$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa File: AS19437.roa (raw, json) Hash identifier: pxFU9hnWuSno5QQ3s/YHyC7p1Cf0DGBkhmWYVFsf3I0= Subject key identifier: 83:1E:CF:E4:7E:36:CD:1C:76:BF:86:BA:99:3F:FC:E1:04:B4:E6:5F Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 706396B12288AC311EC36F86BC82F7B233437F51 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa Signing time: Fri 03 Jan 2025 08:53:51 +0000 ROA not before: Fri 03 Jan 2025 08:48:51 +0000 ROA not after: Fri 02 Jan 2026 08:53:51 +0000 asID: 19437 IP address blocks: 86.38.189.0/24 maxlen: 24 89.117.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 02:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:63:96:b1:22:88:ac:31:1e:c3:6f:86:bc:82:f7:b2:33:43:7f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Jan 3 08:48:51 2025 GMT Not After : Jan 2 08:53:51 2026 GMT Subject: CN=831ECFE47E36CD1C76BF86BA993FFCE104B4E65F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:7e:fd:4b:44:5e:bc:51:4f:c8:a1:fc:f4: 2e:d8:4a:5a:91:59:54:de:0a:9d:00:c3:86:bb:ab: a0:f7:92:db:e9:e4:9e:f9:d2:46:85:c1:1c:62:be: 41:b4:e0:90:c4:55:1a:c3:60:b8:8a:f2:d4:3f:65: 33:d1:a2:a5:96:16:56:05:33:dd:d0:49:b4:80:9f: 8b:d9:e2:8b:a4:ad:cf:9d:53:42:07:7e:af:c4:66: f6:5b:05:5c:c2:92:80:a3:2b:f9:09:31:2b:2a:d4: 21:64:2f:66:7f:c1:8c:10:75:33:54:43:62:e5:14: a2:89:1b:a1:c6:67:c2:aa:33:0a:5f:31:93:3f:1f: 18:8d:46:65:19:36:99:ea:50:a8:96:1a:5f:f9:53: 91:28:1a:08:13:57:63:90:fb:a2:a7:82:bf:99:c7: cb:73:d0:8b:c9:ec:01:37:83:06:f9:a5:81:bc:9e: e5:cb:1b:67:71:26:e5:e6:97:47:7a:65:74:44:67: 8d:be:df:c2:9a:f4:79:fa:e7:b0:29:71:c9:a3:d7: 27:3a:9e:32:58:2d:fb:ac:86:b3:ea:2d:7e:41:29: b9:a5:fb:85:1c:95:18:55:04:4c:72:a9:2a:c2:77: 64:ad:21:8e:5f:f3:d2:ec:53:a6:0f:b6:0c:2c:95: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1E:CF:E4:7E:36:CD:1C:76:BF:86:BA:99:3F:FC:E1:04:B4:E6:5F X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS19437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.189.0/24 89.117.66.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a1:c9:45:37:03:1a:49:e4:10:af:05:09:02:ea:07:81:79: f4:47:af:89:b7:72:44:1e:f6:74:f7:39:16:b2:b5:9e:d4:af: 30:82:8e:f3:fd:52:92:79:d6:94:e6:37:d8:53:73:36:29:3f: db:12:b1:d0:f6:e8:fa:ec:a0:b6:31:87:a1:3d:dc:15:44:a1: f0:01:b1:3c:97:ad:ff:73:29:db:1f:f6:62:2f:70:f6:6d:1d: e1:f9:33:a7:6c:61:30:9c:08:ec:52:2b:45:d0:f3:5e:9e:6b: c4:9a:ec:e1:12:fa:80:86:eb:85:0b:e7:14:8e:92:86:ad:bf: ec:4d:12:02:9e:76:c2:1f:f1:df:6e:ff:cc:5d:1e:64:ea:46: 4a:aa:af:86:45:8a:9a:d2:0c:9f:f4:70:33:42:45:c0:e6:ad: b8:3c:10:5e:ee:30:1d:d8:b9:52:5f:aa:77:28:1b:62:ed:e0: 9d:f5:81:d2:11:10:7f:85:ce:a0:1a:28:9c:5d:fc:6c:bd:45: 5c:d9:69:fc:f8:42:68:a3:90:07:c6:ab:f4:78:92:ad:d0:ec: 02:07:98:ca:27:71:da:b4:85:f9:6d:b6:03:d4:56:a8:32:9b: 3c:29:65:52:15:8d:3f:58:f9:ab:dd:c8:c0:f7:41:c7:55:29: 43:6d:c7:30 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcGOWsSKIrDEew2+GvIL3sjNDf1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTAxMDMwODQ4NTFaFw0yNjAxMDIwODUzNTFaMDMxMTAvBgNV BAMTKDgzMUVDRkU0N0UzNkNEMUM3NkJGODZCQTk5M0ZGQ0UxMDRCNEU2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUun79S0RevFFPyKH89C7YSlqR WVTeCp0Aw4a7q6D3ktvp5J750kaFwRxivkG04JDEVRrDYLiK8tQ/ZTPRoqWWFlYF M93QSbSAn4vZ4oukrc+dU0IHfq/EZvZbBVzCkoCjK/kJMSsq1CFkL2Z/wYwQdTNU Q2LlFKKJG6HGZ8KqMwpfMZM/HxiNRmUZNpnqUKiWGl/5U5EoGggTV2OQ+6Kngr+Z x8tz0IvJ7AE3gwb5pYG8nuXLG2dxJuXml0d6ZXREZ42+38Ka9Hn657Apccmj1yc6 njJYLfushrPqLX5BKbml+4UclRhVBExyqSrCd2StIY5f89LsU6YPtgwslbvZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgx7P5H42zRx2v4a6mT/84QS05l8wHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzE5NDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVia9AwQAWXVCMA0GCSqG SIb3DQEBCwUAA4IBAQB7oclFNwMaSeQQrwUJAuoHgXn0R6+Jt3JEHvZ09zkWsrWe 1K8wgo7z/VKSedaU5jfYU3M2KT/bErHQ9uj67KC2MYehPdwVRKHwAbE8l63/cynb H/ZiL3D2bR3h+TOnbGEwnAjsUitF0PNenmvEmuzhEvqAhuuFC+cUjpKGrb/sTRIC nnbCH/Hfbv/MXR5k6kZKqq+GRYqa0gyf9HAzQkXA5q24PBBe7jAd2LlSX6p3KBti 7eCd9YHSERB/hc6gGiicXfxsvUVc2Wn8+EJoo5AHxqv0eJKt0OwCB5jKJ3HatIX5 bbYD1FaoMps8KWVSFY0/WPmr3cjA90HHVSlDbccw -----END CERTIFICATE-----Generated at Tue Apr 29 19:22:22 2025 by rpki-client