$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e2033333230.roa File: 33372e3233302e36302e302f32342d3234203d3e2033333230.roa (raw, json) Hash identifier: e471eavp5d4dm4n4HSCjDAsRzT4IZwFQgt8O3nvkQbI= Subject key identifier: AF:22:E6:B3:64:72:1B:91:E8:33:1A:F6:A7:3B:9F:20:AA:34:05:CA Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 496256E03E83F8DD216DB746A1CE8C1DA8749C4E Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e2033333230.roa Signing time: Tue 28 Nov 2023 23:11:12 +0000 ROA not before: Tue 28 Nov 2023 23:06:12 +0000 ROA not after: Tue 26 Nov 2024 23:11:12 +0000 asID: 3320 IP address blocks: 37.230.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Jan 2024 22:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:62:56:e0:3e:83:f8:dd:21:6d:b7:46:a1:ce:8c:1d:a8:74:9c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Nov 28 23:06:12 2023 GMT Not After : Nov 26 23:11:12 2024 GMT Subject: CN=AF22E6B364721B91E8331AF6A73B9F20AA3405CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:2f:92:01:aa:0a:65:e0:ce:67:30:7d:37: 90:12:9a:c6:82:ab:d6:10:2e:9e:ad:56:0a:90:83: 20:90:2d:29:fb:67:4d:8d:4c:e0:46:22:c9:89:76: 6a:29:f6:bc:15:34:ec:b0:68:d3:39:80:f1:b3:ca: 95:a8:af:b1:02:af:13:e5:60:46:3e:8d:ec:53:9c: b4:63:d6:f5:a8:96:1e:24:d8:5c:ed:4f:b3:9a:cd: ac:f9:ec:fa:de:3b:74:d9:9e:c2:55:16:4d:bb:6d: 40:89:8c:9a:c1:12:04:b0:1d:e1:a2:bf:c5:d1:28: 28:ba:6a:5b:31:9d:69:56:65:b9:b3:69:23:6b:c3: 9c:fa:11:96:7b:d3:1c:d1:d1:de:b3:57:2e:6d:ab: a2:05:88:56:c2:fa:f8:06:2b:08:bb:6b:25:83:d5: e9:4e:4f:f2:0b:7f:a0:91:55:74:4e:96:08:64:07: 8e:b3:45:2d:9f:e2:64:6a:3a:14:78:fc:10:4c:5f: a7:3c:cc:19:d8:8c:e8:aa:b5:38:91:5b:b5:21:0f: f6:41:ba:b5:09:ea:bf:00:dd:dc:9e:d3:d1:b1:dc: e3:d9:e0:5b:0d:d7:e8:99:7b:ed:d5:ce:4e:31:74: 34:29:62:97:4b:d1:92:27:c0:41:65:e7:6c:fb:4e: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:22:E6:B3:64:72:1B:91:E8:33:1A:F6:A7:3B:9F:20:AA:34:05:CA X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36302e302f32342d3234203d3e2033333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.60.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:61:ff:af:ed:1e:af:51:af:b2:4a:b1:9f:30:05:2c:c9:99: ef:4d:16:4d:3e:d1:37:4b:ba:9b:17:93:14:d4:37:67:99:38: dd:a1:1f:6e:dc:5e:46:46:c5:a1:2c:eb:6f:30:0d:15:ac:56: 0a:b4:2e:a7:70:04:39:34:54:59:8b:ee:ba:e3:d9:c4:46:67: b2:90:ef:5c:24:48:c5:01:a1:97:f6:1a:8e:2a:02:a2:53:33: 57:ed:91:65:08:f2:48:8b:f8:d4:64:48:1e:0d:4e:90:2a:79: 60:df:fe:a7:8e:14:6a:a4:c9:63:5c:a8:50:79:92:75:99:6e: 30:18:20:b4:9e:6b:ec:0a:54:d4:3d:81:73:fb:41:3d:a9:e1: b3:5d:cd:a0:4d:8f:e4:9e:05:16:ef:fe:15:6a:a7:20:5f:f1: 35:07:ad:ea:bb:77:0a:9b:fa:97:d5:3e:b4:70:2e:61:44:2d: 4f:4f:05:21:fc:f7:9c:93:d8:ae:28:84:bf:aa:ed:b8:ef:d0: 7a:03:67:42:c3:8d:d8:0b:df:a8:2c:30:e2:06:62:96:b8:bb: b8:61:35:6d:e3:7b:6a:49:68:24:7d:50:0a:a8:ce:7b:18:7a: ce:66:5e:8b:60:50:54:17:21:84:6c:86:f5:2a:67:21:1d:63: b8:43:b5:42 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUSWJW4D6D+N0hbbdGoc6MHah0nE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yMzExMjgyMzA2MTJaFw0yNDExMjYyMzExMTJaMDMxMTAvBgNV BAMTKEFGMjJFNkIzNjQ3MjFCOTFFODMzMUFGNkE3M0I5RjIwQUEzNDA1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQC+SAaoKZeDOZzB9N5ASmsaC q9YQLp6tVgqQgyCQLSn7Z02NTOBGIsmJdmop9rwVNOywaNM5gPGzypWor7ECrxPl YEY+jexTnLRj1vWolh4k2FztT7Oazaz57PreO3TZnsJVFk27bUCJjJrBEgSwHeGi v8XRKCi6alsxnWlWZbmzaSNrw5z6EZZ70xzR0d6zVy5tq6IFiFbC+vgGKwi7ayWD 1elOT/ILf6CRVXROlghkB46zRS2f4mRqOhR4/BBMX6c8zBnYjOiqtTiRW7UhD/ZB urUJ6r8A3dye09Gx3OPZ4FsN1+iZe+3Vzk4xdDQpYpdL0ZInwEFl52z7TqmfAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUryLms2RyG5HoMxr2pzufIKo0BcowHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY8MA0GCSqGSIb3DQEB CwUAA4IBAQBtYf+v7R6vUa+ySrGfMAUsyZnvTRZNPtE3S7qbF5MU1DdnmTjdoR9u 3F5GRsWhLOtvMA0VrFYKtC6ncAQ5NFRZi+6649nERmeykO9cJEjFAaGX9hqOKgKi UzNX7ZFlCPJIi/jUZEgeDU6QKnlg3/6njhRqpMljXKhQeZJ1mW4wGCC0nmvsClTU PYFz+0E9qeGzXc2gTY/kngUW7/4VaqcgX/E1B63qu3cKm/qX1T60cC5hRC1PTwUh /Peck9iuKIS/qu2479B6A2dCw43YC9+oLDDiBmKWuLu4YTVt43tqSWgkfVAKqM57 GHrOZl6LYFBUFyGEbIb1KmchHWO4Q7VC -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:12 2024 by rpki-client on console.sobornost.net