$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: Ty7jZvTShhhJqpcRcvyWub3ROBq9ksNFSTsQkqsX7Zg= Subject key identifier: C2:A8:66:06:6E:E5:85:E3:FD:9C:DD:5A:B5:24:49:3E:3D:39:8B:56 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 22E70C2144229B119134C5F38780B8C015026B22 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40676.roa Signing time: Fri 01 Sep 2023 00:00:03 +0000 ROA not before: Thu 31 Aug 2023 23:55:03 +0000 ROA not after: Fri 30 Aug 2024 00:00:03 +0000 asID: 40676 IP address blocks: 89.116.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Jan 2024 06:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e7:0c:21:44:22:9b:11:91:34:c5:f3:87:80:b8:c0:15:02:6b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Aug 31 23:55:03 2023 GMT Not After : Aug 30 00:00:03 2024 GMT Subject: CN=C2A866066EE585E3FD9CDD5AB524493E3D398B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:44:c0:47:68:1c:17:88:08:33:48:9b:fd: 82:8d:a3:d4:20:75:29:23:5d:60:95:d2:8f:3d:8a: bb:46:11:46:29:16:98:ef:c0:2b:89:9a:cd:05:1d: 82:37:e7:a1:b7:c1:f4:11:35:e3:f5:dd:59:e1:60: 8a:11:40:a7:3f:41:83:66:ae:e2:dd:58:32:20:42: 8f:52:b4:23:c1:43:a0:59:55:c9:70:d9:ad:b0:5c: 39:da:33:d5:91:7e:43:03:4e:35:7c:33:df:bb:ea: a8:5e:ce:9b:69:66:c5:c8:05:1a:36:dd:66:a3:63: ac:6d:3d:58:04:22:2b:57:3f:d6:a9:48:63:62:5a: a7:f5:dd:c8:5a:db:3b:a2:8e:05:dd:c2:34:a5:51: d8:be:5c:c0:bb:06:0f:10:cb:6b:2e:17:c4:df:e1: 13:83:89:50:1c:02:fe:48:7e:b6:82:31:57:87:c6: d9:a4:96:e5:fb:d8:f3:44:81:29:99:b0:1b:3f:35: 39:12:ff:d5:97:69:c7:2b:27:37:9b:f8:aa:8b:2c: 8e:0f:e0:c0:9b:f9:03:e9:1b:90:d0:0a:91:c2:d1: 47:c6:4c:a9:64:e4:f2:22:79:00:f4:32:ac:db:41: 22:cb:be:41:f7:cf:7c:db:27:49:7c:79:97:93:08: 32:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:66:06:6E:E5:85:E3:FD:9C:DD:5A:B5:24:49:3E:3D:39:8B:56 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.56.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a3:42:bf:99:0b:5d:a9:d8:fb:03:fb:c9:23:42:99:67:82: 35:a2:d4:f8:27:7d:6a:d6:f8:87:58:52:55:b5:cf:7d:2a:71: 3f:c0:1a:bd:56:be:3f:44:2e:9f:23:a7:fa:c1:13:f1:44:8e: 07:9d:58:45:5b:72:0b:58:3e:af:52:ff:19:57:21:41:5a:50: 31:af:be:20:b5:60:ba:3f:8c:d7:5d:f3:13:19:05:93:68:ee: 19:aa:6f:d4:3d:31:6f:80:0c:e4:2b:f0:d4:11:a0:f3:52:7f: ce:ac:ae:6c:98:cf:a3:a6:f0:68:a8:f3:c5:85:8f:8a:0f:25: a1:e7:09:aa:fb:70:48:11:13:4e:26:d2:74:79:af:fb:76:e0: 1c:f8:51:22:53:bd:93:f9:31:75:08:81:cd:43:8a:41:5b:ae: ed:77:ef:2b:11:20:0e:88:4a:dc:45:80:32:7f:0c:2c:d6:cf: f1:86:28:1f:af:e1:2b:d9:29:4b:55:37:a3:73:42:c1:2c:0f: 50:e0:67:ed:78:7d:1a:ab:81:8f:da:f7:dd:e7:84:f2:9e:63: 4e:6c:4c:9d:91:20:90:27:6b:c5:c5:31:4f:68:3d:21:61:3b: 4b:fb:56:14:55:79:c1:0b:63:11:c3:26:0b:c3:c9:03:71:cc: 82:98:f5:3e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUIucMIUQimxGRNMXzh4C4wBUCayIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzA4MzEyMzU1MDNaFw0yNDA4MzAwMDAwMDNaMDMxMTAvBgNV BAMTKEMyQTg2NjA2NkVFNTg1RTNGRDlDREQ1QUI1MjQ0OTNFM0QzOThCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt60TAR2gcF4gIM0ib/YKNo9Qg dSkjXWCV0o89irtGEUYpFpjvwCuJms0FHYI356G3wfQRNeP13VnhYIoRQKc/QYNm ruLdWDIgQo9StCPBQ6BZVclw2a2wXDnaM9WRfkMDTjV8M9+76qhezptpZsXIBRo2 3WajY6xtPVgEIitXP9apSGNiWqf13cha2zuijgXdwjSlUdi+XMC7Bg8Qy2suF8Tf 4RODiVAcAv5IfraCMVeHxtmkluX72PNEgSmZsBs/NTkS/9WXaccrJzeb+KqLLI4P 4MCb+QPpG5DQCpHC0UfGTKlk5PIieQD0MqzbQSLLvkH3z3zbJ0l8eZeTCDKdAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUwqhmBm7lheP9nN1atSRJPj05i1YwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXQ4MA0GCSqGSIb3DQEB CwUAA4IBAQBBo0K/mQtdqdj7A/vJI0KZZ4I1otT4J31q1viHWFJVtc99KnE/wBq9 Vr4/RC6fI6f6wRPxRI4HnVhFW3ILWD6vUv8ZVyFBWlAxr74gtWC6P4zXXfMTGQWT aO4Zqm/UPTFvgAzkK/DUEaDzUn/OrK5smM+jpvBoqPPFhY+KDyWh5wmq+3BIERNO JtJ0ea/7duAc+FEiU72T+TF1CIHNQ4pBW67td+8rESAOiErcRYAyfwws1s/xhigf r+Er2SlLVTejc0LBLA9Q4GfteH0aq4GP2vfd54TynmNObEydkSCQJ2vFxTFPaD0h YTtL+1YUVXnBC2MRwyYLw8kDccyCmPU+ -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:05 2024 by rpki-client on console.sobornost.net