$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa File: AS49999.roa (raw, json) Hash identifier: mOOedNFIzBQYeYO3sUP7zN3qZCk/1ycyABA0mrYhdIs= Subject key identifier: 7C:67:81:21:08:F3:75:A5:E0:30:F8:01:65:6D:DF:8A:6A:AF:05:86 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 2BB8ED4CB888366FC4A9AF0DFC83862D4205E647 Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa Signing time: Tue 31 Dec 2024 12:53:48 +0000 ROA not before: Tue 31 Dec 2024 12:48:48 +0000 ROA not after: Tue 30 Dec 2025 12:53:48 +0000 asID: 49999 IP address blocks: 89.117.88.0/22 maxlen: 24 89.117.112.0/22 maxlen: 24 89.117.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 00:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b8:ed:4c:b8:88:36:6f:c4:a9:af:0d:fc:83:86:2d:42:05:e6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 31 12:48:48 2024 GMT Not After : Dec 30 12:53:48 2025 GMT Subject: CN=7C67812108F375A5E030F801656DDF8A6AAF0586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:56:48:0d:df:f5:ef:dd:96:ed:d4:48:5a: 68:e0:08:e9:f3:38:77:44:25:8e:95:7b:3f:5b:00: ab:33:6f:46:7b:11:f7:a4:b1:d4:20:34:30:35:4d: a2:c7:d3:60:df:3f:ad:7c:98:b0:6b:3f:6d:ef:d0: 68:f9:6b:7a:7b:49:e2:44:3b:19:68:1b:51:ba:d8: 56:1d:74:07:4f:d7:18:63:44:c0:36:66:36:aa:eb: 58:77:d6:c6:e0:8f:30:65:fd:e8:93:e8:5f:fc:fe: 56:3d:6c:1d:c8:37:ef:bd:0e:fc:86:3b:87:cc:00: 29:f3:22:f3:6b:30:9f:e9:c9:ee:ac:bc:0e:02:ea: af:cc:94:c0:39:7f:3a:7f:9e:55:21:cf:bf:a1:80: f1:62:19:62:62:d1:5a:bc:b8:31:d6:91:a4:1e:fd: 5b:68:e0:e8:6e:4f:7b:dc:85:84:5d:0d:a3:9e:fe: c3:86:30:3b:fb:fc:b5:38:a6:26:26:ce:f0:d4:00: 9c:4e:99:0e:ce:ed:6d:97:d9:6c:5d:16:c7:18:6e: 35:df:31:02:6d:59:43:35:4c:81:57:2f:3b:4c:4b: 2c:3c:4b:4a:22:4e:01:f6:6d:fd:a9:c0:e6:86:ae: 29:46:f3:8f:14:c3:7d:a4:d4:64:16:e9:86:39:09: 63:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:81:21:08:F3:75:A5:E0:30:F8:01:65:6D:DF:8A:6A:AF:05:86 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS49999.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.88.0/22 89.117.112.0/22 89.117.120.0/22 Signature Algorithm: sha256WithRSAEncryption 44:3f:8e:8b:0e:63:de:d4:be:1b:19:58:a9:c1:19:dd:a6:dc: 7a:51:53:b2:71:47:0e:92:d1:9f:42:c5:83:70:68:4c:96:d5: d6:d8:4b:cc:53:ac:2b:62:36:0a:27:69:52:0f:e5:ce:d5:93: 34:b9:64:2c:4c:62:e0:b9:ce:bd:7d:bd:7b:61:81:91:8c:72: 66:7d:e1:c3:09:29:43:55:26:33:72:dc:df:df:32:2c:9b:7e: e6:d9:c6:c1:dd:3b:3f:c4:a6:06:d1:bc:e5:49:4e:6c:45:05: 58:f7:ec:2d:49:6f:87:62:89:33:e9:55:1f:85:68:83:f6:45: 5b:4e:f1:94:54:c4:26:9a:66:7c:cd:c5:91:bb:10:33:f4:1f: 38:b3:2a:0d:2f:6e:d8:0a:37:b0:8d:03:4d:5e:33:37:31:56: 2b:24:84:60:51:25:14:c3:7d:a7:be:79:c2:3b:c7:c1:97:c3: 09:54:ad:44:5f:0c:3c:90:a8:6d:a5:8b:7b:02:0b:cd:00:c5: 83:ed:4d:31:cd:f9:dc:ec:b1:d8:48:51:f0:20:a5:7c:1e:b0: 2e:12:4d:84:0b:80:6b:16:11:3f:98:ab:f7:70:7f:91:73:f6: c9:41:08:de:ef:f1:94:9d:97:a8:bf:e4:8a:91:8b:d6:5a:34: 69:4e:1f:18 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUK7jtTLiINm/Eqa8N/IOGLUIF5kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDEyMzExMjQ4NDhaFw0yNTEyMzAxMjUzNDhaMDMxMTAvBgNV BAMTKDdDNjc4MTIxMDhGMzc1QTVFMDMwRjgwMTY1NkRERjhBNkFBRjA1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuVZIDd/1792W7dRIWmjgCOnz OHdEJY6Vez9bAKszb0Z7EfeksdQgNDA1TaLH02DfP618mLBrP23v0Gj5a3p7SeJE OxloG1G62FYddAdP1xhjRMA2Zjaq61h31sbgjzBl/eiT6F/8/lY9bB3IN++9DvyG O4fMACnzIvNrMJ/pye6svA4C6q/MlMA5fzp/nlUhz7+hgPFiGWJi0Vq8uDHWkaQe /Vto4OhuT3vchYRdDaOe/sOGMDv7/LU4piYmzvDUAJxOmQ7O7W2X2WxdFscYbjXf MQJtWUM1TIFXLztMSyw8S0oiTgH2bf2pwOaGrilG848Uw32k1GQW6YY5CWMBAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUfGeBIQjzdaXgMPgBZW3fimqvBYYwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzQ5OTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWXVYAwQCWXVwAwQCWXV4 MA0GCSqGSIb3DQEBCwUAA4IBAQBEP46LDmPe1L4bGVipwRndptx6UVOycUcOktGf QsWDcGhMltXW2EvMU6wrYjYKJ2lSD+XO1ZM0uWQsTGLguc69fb17YYGRjHJmfeHD CSlDVSYzctzf3zIsm37m2cbB3Ts/xKYG0bzlSU5sRQVY9+wtSW+HYokz6VUfhWiD 9kVbTvGUVMQmmmZ8zcWRuxAz9B84syoNL27YCjewjQNNXjM3MVYrJIRgUSUUw32n vnnCO8fBl8MJVK1EXww8kKhtpYt7AgvNAMWD7U0xzfnc7LHYSFHwIKV8HrAuEk2E C4BrFhE/mKv3cH+Rc/bJQQje7/GUnZeov+SKkYvWWjRpTh8Y -----END CERTIFICATE-----Generated at Tue Jun 17 14:31:11 2025 by rpki-client