$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2033333230.roa File: 33372e3233302e36332e302f32342d3234203d3e2033333230.roa (raw, json) Hash identifier: SekstUytZhfY3pOskN76X3NrCQKmeNvODVakUHd4f7I= Subject key identifier: FB:5C:C4:0F:48:52:D4:0D:43:57:AF:D9:1B:08:89:32:C8:6A:2B:33 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 468F2DA3EC3447A2D8F1E107AA75F2AB2371A9A4 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2033333230.roa Signing time: Tue 28 Nov 2023 23:11:13 +0000 ROA not before: Tue 28 Nov 2023 23:06:13 +0000 ROA not after: Tue 26 Nov 2024 23:11:13 +0000 asID: 3320 IP address blocks: 37.230.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Jan 2024 22:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:8f:2d:a3:ec:34:47:a2:d8:f1:e1:07:aa:75:f2:ab:23:71:a9:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Nov 28 23:06:13 2023 GMT Not After : Nov 26 23:11:13 2024 GMT Subject: CN=FB5CC40F4852D40D4357AFD91B088932C86A2B33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:45:a5:31:13:f9:00:af:ac:be:13:52:3c: d0:ed:21:45:4a:4d:69:c6:17:58:40:f0:bb:62:9b: fa:c0:48:35:78:61:24:24:6e:ef:88:be:2e:28:f4: 3b:d7:a2:9a:a6:04:6c:90:0b:e0:43:86:2a:4e:3a: 8f:37:a3:b1:dc:f8:7b:bd:a7:75:31:55:14:5e:5b: 1d:2c:c5:d0:37:d0:3d:61:3f:5a:9b:7e:75:40:95: c6:c4:8a:f8:90:f0:f5:22:67:bd:12:b7:4e:e9:77: 27:4f:34:d0:b5:d9:d3:81:8e:dc:55:94:2c:d5:48: 57:fa:c3:30:ba:8a:44:ce:06:c8:7a:4a:0e:df:fb: 56:00:c4:bb:83:e6:c6:9a:de:bf:94:97:fa:f1:bd: 94:39:4b:c8:20:3a:84:f9:a2:8b:a8:65:17:a8:65: cb:77:b2:6f:af:fb:fe:7c:f3:2f:93:2d:f5:ad:a8: 62:a9:d7:f4:37:5c:d5:90:6f:fb:1d:8d:f4:c5:fb: c2:83:b8:96:eb:a3:f4:c9:a6:60:5e:0b:5c:1e:8a: 2a:25:e1:b0:af:4d:ae:78:82:78:a1:49:65:24:ba: 1e:b7:e0:96:b6:e2:95:80:7a:8a:c2:e5:72:1a:1b: db:13:9e:29:a4:b5:af:45:74:78:f1:78:3d:a3:de: 89:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5C:C4:0F:48:52:D4:0D:43:57:AF:D9:1B:08:89:32:C8:6A:2B:33 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e36332e302f32342d3234203d3e2033333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.63.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:aa:54:ec:09:a6:a1:ba:93:49:13:b0:ce:cc:2f:48:1e:86: fa:a8:d0:cc:8d:0c:43:33:bf:ff:b6:5b:da:ad:f5:fd:e8:2b: a5:e8:92:7a:b8:13:ce:51:77:f2:20:fe:16:5c:a7:9c:e9:5a: 35:19:75:79:11:b2:18:4e:fc:7a:37:a5:11:b7:5f:c2:c3:66: ad:53:7f:07:36:cb:36:2d:99:39:e0:c3:16:80:ee:dc:30:eb: ea:96:8d:5c:dc:c0:d3:c9:ba:1a:c3:c0:5d:04:5d:a7:16:c6: be:4a:76:ea:f6:f4:86:bd:48:10:21:1e:94:4b:1b:f3:3a:3a: ec:b8:a0:9a:d5:5c:c0:38:5e:b4:8c:ba:4d:9f:d9:6a:6d:11: 0a:fb:83:ad:e7:8e:ec:ee:82:c4:33:08:c1:c8:a6:b5:d7:25: b3:7d:93:b8:22:56:6e:d9:1b:8d:67:99:90:cb:bb:fc:f2:d9: 6f:a5:08:14:72:3f:84:e2:16:64:29:2a:a9:5c:35:e2:ae:96: 86:de:1b:0e:b0:c6:b1:03:11:b1:a4:ff:e0:13:be:02:ad:0e: 3a:9f:46:53:b8:f6:00:dd:b0:d4:aa:f0:7d:3c:46:1e:ef:94: 59:dd:10:1b:7d:fe:e8:04:76:7d:cf:fc:e0:dc:06:e1:68:8d: 1f:1a:fb:6e -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIURo8to+w0R6LY8eEHqnXyqyNxqaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yMzExMjgyMzA2MTNaFw0yNDExMjYyMzExMTNaMDMxMTAvBgNV BAMTKEZCNUNDNDBGNDg1MkQ0MEQ0MzU3QUZEOTFCMDg4OTMyQzg2QTJCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmEWlMRP5AK+svhNSPNDtIUVK TWnGF1hA8Ltim/rASDV4YSQkbu+Ivi4o9DvXopqmBGyQC+BDhipOOo83o7Hc+Hu9 p3UxVRReWx0sxdA30D1hP1qbfnVAlcbEiviQ8PUiZ70St07pdydPNNC12dOBjtxV lCzVSFf6wzC6ikTOBsh6Sg7f+1YAxLuD5saa3r+Ul/rxvZQ5S8ggOoT5oouoZReo Zct3sm+v+/588y+TLfWtqGKp1/Q3XNWQb/sdjfTF+8KDuJbro/TJpmBeC1weiiol 4bCvTa54gnihSWUkuh634Ja24pWAeorC5XIaG9sTnimkta9FdHjxeD2j3ollAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU+1zED0hS1A1DV6/ZGwiJMshqKzMwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeY/MA0GCSqGSIb3DQEB CwUAA4IBAQBdqlTsCaahupNJE7DOzC9IHob6qNDMjQxDM7//tlvarfX96Cul6JJ6 uBPOUXfyIP4WXKec6Vo1GXV5EbIYTvx6N6URt1/Cw2atU38HNss2LZk54MMWgO7c MOvqlo1c3MDTyboaw8BdBF2nFsa+Snbq9vSGvUgQIR6USxvzOjrsuKCa1VzAOF60 jLpNn9lqbREK+4Ot547s7oLEMwjByKa11yWzfZO4IlZu2RuNZ5mQy7v88tlvpQgU cj+E4hZkKSqpXDXirpaG3hsOsMaxAxGxpP/gE74CrQ46n0ZTuPYA3bDUqvB9PEYe 75RZ3RAbff7oBHZ9z/zg3AbhaI0fGvtu -----END CERTIFICATE-----Generated at Tue Jan 9 07:51:12 2024 by rpki-client on console.sobornost.net