQWqlzfxUHTlYuDGuU1YjBa NRvqiixzbu+Opu9LSi1i0VVgxt/X/Q19+ttV4zvK7q5/o5A61bd/MbJwD92DIpP5 Xr5nuJ0ZExYnuSR2CEXsFGuUCa9dK0VuXP9HE8iQf1JVWMxeZgL9u7PbHMNiKdBd 6g4lyOPbvA+GJXY50qX/sjxp7um+6ucUtHO59gR8SBw3iONw/B4Y2gGxgfni132F qf4Q1U6NYiT7cK4HNNIs6b+aooCdwTW8JtxKj7ePK+QU/2EgIUctICHD6RQ18qCa v6Sh+b83YLUd3Ref9KxBZiWcz6vulEZ0SreNSO/T+hZtWpgt1A5GZiI/ic+PAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQU36ZrvNXvxxtxSBihCdN57nskT0swHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCBigYIKwYBBQUHMAuGfnJzeW5jOi8v ci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2E2ZjIxNDdhLWRlOGEtNDQ0MC1iY2Ey LTZkOGI3Yzg3NmZkYS0wLzAvMzczNzJlMzczNTJlMzEzOTM2MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUvEMA0GCSqGSIb3DQEBCwUA A4IBAQADD/d1NwbbxS4FScmFFg2uF1kN8mVYlgbrvog4KWURm/rV5CMMqGMIq4fb GfYrycFUGdeHegJgdVFXTw3gnKM8qLkCpicM887gwaBcTcfsjod5+ysdR/+KYDh+ 9YLDPBEsVFzt0vBrMuMxd5WdDFj5PkHbO9n2MfYOWcqRW8AtGediCXF2Y4OKjJYg 59hO4XcxV/YkGbugKaLKWLZA/nh2v64Lep9YsDDBD6X2XSAzkQYxhZYspfWHprtG wiuGZphLziQ/ZU9xel+dY33C+hIDPESTzA65XW73BuZsztP8XAaO8qSeJrLop8NI PVrfwgOZVL7ZvJroIOvEFBL2nxwC -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:35 2025 by rpki-client