$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS60721.roa File: AS60721.roa (raw, json) Hash identifier: vGUcLAaQ5Op4hb6GLrk6GYV95+KPZlFdc9s58Rchd+g= Subject key identifier: E6:8A:C0:54:4E:0E:7B:3B:A6:1F:5D:6E:67:39:AC:0A:14:5C:88:69 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2668799A5B3255AE958C8A4AADDE399A8B964279 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS60721.roa Signing time: Tue 12 Dec 2023 17:50:16 +0000 ROA not before: Tue 12 Dec 2023 17:45:16 +0000 ROA not after: Tue 10 Dec 2024 17:50:16 +0000 asID: 60721 IP address blocks: 84.46.170.0/24 maxlen: 24 89.116.102.0/24 maxlen: 24 89.116.163.0/24 maxlen: 24 89.117.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Jan 2024 06:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:68:79:9a:5b:32:55:ae:95:8c:8a:4a:ad:de:39:9a:8b:96:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 12 17:45:16 2023 GMT Not After : Dec 10 17:50:16 2024 GMT Subject: CN=E68AC0544E0E7B3BA61F5D6E6739AC0A145C8869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:c2:c8:cf:6b:ba:13:1f:28:92:be:ca:16: 1d:3f:ae:66:dd:dd:a9:4b:6f:8d:8d:8c:0f:70:39: c3:f6:c6:b3:37:32:dd:9f:0d:59:41:eb:5b:81:2f: f2:ce:c2:17:c0:2b:b6:e1:f4:82:9a:ae:eb:26:dc: 09:03:b7:8f:39:54:13:41:07:05:66:bd:36:1d:4f: b9:62:1b:bd:40:8f:bc:b1:d5:3a:c8:97:0f:ea:73: 73:02:6a:93:af:cc:1b:00:de:dd:87:4f:e1:c1:25: d1:97:85:06:1f:e8:82:8a:70:c9:1b:fd:b1:bc:a6: e9:d3:c2:56:9f:bd:4e:07:bb:0e:a6:aa:05:62:80: af:e2:88:7c:b1:1b:44:a4:bc:d0:2f:f1:c4:fe:7a: d6:1b:df:f7:03:5f:40:07:5e:e5:e9:2e:fb:0a:1e: 08:68:86:08:24:80:9a:0a:5d:3f:f1:0f:bc:24:9d: 46:3f:72:49:10:56:96:27:c8:7b:43:1e:ce:97:39: ea:ff:e9:65:1d:43:b4:cb:55:f9:20:55:33:9a:ee: cc:f2:48:bd:ab:9b:6b:22:33:ba:01:b2:0e:af:41: 71:e0:37:ff:34:f9:6c:77:87:13:e2:1c:0f:bc:32: d4:dc:ab:69:e4:9c:1b:82:95:63:9c:dc:c8:aa:51: 45:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8A:C0:54:4E:0E:7B:3B:A6:1F:5D:6E:67:39:AC:0A:14:5C:88:69 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS60721.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.46.170.0/24 89.116.102.0/24 89.116.163.0/24 89.117.101.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:e4:dd:51:91:25:b9:0c:6e:59:b6:41:c1:29:f5:26:80:b7: 51:d4:79:ff:78:4d:6f:39:a2:fb:3c:73:72:1d:d4:13:a2:db: f9:bd:1e:15:ed:15:40:af:0d:f1:f6:85:dd:16:9a:56:fd:22: 7c:be:10:ca:94:4d:5c:d1:ac:07:ee:97:c3:a0:b5:6d:55:f3: 1f:d4:d3:06:d7:89:3a:58:a4:49:f2:ee:8f:0b:05:16:32:74: 05:0e:f0:b1:2d:66:b6:82:d5:69:92:48:69:f0:e1:81:43:23: 94:79:8f:98:00:21:b2:42:61:0c:4c:b8:33:88:42:94:16:68: 5f:b0:10:c5:27:b5:2b:84:f5:c2:48:c6:c5:f3:82:5e:e9:73: d1:1a:7f:59:68:78:a4:75:27:00:e7:20:49:5a:cc:17:9f:93: 1b:84:85:66:5c:50:1a:17:ce:a7:77:4a:83:d6:5e:e8:53:4c: 0f:d6:1e:6d:ca:49:ac:bb:d2:9b:74:7e:21:2d:2c:9c:1d:1a: 8c:95:0e:e9:ac:5a:2e:7d:32:43:44:7f:31:c6:fc:26:72:d4: 01:7c:e7:9d:c9:cf:0a:ab:03:b4:21:ea:64:23:ca:af:cf:88: c9:ca:0a:44:79:f6:c0:af:2f:01:3f:15:36:cf:c3:8e:f4:13: e8:f9:05:12 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUJmh5mlsyVa6VjIpKrd45mouWQnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yMzEyMTIxNzQ1MTZaFw0yNDEyMTAxNzUwMTZaMDMxMTAvBgNV BAMTKEU2OEFDMDU0NEUwRTdCM0JBNjFGNUQ2RTY3MzlBQzBBMTQ1Qzg4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYM8LIz2u6Ex8okr7KFh0/rmbd 3alLb42NjA9wOcP2xrM3Mt2fDVlB61uBL/LOwhfAK7bh9IKarusm3AkDt485VBNB BwVmvTYdT7liG71Aj7yx1TrIlw/qc3MCapOvzBsA3t2HT+HBJdGXhQYf6IKKcMkb /bG8punTwlafvU4Huw6mqgVigK/iiHyxG0SkvNAv8cT+etYb3/cDX0AHXuXpLvsK HghohggkgJoKXT/xD7wknUY/ckkQVpYnyHtDHs6XOer/6WUdQ7TLVfkgVTOa7szy SL2rm2siM7oBsg6vQXHgN/80+Wx3hxPiHA+8MtTcq2nknBuClWOc3MiqUUU3AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU5orAVE4OezumH11uZzmsChRciGkwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzYwNzIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVC6qAwQAWXRmAwQAWXSj AwQAWXVlMA0GCSqGSIb3DQEBCwUAA4IBAQA95N1RkSW5DG5ZtkHBKfUmgLdR1Hn/ eE1vOaL7PHNyHdQTotv5vR4V7RVArw3x9oXdFppW/SJ8vhDKlE1c0awH7pfDoLVt VfMf1NMG14k6WKRJ8u6PCwUWMnQFDvCxLWa2gtVpkkhp8OGBQyOUeY+YACGyQmEM TLgziEKUFmhfsBDFJ7UrhPXCSMbF84Je6XPRGn9ZaHikdScA5yBJWswXn5MbhIVm XFAaF86nd0qD1l7oU0wP1h5tykmsu9KbdH4hLSycHRqMlQ7prFoufTJDRH8xxvwm ctQBfOedyc8KqwO0IepkI8qvz4jJygpEefbAry8BPxU2z8OO9BPo+QUS -----END CERTIFICATE-----Generated at Tue Jan 9 15:58:05 2024 by rpki-client on console.sobornost.net