$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e2033333230.roa File: 33372e3233302e35362e302f32342d3234203d3e2033333230.roa (raw, json) Hash identifier: t6pkYp7UuqH1kmVCAhR8z4ZeiG014u6UQC/inH04Bvk= Subject key identifier: 5F:9A:72:24:97:63:BF:0C:D9:76:06:E5:D2:3C:5C:04:21:1C:D8:EF Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 5BEF2788B8D436B9BF26F35FE371378BC2321C49 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e2033333230.roa Signing time: Thu 23 Nov 2023 18:44:51 +0000 ROA not before: Thu 23 Nov 2023 18:39:51 +0000 ROA not after: Thu 21 Nov 2024 18:44:51 +0000 asID: 3320 IP address blocks: 37.230.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Jan 2024 22:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ef:27:88:b8:d4:36:b9:bf:26:f3:5f:e3:71:37:8b:c2:32:1c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Nov 23 18:39:51 2023 GMT Not After : Nov 21 18:44:51 2024 GMT Subject: CN=5F9A72249763BF0CD97606E5D23C5C04211CD8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:97:72:16:12:e5:15:63:cf:02:30:b5:3a: 0c:b3:83:81:a7:d4:7c:42:ec:77:4e:65:1c:59:cb: 0e:dc:d6:ea:67:93:0f:a3:78:89:4b:e6:95:61:c1: 89:79:dd:94:94:73:e2:26:c3:30:0c:57:f1:0b:62: ab:56:3f:de:d5:9d:e3:9e:f0:16:6c:de:97:1b:17: 65:02:52:10:ae:7d:05:23:3d:3e:32:f4:5d:fd:07: 6c:fc:fc:de:0d:da:6a:89:79:93:18:d1:49:1c:7a: 8c:b8:ef:aa:c0:13:36:53:ac:41:21:af:58:4f:ac: 07:55:9d:38:7d:dc:fb:2f:80:a1:1f:78:bb:89:6a: 93:4a:41:23:47:5f:c3:8f:23:fb:dd:ed:7c:1f:29: 6b:38:45:b9:d7:01:c8:a9:74:51:70:39:a4:6d:f8: f8:fb:0d:8b:08:2c:39:f9:fd:58:49:cb:1d:3d:c2: 70:a2:0f:80:6e:34:52:4b:8a:89:f6:13:8e:44:4b: 7f:0d:2e:d0:74:16:b3:ea:d3:21:5f:e7:d1:b7:11: 8a:3a:6c:f2:e5:8a:1e:5f:41:83:fc:17:5c:40:9a: c5:a2:b2:70:28:9c:c1:53:39:de:0c:6c:90:5e:fa: 8e:a4:05:73:9d:4a:c7:e8:3b:1f:bb:e3:ec:ce:6b: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:72:24:97:63:BF:0C:D9:76:06:E5:D2:3C:5C:04:21:1C:D8:EF X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32342d3234203d3e2033333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.56.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a8:3c:fe:ba:0b:aa:cc:b6:53:02:b5:a9:27:30:aa:a3:de: 45:c6:fc:79:70:fa:9e:ac:5e:e6:37:21:e6:2e:88:35:69:48: 3c:1d:50:9e:48:fb:1e:78:8d:5b:30:1a:00:07:6e:81:ac:ca: 86:e6:be:29:82:4d:99:c3:e8:5d:de:c7:9b:85:7b:54:99:01: ff:68:72:59:9a:2f:f3:88:cd:bb:33:90:9f:61:9d:21:92:36: 1f:36:99:47:76:9a:b3:f6:55:86:b5:da:64:a7:cf:dc:e4:63: 31:53:c3:f0:0c:08:08:e2:23:ff:cc:d4:ee:ec:1e:ae:96:1e: 8e:c8:81:30:b8:b9:2f:c8:40:5b:e1:82:02:ef:2d:7d:5b:be: 5c:a6:a0:56:3a:60:a1:77:02:23:d1:41:e0:88:42:0b:98:6a: e4:a9:6d:0f:7b:56:66:7f:61:51:3b:ca:20:fb:f0:cd:ac:33: be:aa:04:f4:47:e6:c2:d9:e8:1a:ce:8d:cc:87:37:68:6f:5b: eb:f0:ab:03:a3:61:69:aa:77:e7:03:fc:8e:9a:8c:6d:e1:27: 27:3b:77:3d:77:ed:68:dd:d3:cc:53:1a:74:f8:19:b9:da:16: bf:0a:8d:61:5e:a0:01:2f:2c:3f:81:f9:5f:60:2a:06:7a:7d: 21:74:c5:95 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUW+8niLjUNrm/JvNf43E3i8IyHEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yMzExMjMxODM5NTFaFw0yNDExMjExODQ0NTFaMDMxMTAvBgNV BAMTKDVGOUE3MjI0OTc2M0JGMENEOTc2MDZFNUQyM0M1QzA0MjExQ0Q4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrS5dyFhLlFWPPAjC1Ogyzg4Gn 1HxC7HdOZRxZyw7c1upnkw+jeIlL5pVhwYl53ZSUc+ImwzAMV/ELYqtWP97VneOe 8BZs3pcbF2UCUhCufQUjPT4y9F39B2z8/N4N2mqJeZMY0Ukceoy476rAEzZTrEEh r1hPrAdVnTh93PsvgKEfeLuJapNKQSNHX8OPI/vd7XwfKWs4RbnXAcipdFFwOaRt +Pj7DYsILDn5/VhJyx09wnCiD4BuNFJLion2E45ES38NLtB0FrPq0yFf59G3EYo6 bPLlih5fQYP8F1xAmsWisnAonMFTOd4MbJBe+o6kBXOdSsfoOx+74+zOa0j7AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUX5pyJJdjvwzZdgbl0jxcBCEc2O8wHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY4MA0GCSqGSIb3DQEB CwUAA4IBAQCGqDz+uguqzLZTArWpJzCqo95Fxvx5cPqerF7mNyHmLog1aUg8HVCe SPseeI1bMBoAB26BrMqG5r4pgk2Zw+hd3sebhXtUmQH/aHJZmi/ziM27M5CfYZ0h kjYfNplHdpqz9lWGtdpkp8/c5GMxU8PwDAgI4iP/zNTu7B6ulh6OyIEwuLkvyEBb 4YIC7y19W75cpqBWOmChdwIj0UHgiEILmGrkqW0Pe1Zmf2FRO8og+/DNrDO+qgT0 R+bC2egazo3Mhzdob1vr8KsDo2FpqnfnA/yOmoxt4ScnO3c9d+1o3dPMUxp0+Bm5 2ha/Co1hXqABLyw/gflfYCoGen0hdMWV -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:12 2024 by rpki-client on console.sobornost.net