
$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
File: AS142036.roa (raw, json)
Hash identifier: RPkixtzvVtJ/Fu3Viqi5DZuTOwKFoT+8CBAAaYXA70M=
Subject key identifier: BD:15:03:EC:ED:15:23:85:0A:36:F3:F9:55:EB:15:0F:29:2A:CC:BA
Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C
Certificate serial: 08C8F063751C64E87E75A0D1E74A391D6D81A368
Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
Signing time: Mon 07 Jul 2025 00:54:13 +0000
ROA not before: Mon 07 Jul 2025 00:49:13 +0000
ROA not after: Mon 06 Jul 2026 00:54:13 +0000
asID: 142036
IP address blocks: 89.117.1.0/24 maxlen: 24
89.117.2.0/24 maxlen: 24
89.117.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c8:f0:63:75:1c:64:e8:7e:75:a0:d1:e7:4a:39:1d:6d:81:a3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C
Validity
Not Before: Jul 7 00:49:13 2025 GMT
Not After : Jul 6 00:54:13 2026 GMT
Subject: CN=BD1503ECED1523850A36F3F955EB150F292ACCBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:a8:07:5e:51:90:62:d9:74:0c:82:d4:42:
9f:38:f6:ff:b3:ae:4c:e6:04:93:f4:85:dc:6d:56:
2e:93:df:41:58:70:ef:93:dd:0d:51:83:15:15:3f:
da:96:96:00:8a:4a:7d:9d:ce:ac:1a:be:7e:5e:fc:
f8:db:c7:c8:6d:ab:f2:8c:53:33:33:ca:55:51:4b:
cc:5e:ee:a4:62:1f:ea:c7:4c:a1:5b:db:f5:37:f3:
85:a1:6e:b0:64:7e:9e:c5:08:58:1a:4e:90:bc:69:
55:fd:e7:c3:b2:33:51:42:99:a2:0a:8f:96:02:47:
24:5a:54:5c:31:2b:2d:c8:fc:bc:d6:4f:bf:be:af:
de:68:da:47:1e:66:46:f9:d0:7d:74:1d:a0:08:23:
c1:70:39:cd:ee:c6:a4:fa:e7:c5:7e:08:76:06:9f:
3c:92:6c:54:68:d5:22:c7:48:4f:42:bd:82:18:0a:
4f:9a:82:b6:82:dc:86:f9:d7:ef:6a:2d:76:ba:23:
58:35:3f:43:e4:a9:3b:d3:8e:d7:f5:29:59:f9:7a:
b0:cb:2a:4d:03:b7:cb:bf:ce:83:6e:2b:db:96:30:
ad:1a:1d:13:b5:4a:ed:75:bd:38:d9:22:ce:de:da:
6c:79:55:e3:24:6d:22:45:54:d7:9c:ed:a0:59:dc:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:03:EC:ED:15:23:85:0A:36:F3:F9:55:EB:15:0F:29:2A:CC:BA
X509v3 Authority Key Identifier:
keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
Subject Information Access:
Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS142036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.1.0-89.117.3.255
Signature Algorithm: sha256WithRSAEncryption
a9:c7:85:bc:c1:6c:1b:13:8f:84:ce:3d:fa:5e:ba:4c:f3:cf:
40:55:59:37:a5:22:bc:0e:d3:8f:43:43:cd:c5:f8:f1:96:da:
4a:17:20:9b:63:fc:56:07:88:12:10:a1:7e:88:e8:ad:5e:14:
17:e9:1b:4c:56:6d:c6:47:bf:ef:80:08:9e:3c:68:ed:88:1e:
52:9e:13:4a:fa:d0:e7:f6:c0:ef:cd:52:91:3d:8b:c4:8d:3b:
11:f2:04:d2:1f:6b:24:a4:b0:b6:6c:a6:02:f7:54:b4:85:8d:
47:05:1b:d2:17:92:7a:d1:2b:e5:61:df:a0:5d:81:ce:37:84:
50:5c:22:b7:6c:4b:86:d3:2c:5f:ca:7d:c0:e6:48:ed:ff:6d:
7a:47:88:37:c8:52:77:53:c3:13:41:5c:3d:22:eb:85:42:18:
e8:5f:75:17:ea:c3:de:98:30:2c:6c:9c:3e:2c:03:98:43:b3:
84:58:9d:c8:46:ae:44:c8:fd:72:91:4b:64:82:91:58:ae:b8:
d7:3f:16:9b:7e:f3:de:1e:db:57:41:2a:4a:45:5e:51:95:4f:
f7:d5:a5:5e:61:6e:ad:e5:24:72:df:eb:b3:82:4c:24:5e:7d:
d4:72:76:c5:3d:34:e0:1f:a6:ae:41:3b:9e:81:a0:85:ed:1a:
da:40:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:52 2025 by rpki-client