$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32332d3234203d3e20323730303532.roa File: 33372e3233302e35362e302f32332d3234203d3e20323730303532.roa (raw, json) Hash identifier: dPfzyKc96+BpmrFiAZOB5TQ6c+509Gey7/6U3tpIibE= Subject key identifier: D8:22:A0:86:06:8C:72:4F:83:98:83:DE:E8:88:98:63:ED:D7:2B:16 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 4B09DE1CC5400C7D95A8245EFF1750D5D8CB1533 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32332d3234203d3e20323730303532.roa Signing time: Thu 24 Apr 2025 12:54:04 +0000 ROA not before: Thu 24 Apr 2025 12:49:04 +0000 ROA not after: Thu 23 Apr 2026 12:54:04 +0000 asID: 270052 IP address blocks: 37.230.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 00:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:09:de:1c:c5:40:0c:7d:95:a8:24:5e:ff:17:50:d5:d8:cb:15:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 24 12:49:04 2025 GMT Not After : Apr 23 12:54:04 2026 GMT Subject: CN=D822A086068C724F839883DEE8889863EDD72B16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:58:cc:ef:31:81:ec:29:83:52:66:4c:ba:72: 71:b5:2f:65:62:1a:81:75:15:fe:d0:6d:f8:88:24: a4:93:0f:56:33:a2:49:dd:49:8d:4d:04:84:bd:87: 66:b3:6d:98:e6:9f:15:40:29:a5:5a:76:b8:e0:3f: f1:ab:5b:79:12:84:20:a8:a8:65:bd:82:26:64:f0: f2:e6:3e:67:71:a2:06:c9:6c:fc:90:bc:a5:09:eb: cf:9a:d6:fc:c7:dc:81:c4:75:bf:ce:82:91:f6:31: c2:5c:3f:00:80:32:f0:be:d2:c2:ce:b0:a7:5d:07: e8:e3:d4:96:8e:9b:0f:a2:56:85:d7:df:d5:f5:65: 72:94:11:37:1d:fe:69:94:ec:c4:c4:72:d7:c0:9c: 39:be:21:a5:18:42:e0:ce:5e:a2:45:1a:50:49:00: 69:40:03:b6:f3:2d:07:e2:a8:6e:fc:2d:48:67:b2: a5:71:fc:e3:48:88:d8:4b:aa:a6:03:4c:55:a7:f8: d6:91:19:78:8f:0b:a9:34:69:1b:82:8f:6a:a8:f2: fc:b5:4a:c6:8c:30:91:a0:e9:3c:e8:2f:2c:ec:03: 10:a5:16:8d:62:69:bc:f1:fc:60:b7:04:9e:4b:5b: a9:63:f3:46:95:a0:8c:98:18:e8:cf:22:d8:b0:14: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:22:A0:86:06:8C:72:4F:83:98:83:DE:E8:88:98:63:ED:D7:2B:16 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35362e302f32332d3234203d3e20323730303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.56.0/23 Signature Algorithm: sha256WithRSAEncryption 22:e1:8b:f7:af:2c:40:be:3d:10:f8:17:7a:8b:df:db:d5:ee: 00:f5:49:68:e1:d8:bd:1e:9d:47:1b:d0:a9:00:34:ff:35:c1: fc:cd:d3:ee:4e:69:e5:dc:9d:33:3f:a1:44:6b:f5:02:8f:67: 19:01:7e:93:b8:a3:2a:44:68:77:bc:ad:c1:f1:df:b6:a2:b8: 5c:70:0e:89:d7:8b:c8:67:44:96:aa:9c:36:7b:08:6e:12:01: c0:6c:42:4c:70:42:d3:45:bb:57:7e:f2:42:ab:f4:4f:02:f4: e6:76:db:0a:a8:02:ec:3c:e0:8a:d9:33:c7:9d:f8:88:cb:72: 7a:e3:c7:92:4b:ae:3d:c7:e0:64:90:c2:21:da:cc:82:62:20: aa:4f:98:84:c4:e7:38:5a:0b:4c:6a:d1:19:61:82:1c:dc:db: eb:89:cb:04:b9:12:2f:69:07:b6:2c:bd:33:26:ff:72:3e:2f: c6:34:1c:8f:bf:f8:98:66:d6:93:d8:3e:b1:57:a8:55:d7:db: 31:0f:9e:5b:e7:d9:1b:2e:b3:ef:9f:7e:ad:cb:6e:a8:21:32: 01:5e:ce:a4:3b:78:21:61:60:a9:cc:58:1c:ec:96:c5:9c:aa: cc:00:5d:ee:ec:89:5d:d0:b5:75:52:6c:51:1a:66:46:db:e9: 49:b9:93:d8 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUSwneHMVADH2VqCRe/xdQ1djLFTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA0MjQxMjQ5MDRaFw0yNjA0MjMxMjU0MDRaMDMxMTAvBgNV BAMTKEQ4MjJBMDg2MDY4QzcyNEY4Mzk4ODNERUU4ODg5ODYzRURENzJCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2WMzvMYHsKYNSZky6cnG1L2Vi GoF1Ff7QbfiIJKSTD1YzokndSY1NBIS9h2azbZjmnxVAKaVadrjgP/GrW3kShCCo qGW9giZk8PLmPmdxogbJbPyQvKUJ68+a1vzH3IHEdb/OgpH2McJcPwCAMvC+0sLO sKddB+jj1JaOmw+iVoXX39X1ZXKUETcd/mmU7MTEctfAnDm+IaUYQuDOXqJFGlBJ AGlAA7bzLQfiqG78LUhnsqVx/ONIiNhLqqYDTFWn+NaRGXiPC6k0aRuCj2qo8vy1 SsaMMJGg6TzoLyzsAxClFo1iabzx/GC3BJ5LW6lj80aVoIyYGOjPItiwFNyNAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQU2CKghgaMck+DmIPe6IiYY+3XKxYwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMyMzczMDMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASXmODANBgkqhkiG 9w0BAQsFAAOCAQEAIuGL968sQL49EPgXeovf29XuAPVJaOHYvR6dRxvQqQA0/zXB /M3T7k5p5dydMz+hRGv1Ao9nGQF+k7ijKkRod7ytwfHftqK4XHAOideLyGdElqqc NnsIbhIBwGxCTHBC00W7V37yQqv0TwL05nbbCqgC7Dzgitkzx534iMtyeuPHkkuu PcfgZJDCIdrMgmIgqk+YhMTnOFoLTGrRGWGCHNzb64nLBLkSL2kHtiy9Myb/cj4v xjQcj7/4mGbWk9g+sVeoVdfbMQ+eW+fZGy6z759+rctuqCEyAV7OpDt4IWFgqcxY HOyWxZyqzABd7uyJXdC1dVJsURpmRtvpSbmT2A== -----END CERTIFICATE-----Generated at Thu May 1 15:01:26 2025 by rpki-client