$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa File: AS207152.roa (raw, json) Hash identifier: 0J/K0mSXbUeVur58R+4nw7ktEddgQNPQm2QyAFT0Lbs= Subject key identifier: 0D:CC:B4:20:91:F7:51:6D:70:59:40:8E:87:8F:37:73:1D:99:0D:02 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 039FB9162E0DDFC04407F3FD4CE4F31596EB73E8 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa Signing time: Tue 31 Dec 2024 12:53:48 +0000 ROA not before: Tue 31 Dec 2024 12:48:48 +0000 ROA not after: Tue 30 Dec 2025 12:53:48 +0000 asID: 207152 IP address blocks: 86.38.184.0/23 maxlen: 24 86.38.186.0/23 maxlen: 24 86.38.246.0/23 maxlen: 24 89.116.172.0/23 maxlen: 24 89.116.210.0/23 maxlen: 24 89.117.88.0/22 maxlen: 24 89.117.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 13:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9f:b9:16:2e:0d:df:c0:44:07:f3:fd:4c:e4:f3:15:96:eb:73:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 31 12:48:48 2024 GMT Not After : Dec 30 12:53:48 2025 GMT Subject: CN=0DCCB42091F7516D7059408E878F37731D990D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:9b:a8:5c:cb:a5:1a:39:01:6c:7f:a2:26: e3:93:e7:b7:60:a0:47:45:c8:ab:3a:d3:54:69:38: bd:a8:22:23:89:64:6d:fb:63:21:c4:14:93:ff:ec: 85:de:d5:43:13:c9:cc:0c:df:80:a8:d0:dc:0b:5e: bf:3c:ea:66:54:4f:01:da:a6:c1:e2:c7:58:f3:b2: 8c:17:2d:5e:4c:b5:a7:37:61:5d:a1:8a:b0:84:50: 3b:7d:d8:c3:55:5c:74:6a:f4:82:e3:c2:8a:20:0d: ba:ca:be:39:11:45:9f:a9:14:1c:a8:70:92:67:49: a2:b5:ff:24:fe:9c:67:48:28:9b:24:ea:55:52:01: c4:df:ec:de:6a:c5:f9:ee:5f:b2:46:26:70:62:de: 6d:5e:f1:7f:14:f8:8d:cf:66:90:be:fc:64:46:c2: 9c:2b:0f:b4:83:1e:b9:07:97:60:65:fd:a0:84:9f: 41:9c:bc:23:fd:e6:35:b7:5b:08:47:30:cc:25:c0: 0d:3b:a5:59:af:16:88:03:57:12:c3:67:96:5e:07: 51:77:28:38:d7:14:08:21:00:41:8f:53:c1:97:25: d5:bf:bd:d9:2a:81:fd:d6:63:c2:e8:9b:29:5a:78: 97:24:ae:20:6f:d6:e0:1f:fb:ce:95:a2:02:11:c4: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CC:B4:20:91:F7:51:6D:70:59:40:8E:87:8F:37:73:1D:99:0D:02 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS207152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.184.0/22 86.38.246.0/23 89.116.172.0/23 89.116.210.0/23 89.117.88.0/22 89.117.132.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:eb:2a:1a:4d:cb:23:b9:fd:19:be:b4:15:0f:1b:cb:75:c3: d4:b0:a9:b0:17:46:b7:a5:2f:0a:29:f2:e2:76:24:e3:7d:e8: 15:b0:1f:7b:17:31:25:5d:13:6e:97:29:c1:9e:e9:69:ee:be: 30:7c:2b:08:e0:78:f0:ab:b9:72:9d:39:bd:5c:73:88:b1:41: 0a:2d:f6:45:ba:63:d4:8b:24:4f:e2:ae:99:b3:cf:95:51:5a: 31:f6:e1:8a:ee:0d:bc:77:f8:4c:c2:19:61:df:43:d0:88:f4: 97:20:83:54:da:df:cf:c5:e4:91:2c:1a:cc:c6:b2:55:bb:08: 27:0f:37:de:6c:d4:53:8a:eb:a0:f9:2e:81:35:97:e1:e1:d7: e8:69:e0:f1:09:88:8a:38:79:0c:62:96:61:fa:b6:4c:01:73: 4d:a6:16:ea:98:d2:13:19:1d:5e:e2:0c:47:1d:39:c1:f5:31: 3f:1d:81:23:ef:5e:09:9d:d9:40:10:4d:3d:fd:36:4a:dc:5f: 12:fe:a0:26:e4:12:68:ea:82:3c:f4:ca:1c:71:51:82:b4:f7: df:bd:44:26:bb:5b:82:57:7c:d6:ba:b8:b5:f3:78:98:49:e6: 89:66:d8:bb:b9:c0:9d:79:80:ab:a5:54:14:1a:49:89:0d:16: bb:94:df:05 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUA5+5Fi4N38BEB/P9TOTzFZbrc+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDEyMzExMjQ4NDhaFw0yNTEyMzAxMjUzNDhaMDMxMTAvBgNV BAMTKDBEQ0NCNDIwOTFGNzUxNkQ3MDU5NDA4RTg3OEYzNzczMUQ5OTBEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcipuoXMulGjkBbH+iJuOT57dg oEdFyKs601RpOL2oIiOJZG37YyHEFJP/7IXe1UMTycwM34Co0NwLXr886mZUTwHa psHix1jzsowXLV5Mtac3YV2hirCEUDt92MNVXHRq9ILjwoogDbrKvjkRRZ+pFByo cJJnSaK1/yT+nGdIKJsk6lVSAcTf7N5qxfnuX7JGJnBi3m1e8X8U+I3PZpC+/GRG wpwrD7SDHrkHl2Bl/aCEn0GcvCP95jW3WwhHMMwlwA07pVmvFogDVxLDZ5ZeB1F3 KDjXFAghAEGPU8GXJdW/vdkqgf3WY8LomylaeJckriBv1uAf+86VogIRxL33AgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUDcy0IJH3UW1wWUCOh483cx2ZDQIwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzIwNzE1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAlYmuAMEAVYm9gMEAVl0 rAMEAVl00gMEAll1WAMEAll1hDANBgkqhkiG9w0BAQsFAAOCAQEAj+sqGk3LI7n9 Gb60FQ8by3XD1LCpsBdGt6UvCiny4nYk433oFbAfexcxJV0TbpcpwZ7pae6+MHwr COB48Ku5cp05vVxziLFBCi32Rbpj1IskT+KumbPPlVFaMfbhiu4NvHf4TMIZYd9D 0Ij0lyCDVNrfz8XkkSwazMayVbsIJw833mzUU4rroPkugTWX4eHX6Gng8QmIijh5 DGKWYfq2TAFzTaYW6pjSExkdXuIMRx05wfUxPx2BI+9eCZ3ZQBBNPf02StxfEv6g JuQSaOqCPPTKHHFRgrT3371EJrtbgld81rq4tfN4mEnmiWbYu7nAnXmAq6VUFBpJ iQ0Wu5TfBQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:10 2025 by rpki-client