$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35793.roa File: AS35793.roa (raw, json) Hash identifier: S7Gk9a4hgKk97IzAZ7FG6zSYLAsxGoY3Yyr2FlTAZeg= Subject key identifier: 57:02:44:6F:61:91:F3:FE:D6:88:43:87:0A:B4:BF:26:ED:9C:7F:74 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3C257436D19DA1CD6ACAFD11A44150BC171BF34B Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35793.roa Signing time: Wed 05 Feb 2025 09:02:32 +0000 ROA not before: Wed 05 Feb 2025 08:57:32 +0000 ROA not after: Wed 04 Feb 2026 09:02:32 +0000 asID: 35793 IP address blocks: 89.117.29.0/24 maxlen: 24 89.117.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 08:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:25:74:36:d1:9d:a1:cd:6a:ca:fd:11:a4:41:50:bc:17:1b:f3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Feb 5 08:57:32 2025 GMT Not After : Feb 4 09:02:32 2026 GMT Subject: CN=5702446F6191F3FED68843870AB4BF26ED9C7F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:4e:a0:5b:9f:61:8a:20:21:f7:70:0c:41: 74:bb:c1:e4:8f:ef:c0:68:c9:53:e8:a3:38:20:25: 44:8e:51:51:6d:ee:a5:c5:d4:99:c6:35:83:79:ff: dc:34:0c:59:fc:2e:51:b3:25:e7:c5:6a:03:80:4b: 28:f4:c8:83:60:fa:7e:82:6e:27:0a:de:a5:70:4d: 9c:44:5c:d6:f7:da:b1:c7:f9:0f:ba:79:13:c1:7e: 76:91:b0:45:e4:1d:03:04:6f:28:db:30:c1:e0:28: 2a:98:30:13:21:f1:33:7a:e6:f3:0f:77:94:f0:77: 0e:52:b2:c2:f1:9d:06:68:b0:da:c5:7f:98:87:dc: b4:36:b0:79:0f:0e:ec:25:f3:b8:c7:57:54:66:a4: 73:de:15:bd:3a:75:c9:cb:a5:ce:88:3c:ff:58:a2: 0f:d3:ae:5f:7e:9d:f5:e6:3f:ff:9a:11:15:47:74: 20:41:02:ec:bf:98:8b:6f:58:51:a4:52:99:fa:62: 05:75:4c:4d:e4:21:38:29:98:15:6b:dd:7f:33:40: 3b:5a:f9:02:ac:6b:de:b1:98:51:2c:8e:a5:38:ae: 9b:ba:19:c4:28:71:c7:05:4e:ea:a6:79:02:c0:5f: fa:22:69:aa:c7:74:f1:b9:4b:fa:3e:3a:a6:43:ed: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:02:44:6F:61:91:F3:FE:D6:88:43:87:0A:B4:BF:26:ED:9C:7F:74 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS35793.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.29.0/24 89.117.171.0/24 Signature Algorithm: sha256WithRSAEncryption aa:3e:6c:bc:95:d2:e7:c7:25:ac:26:25:95:d9:c0:9a:01:36: 4d:71:b4:7e:a2:48:73:b7:91:b6:ad:7c:da:87:2c:2d:3e:4f: 1d:c2:69:95:ec:5e:f1:c5:f7:f2:c6:71:43:cf:98:42:4b:89: 37:ea:39:d1:36:c7:d8:7e:4d:4b:73:1b:f9:2a:b1:0c:5b:6d: 78:e0:44:ca:21:74:80:bc:f1:26:a4:fd:e0:ff:40:1c:c7:22: 77:7e:6b:41:e3:8a:ce:44:9d:b3:94:d9:bb:bf:d8:c6:5f:57: 22:2d:c3:c6:ed:47:43:ca:69:b4:46:09:8b:f8:3d:fd:4b:41: 8e:96:a5:8b:83:a6:da:35:ae:8f:b3:5f:b0:29:0f:27:21:a7: 6a:71:70:67:6f:c0:dc:04:2d:08:3b:e0:c6:25:6f:eb:2e:df: 06:9d:63:0f:13:d8:9c:1f:cc:5f:51:87:cb:f4:a5:f0:a1:f5: 64:6f:9d:50:6a:0d:90:fd:77:4b:8a:58:68:6e:f9:b4:3f:b1: ff:35:6d:93:ee:66:db:ff:41:38:de:8f:50:0e:fe:1f:62:25: eb:ce:8f:77:2e:c6:6b:93:66:22:8e:cb:b9:63:51:51:40:8f: 4d:ba:55:d4:77:37:c9:9c:41:39:97:9b:86:49:e3:54:3c:59: 71:1e:7f:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPCV0NtGdoc1qyv0RpEFQvBcb80swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNTAyMDUwODU3MzJaFw0yNjAyMDQwOTAyMzJaMDMxMTAvBgNV BAMTKDU3MDI0NDZGNjE5MUYzRkVENjg4NDM4NzBBQjRCRjI2RUQ5QzdGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoE6gW59hiiAh93AMQXS7weSP 78BoyVPoozggJUSOUVFt7qXF1JnGNYN5/9w0DFn8LlGzJefFagOASyj0yINg+n6C bicK3qVwTZxEXNb32rHH+Q+6eRPBfnaRsEXkHQMEbyjbMMHgKCqYMBMh8TN65vMP d5Twdw5SssLxnQZosNrFf5iH3LQ2sHkPDuwl87jHV1RmpHPeFb06dcnLpc6IPP9Y og/Trl9+nfXmP/+aERVHdCBBAuy/mItvWFGkUpn6YgV1TE3kITgpmBVr3X8zQDta +QKsa96xmFEsjqU4rpu6GcQocccFTuqmeQLAX/oiaarHdPG5S/o+OqZD7St7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVwJEb2GR8/7WiEOHCrS/Ju2cf3QwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzM1NzkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXUdAwQAWXWrMA0GCSqG SIb3DQEBCwUAA4IBAQCqPmy8ldLnxyWsJiWV2cCaATZNcbR+okhzt5G2rXzahywt Pk8dwmmV7F7xxffyxnFDz5hCS4k36jnRNsfYfk1Lcxv5KrEMW2144ETKIXSAvPEm pP3g/0AcxyJ3fmtB44rORJ2zlNm7v9jGX1ciLcPG7UdDymm0RgmL+D39S0GOlqWL g6baNa6Ps1+wKQ8nIadqcXBnb8DcBC0IO+DGJW/rLt8GnWMPE9icH8xfUYfL9KXw ofVkb51Qag2Q/XdLilhobvm0P7H/NW2T7mbb/0E43o9QDv4fYiXrzo93LsZrk2Yi jsu5Y1FRQI9NulXUdzfJnEE5l5uGSeNUPFlxHn8A -----END CERTIFICATE-----Generated at Sun May 11 02:30:56 2025 by rpki-client