$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS33387.roa File: AS33387.roa (raw, json) Hash identifier: A+G5EYSAc/r2HKMY4kL5pIowMBOuyzoUpNPVRFxaro8= Subject key identifier: 09:EF:CD:60:3F:66:06:C9:44:E6:2D:E3:BF:3E:A2:A2:01:57:20:66 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 29552F84060D1F1B314797B39F700B8E60AC3F24 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS33387.roa Signing time: Thu 05 Oct 2023 13:47:10 +0000 ROA not before: Thu 05 Oct 2023 13:42:10 +0000 ROA not after: Thu 03 Oct 2024 13:47:10 +0000 asID: 33387 IP address blocks: 89.116.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Jan 2024 06:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:55:2f:84:06:0d:1f:1b:31:47:97:b3:9f:70:0b:8e:60:ac:3f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Oct 5 13:42:10 2023 GMT Not After : Oct 3 13:47:10 2024 GMT Subject: CN=09EFCD603F6606C944E62DE3BF3EA2A201572066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:ca:24:08:03:aa:7f:ae:77:f3:a1:57:ef: e0:e5:b7:71:6b:cb:4b:f8:20:46:02:76:92:b6:6c: bd:59:43:e8:cb:a5:a9:d7:cc:7a:78:e9:aa:89:78: 25:fe:a8:44:63:f0:8f:67:e2:f1:00:f0:45:59:f6: 86:01:07:22:cd:c1:ea:da:6d:9c:84:b9:67:25:cf: 8c:0b:42:c7:b7:7a:20:9f:ce:68:ee:ca:a0:67:2b: cb:8c:d8:42:dd:15:11:56:72:7f:e2:5a:d0:1e:76: 9d:09:67:f2:b5:b1:8b:f4:e8:f1:b1:0d:8f:7c:2b: 2a:de:79:91:df:e1:b2:6f:3e:dd:10:fa:46:df:ce: a3:15:c3:e8:76:78:12:c5:2e:ab:c7:7b:6a:43:1f: cb:e5:21:98:88:02:dc:74:26:81:69:6f:31:c4:2a: 75:ae:11:3c:0b:05:13:54:83:9d:96:a7:49:35:80: aa:1d:3d:2d:ad:13:cd:e3:ea:0d:72:a9:8f:ae:90: 92:9d:2d:3c:27:56:18:cf:fb:d3:7c:93:66:8f:89: c2:77:4c:7e:6c:6a:fd:ef:4e:8b:8f:a0:3c:74:68: 0a:2b:75:52:19:2c:f8:75:aa:e2:04:ec:9a:b3:93: a5:e8:0e:4f:c4:4d:d0:68:0a:88:4a:e1:e7:44:4f: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EF:CD:60:3F:66:06:C9:44:E6:2D:E3:BF:3E:A2:A2:01:57:20:66 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS33387.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.141.0/24 Signature Algorithm: sha256WithRSAEncryption 95:83:bc:d2:18:f2:09:5e:75:54:a5:93:b9:ac:4d:7c:54:b6: b4:ed:84:c8:4a:e0:1b:04:1e:72:82:d6:ca:bf:e5:c3:e9:3b: 8f:df:a1:02:e6:a6:90:ed:09:63:c7:eb:22:d8:c9:90:70:75: c4:60:c6:1a:ed:55:64:03:b5:3f:46:75:9c:12:43:a5:3a:4c: ae:96:76:8e:46:96:b5:6e:3a:f6:53:01:c2:ff:0f:a6:76:68: 73:fc:45:b8:4b:05:8a:f2:55:0f:f8:f8:37:ab:18:7c:85:36: 1f:cd:b7:99:06:86:0b:12:78:64:a4:31:42:5a:3d:da:16:36: 62:36:c3:6c:79:dc:bc:45:05:f4:57:46:0d:7c:50:89:86:b9: 95:08:f9:c1:64:c8:f1:20:fd:d1:60:10:58:4f:f9:01:21:e2: 11:a2:ca:88:4f:12:f8:50:df:a6:1a:80:fe:d4:f2:b3:09:db: 92:04:24:98:72:a3:12:96:76:fa:0b:f6:db:70:cd:0c:7e:d6: bc:31:e8:41:5d:c6:67:2c:62:95:fc:96:d4:a9:92:1a:a9:3e: 2b:a8:be:c7:a2:3d:5a:c4:d8:e5:cf:c4:19:08:01:10:2a:eb: bd:68:a9:17:70:20:5d:00:cc:63:8f:ba:a8:62:1a:c3:07:92: 6c:b1:84:5b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUKVUvhAYNHxsxR5ezn3ALjmCsPyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzEwMDUxMzQyMTBaFw0yNDEwMDMxMzQ3MTBaMDMxMTAvBgNV BAMTKDA5RUZDRDYwM0Y2NjA2Qzk0NEU2MkRFM0JGM0VBMkEyMDE1NzIwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpMokCAOqf65386FX7+Dlt3Fr y0v4IEYCdpK2bL1ZQ+jLpanXzHp46aqJeCX+qERj8I9n4vEA8EVZ9oYBByLNwera bZyEuWclz4wLQse3eiCfzmjuyqBnK8uM2ELdFRFWcn/iWtAedp0JZ/K1sYv06PGx DY98KyreeZHf4bJvPt0Q+kbfzqMVw+h2eBLFLqvHe2pDH8vlIZiIAtx0JoFpbzHE KnWuETwLBRNUg52Wp0k1gKodPS2tE83j6g1yqY+ukJKdLTwnVhjP+9N8k2aPicJ3 TH5sav3vTouPoDx0aAordVIZLPh1quIE7Jqzk6XoDk/ETdBoCohK4edET/gJAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUCe/NYD9mBslE5i3jvz6iogFXIGYwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzMzMzg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSNMA0GCSqGSIb3DQEB CwUAA4IBAQCVg7zSGPIJXnVUpZO5rE18VLa07YTISuAbBB5ygtbKv+XD6TuP36EC 5qaQ7Qljx+si2MmQcHXEYMYa7VVkA7U/RnWcEkOlOkyulnaORpa1bjr2UwHC/w+m dmhz/EW4SwWK8lUP+Pg3qxh8hTYfzbeZBoYLEnhkpDFCWj3aFjZiNsNsedy8RQX0 V0YNfFCJhrmVCPnBZMjxIP3RYBBYT/kBIeIRosqITxL4UN+mGoD+1PKzCduSBCSY cqMSlnb6C/bbcM0Mfta8MehBXcZnLGKV/JbUqZIaqT4rqL7Hoj1axNjlz8QZCAEQ Kuu9aKkXcCBdAMxjj7qoYhrDB5JssYRb -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:05 2024 by rpki-client on console.sobornost.net