$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa File: AS1239.roa (raw, json) Hash identifier: HueobqV1a06jr0agR0sVXBg25boua2DNXhsxB2/SPwM= Subject key identifier: 54:85:E6:88:01:70:CE:11:60:32:4C:C3:7C:EA:97:D6:C7:43:94:E3 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 1C5F112EA477E843F3226B0E5AD42FE45DB45D23 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa Signing time: Wed 12 Mar 2025 00:53:58 +0000 ROA not before: Wed 12 Mar 2025 00:48:58 +0000 ROA not after: Wed 11 Mar 2026 00:53:58 +0000 asID: 1239 IP address blocks: 86.38.4.0/23 maxlen: 24 86.38.246.0/23 maxlen: 24 89.116.189.0/24 maxlen: 24 89.116.242.0/23 maxlen: 24 89.116.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 01:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5f:11:2e:a4:77:e8:43:f3:22:6b:0e:5a:d4:2f:e4:5d:b4:5d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Mar 12 00:48:58 2025 GMT Not After : Mar 11 00:53:58 2026 GMT Subject: CN=5485E6880170CE1160324CC37CEA97D6C74394E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:aa:6b:70:46:98:41:39:42:8d:06:a4:a6: 11:3a:67:34:a8:27:a5:db:39:6e:8f:08:2e:b1:d8: b4:4f:47:fb:f7:b4:5b:95:99:b7:84:c9:fd:ae:3d: c8:f5:80:6f:83:cb:7c:32:ea:7f:c8:df:02:aa:75: b0:00:2a:69:ce:b2:6d:25:6d:c9:03:b1:2e:b2:54: 47:65:03:3b:8d:7e:d9:fa:24:eb:e4:63:21:c8:fa: 32:8d:d6:f8:21:bb:f8:04:af:55:c6:ef:67:5c:88: ce:63:1b:34:6a:c1:3f:68:d3:d1:c3:d4:90:f7:57: c2:d7:96:3b:2c:3d:cf:92:e7:2f:5e:f5:a4:34:e1: 36:a9:2d:f0:d7:e0:8a:3e:3b:c4:c8:ae:4d:ec:10: b4:06:18:bb:19:4d:1f:51:bf:f3:f3:69:32:e7:fe: b1:3d:0d:7b:33:99:75:6d:07:14:18:73:1f:32:dc: f0:87:79:5a:7a:ba:b1:25:83:53:38:24:59:1b:53: df:e0:53:31:fe:fd:eb:0f:0b:23:4e:26:f3:85:2a: 42:57:95:83:e8:10:07:4f:e7:50:47:7e:04:80:c5: 76:f5:fc:a3:78:0e:02:55:09:a1:31:91:d5:69:b7: d9:b2:53:41:50:fa:d3:60:29:f2:0d:6c:2f:7e:19: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:85:E6:88:01:70:CE:11:60:32:4C:C3:7C:EA:97:D6:C7:43:94:E3 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS1239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.4.0/23 86.38.246.0/23 89.116.189.0/24 89.116.242.0/23 89.116.246.0/23 Signature Algorithm: sha256WithRSAEncryption ad:65:52:0f:9b:a5:eb:cb:77:7d:5b:15:e0:8e:16:b6:30:9e: 41:ea:27:58:73:2b:94:6a:a7:7a:2c:b7:0f:b4:81:61:b3:c5: ce:14:d0:ae:e0:17:8b:c5:57:58:52:f9:da:9a:ad:07:40:91: 92:2e:7b:0d:5b:23:37:cb:7e:fd:ab:6f:8d:1c:45:15:19:ea: 03:54:79:6f:23:a6:26:ee:9d:bd:95:02:f5:4e:0b:c4:55:bd: ce:3d:2b:2f:6a:e5:83:92:3e:db:fe:3a:ac:5d:73:3f:5b:65: 37:54:ca:9e:c3:89:32:25:70:35:5b:d2:63:1d:2c:4a:10:3c: 24:9e:f0:0e:08:4e:8d:08:3b:c1:4a:a5:d1:a5:c9:34:92:8f: 1b:92:df:dd:a5:ab:1d:fe:b7:9f:cc:0a:34:d1:34:24:5a:a2: 45:d9:af:18:5e:1f:20:70:87:89:42:38:90:a8:a5:9b:14:d7: 01:9a:8b:05:c7:73:99:25:f0:e2:60:11:1f:1e:45:f4:ee:40: ff:09:ae:c4:aa:32:a5:ad:82:22:55:7d:a0:bd:8e:91:0e:59: b7:30:0d:0c:ce:07:fc:a9:62:b7:2c:16:22:fc:a0:31:b4:d7: 8f:66:42:d8:cc:7d:c5:bf:ed:15:77:62:10:ef:6b:72:16:ee: fb:b1:bd:41 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUHF8RLqR36EPzImsOWtQv5F20XSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTAzMTIwMDQ4NThaFw0yNjAzMTEwMDUzNThaMDMxMTAvBgNV BAMTKDU0ODVFNjg4MDE3MENFMTE2MDMyNENDMzdDRUE5N0Q2Qzc0Mzk0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0aprcEaYQTlCjQakphE6ZzSo J6XbOW6PCC6x2LRPR/v3tFuVmbeEyf2uPcj1gG+Dy3wy6n/I3wKqdbAAKmnOsm0l bckDsS6yVEdlAzuNftn6JOvkYyHI+jKN1vghu/gEr1XG72dciM5jGzRqwT9o09HD 1JD3V8LXljssPc+S5y9e9aQ04TapLfDX4Io+O8TIrk3sELQGGLsZTR9Rv/PzaTLn /rE9DXszmXVtBxQYcx8y3PCHeVp6urElg1M4JFkbU9/gUzH+/esPCyNOJvOFKkJX lYPoEAdP51BHfgSAxXb1/KN4DgJVCaExkdVpt9myU0FQ+tNgKfINbC9+GakxAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUVIXmiAFwzhFgMkzDfOqX1sdDlOMwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzEyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAFWJgQDBAFWJvYDBABZdL0D BAFZdPIDBAFZdPYwDQYJKoZIhvcNAQELBQADggEBAK1lUg+bpevLd31bFeCOFrYw nkHqJ1hzK5Rqp3ostw+0gWGzxc4U0K7gF4vFV1hS+dqarQdAkZIuew1bIzfLfv2r b40cRRUZ6gNUeW8jpibunb2VAvVOC8RVvc49Ky9q5YOSPtv+Oqxdcz9bZTdUyp7D iTIlcDVb0mMdLEoQPCSe8A4ITo0IO8FKpdGlyTSSjxuS392lqx3+t5/MCjTRNCRa okXZrxheHyBwh4lCOJCopZsU1wGaiwXHc5kl8OJgER8eRfTuQP8JrsSqMqWtgiJV faC9jpEOWbcwDQzOB/ypYrcsFiL8oDG0149mQtjMfcW/7RV3YhDva3IW7vuxvUE= -----END CERTIFICATE-----Generated at Sat Apr 26 15:00:33 2025 by rpki-client