$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e20323730303532.roa File: 33372e3233302e35382e302f32332d3234203d3e20323730303532.roa (raw, json) Hash identifier: 5lX245HqihwdZ5+nzRqJ+fLDnChtq1dBRkVGIwyTwQE= Subject key identifier: 97:1A:25:08:FA:87:DB:CD:01:C5:C0:82:AB:3F:28:2D:BC:3E:4C:48 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 1B09220307F911910E07F6FC35A6145A51661769 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e20323730303532.roa Signing time: Thu 24 Apr 2025 12:54:04 +0000 ROA not before: Thu 24 Apr 2025 12:49:04 +0000 ROA not after: Thu 23 Apr 2026 12:54:04 +0000 asID: 270052 IP address blocks: 37.230.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 17:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:09:22:03:07:f9:11:91:0e:07:f6:fc:35:a6:14:5a:51:66:17:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Apr 24 12:49:04 2025 GMT Not After : Apr 23 12:54:04 2026 GMT Subject: CN=971A2508FA87DBCD01C5C082AB3F282DBC3E4C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:70:e9:0e:cf:2b:02:ef:87:aa:7d:33:93: 99:7f:57:02:93:ba:2c:f4:d1:c5:af:6d:17:53:39: ed:c9:e9:19:a5:1f:5c:3b:d0:65:cb:38:72:ad:74: 56:da:f2:fb:4a:fe:15:fd:a1:7e:bc:51:d8:64:d5: 81:35:bf:50:46:ab:7f:8e:2a:2c:5b:78:bc:ff:e7: 50:9e:e4:61:1c:fb:81:ec:e7:06:f9:e8:83:6e:d1: 09:29:2f:6e:53:31:7c:a7:7f:15:f9:6f:f3:64:be: e4:80:1f:64:b1:17:47:d1:8e:d9:ae:61:4f:91:a2: 3b:95:96:3a:59:a4:df:9e:be:14:4a:64:ec:cf:ab: 54:cf:c0:f8:fb:6a:69:6c:cb:30:02:19:1a:61:df: f0:60:eb:21:23:48:95:cf:e5:6d:a4:86:5d:72:1e: d5:57:8f:1c:55:ad:9a:b9:05:d2:c4:7a:d8:86:94: a5:c8:e7:99:aa:84:a6:5e:0d:dd:fb:4c:70:00:90: 8f:62:41:64:6e:45:ed:88:88:13:4a:12:c7:80:c7: 65:e5:d0:b6:07:25:12:41:e6:87:c8:36:bf:81:ae: 9d:61:fa:a8:96:08:71:53:81:bf:2b:50:a1:ab:4e: d4:10:33:6e:74:5b:3d:84:3c:e8:b8:3f:12:c3:b1: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:25:08:FA:87:DB:CD:01:C5:C0:82:AB:3F:28:2D:BC:3E:4C:48 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e35382e302f32332d3234203d3e20323730303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.58.0/23 Signature Algorithm: sha256WithRSAEncryption 28:0a:a8:ef:ac:1e:f3:2a:37:e9:e1:35:7b:df:48:ee:e4:47: 91:38:6e:dc:0c:93:f4:e6:8d:b7:d9:b5:fd:3b:f8:e2:7d:c7: b2:1b:78:a0:66:c7:61:17:1c:9d:18:62:7c:1e:db:82:6e:b9: ca:43:19:90:90:5b:b3:a4:a0:65:62:c5:46:7f:1f:d8:49:38: 07:aa:08:a9:20:48:ff:39:b5:19:b6:11:3a:d0:d7:b1:85:9a: 91:92:71:75:f2:4f:0c:48:af:14:de:c8:1a:45:03:21:03:84: 55:31:5e:7c:98:82:49:70:15:cc:24:77:de:0c:fb:39:c5:18: 80:9a:8e:df:14:63:1d:6b:ec:95:f0:ac:6e:47:b5:e4:df:f3: f6:78:0d:93:8f:03:90:cf:77:e6:55:ef:7c:99:fe:79:34:b2: 82:28:07:43:e3:0d:ca:47:48:ff:2d:2e:86:e2:c0:e9:6c:d0: eb:06:9a:66:5e:24:81:72:f9:03:0a:e1:c7:3f:54:24:08:a1: c9:ce:0d:e2:3a:51:5c:21:60:e9:46:0c:bb:84:3e:06:40:87: 51:30:a3:25:dd:de:a2:c4:9e:91:92:a3:0a:26:d5:23:fd:6e: 15:75:60:5e:67:d0:f8:e8:8a:86:15:b0:39:6b:dd:e5:05:97: 70:72:d4:e0 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUGwkiAwf5EZEOB/b8NaYUWlFmF2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTA0MjQxMjQ5MDRaFw0yNjA0MjMxMjU0MDRaMDMxMTAvBgNV BAMTKDk3MUEyNTA4RkE4N0RCQ0QwMUM1QzA4MkFCM0YyODJEQkMzRTRDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaXDpDs8rAu+Hqn0zk5l/VwKT uiz00cWvbRdTOe3J6RmlH1w70GXLOHKtdFba8vtK/hX9oX68Udhk1YE1v1BGq3+O KixbeLz/51Ce5GEc+4Hs5wb56INu0QkpL25TMXynfxX5b/NkvuSAH2SxF0fRjtmu YU+RojuVljpZpN+evhRKZOzPq1TPwPj7amlsyzACGRph3/Bg6yEjSJXP5W2khl1y HtVXjxxVrZq5BdLEetiGlKXI55mqhKZeDd37THAAkI9iQWRuRe2IiBNKEseAx2Xl 0LYHJRJB5ofINr+Brp1h+qiWCHFTgb8rUKGrTtQQM250Wz2EPOi4PxLDsWJFAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUlxolCPqH280BxcCCqz8oLbw+TEgwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzUzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMyMzczMDMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASXmOjANBgkqhkiG 9w0BAQsFAAOCAQEAKAqo76we8yo36eE1e99I7uRHkThu3AyT9OaNt9m1/Tv44n3H sht4oGbHYRccnRhifB7bgm65ykMZkJBbs6SgZWLFRn8f2Ek4B6oIqSBI/zm1GbYR OtDXsYWakZJxdfJPDEivFN7IGkUDIQOEVTFefJiCSXAVzCR33gz7OcUYgJqO3xRj HWvslfCsbke15N/z9ngNk48DkM935lXvfJn+eTSygigHQ+MNykdI/y0uhuLA6WzQ 6waaZl4kgXL5Awrhxz9UJAihyc4N4jpRXCFg6UYMu4Q+BkCHUTCjJd3eosSekZKj CibVI/1uFXVgXmfQ+OiKhhWwOWvd5QWXcHLU4A== -----END CERTIFICATE-----Generated at Fri May 2 02:53:57 2025 by rpki-client