$ rpki-client -vvf r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: SwH+SNJV2wHboqlpdFLksGS4hT/1r+frmtjO1McDED0= Subject key identifier: 4B:D4:87:C6:CE:AD:1F:D1:D4:58:AF:2E:B2:45:06:7C:8C:43:A2:37 Certificate issuer: /CN=D34606949D385DB42714FE71274FAC9948EF279C Certificate serial: 3E253B9CA28E14196208FAEFFB5AC88891C231AD Authority key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject info access: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa Signing time: Tue 31 Dec 2024 12:53:48 +0000 ROA not before: Tue 31 Dec 2024 12:48:48 +0000 ROA not after: Tue 30 Dec 2025 12:53:48 +0000 asID: 7029 IP address blocks: 86.38.4.0/23 maxlen: 24 86.38.184.0/23 maxlen: 24 86.38.186.0/23 maxlen: 24 89.116.242.0/23 maxlen: 24 89.116.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 01:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:25:3b:9c:a2:8e:14:19:62:08:fa:ef:fb:5a:c8:88:91:c2:31:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D34606949D385DB42714FE71274FAC9948EF279C Validity Not Before: Dec 31 12:48:48 2024 GMT Not After : Dec 30 12:53:48 2025 GMT Subject: CN=4BD487C6CEAD1FD1D458AF2EB245067C8C43A237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:44:29:de:bb:1a:e7:b3:fe:25:b3:77:13: 33:64:01:4e:94:63:f1:66:a3:70:a6:05:84:a6:f6: 5c:d3:3e:07:31:d0:f6:a0:b0:d8:27:6e:e4:c0:7b: cc:61:df:95:b4:77:62:ef:76:9e:d2:3e:ab:ba:97: da:cb:c1:a6:53:14:06:2b:ce:95:64:97:e3:b0:c4: 69:10:d4:d5:dd:8c:d7:62:34:18:dc:a4:32:ad:2e: 58:04:45:2c:2a:ce:3d:12:96:cd:02:34:67:b8:f9: 70:75:f8:7b:95:8a:b0:c3:c5:74:a5:0d:2d:79:2f: 88:d3:26:74:8a:9a:3a:b9:e2:36:b6:12:54:90:31: c9:d6:53:e0:4e:e0:95:56:0d:13:70:24:37:e6:73: 5c:64:0b:47:3b:99:a0:89:08:46:de:dc:d9:c6:a8: c6:00:28:e3:6e:42:c7:d0:1e:35:0d:3b:f7:0d:7f: 82:9d:78:f2:34:0e:31:41:b1:c3:ca:93:7b:0e:87: c2:52:7c:c6:72:95:1a:34:0a:48:4e:5c:87:ba:58: a6:9d:f9:7e:8f:be:f3:65:6b:93:90:b4:9e:4c:13: 7f:60:78:75:3d:78:ee:bf:b7:e5:e0:f2:a7:c7:53: e6:7c:13:1a:77:22:df:13:30:d5:a0:32:0a:6a:16: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D4:87:C6:CE:AD:1F:D1:D4:58:AF:2E:B2:45:06:7C:8C:43:A2:37 X509v3 Authority Key Identifier: keyid:D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.4.0/23 86.38.184.0/22 89.116.242.0/23 89.116.246.0/23 Signature Algorithm: sha256WithRSAEncryption 26:ea:52:a9:a0:27:25:ca:8e:f1:93:fa:bf:fc:ed:19:d4:9e: 3e:42:28:bc:4d:5d:59:06:87:23:43:24:eb:cf:b1:f3:71:c9: da:18:2e:c9:82:66:9b:17:4c:25:98:31:28:d3:0b:be:b0:a1: f0:37:9b:be:9c:c1:f2:62:cf:8b:a5:6b:f6:85:f4:46:99:25: a5:30:e9:1d:7a:e9:c7:93:a2:4c:51:b8:1d:82:79:e7:54:a0: ee:c6:52:c1:0c:d1:fe:47:c2:ca:47:de:03:47:90:06:c7:4e: fc:4a:30:d9:91:6f:5f:86:a6:66:82:e5:9e:7d:58:27:30:9f: 6a:54:61:14:a4:f2:d8:6b:26:68:de:b5:05:35:86:1a:3d:59: 98:1e:5f:b6:93:a2:38:9b:c0:14:e2:a8:92:6c:db:d0:3e:80: 44:58:8a:f6:15:e8:d7:27:6a:46:a3:48:5e:ac:92:b0:5a:5d: 99:a7:ac:97:d9:0f:bd:b2:77:cb:4a:75:9e:f1:46:58:e4:1d: 2a:c2:a1:5b:b3:86:71:da:dd:e1:80:7f:66:12:bf:7b:7b:fe: 1e:df:c4:03:b7:a6:cb:fc:c3:ad:c9:98:48:8d:6d:6b:f5:af: fb:ce:2b:37:ba:1a:0d:a2:1d:30:2d:b4:64:96:f5:dc:01:33: 2f:37:1f:6f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPiU7nKKOFBliCPrv+1rIiJHCMa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM0NjA2OTQ5RDM4NURCNDI3MTRGRTcxMjc0RkFDOTk0 OEVGMjc5QzAeFw0yNDEyMzExMjQ4NDhaFw0yNTEyMzAxMjUzNDhaMDMxMTAvBgNV BAMTKDRCRDQ4N0M2Q0VBRDFGRDFENDU4QUYyRUIyNDUwNjdDOEM0M0EyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvkQp3rsa57P+JbN3EzNkAU6U Y/Fmo3CmBYSm9lzTPgcx0PagsNgnbuTAe8xh35W0d2Lvdp7SPqu6l9rLwaZTFAYr zpVkl+OwxGkQ1NXdjNdiNBjcpDKtLlgERSwqzj0Sls0CNGe4+XB1+HuVirDDxXSl DS15L4jTJnSKmjq54ja2ElSQMcnWU+BO4JVWDRNwJDfmc1xkC0c7maCJCEbe3NnG qMYAKONuQsfQHjUNO/cNf4KdePI0DjFBscPKk3sOh8JSfMZylRo0CkhOXIe6WKad +X6PvvNla5OQtJ5ME39geHU9eO6/t+Xg8qfHU+Z8Exp3It8TMNWgMgpqFjh3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUS9SHxs6tH9HUWK8uskUGfIxDojcwHwYDVR0j BBgwFoAU00YGlJ04XbQnFP5xJ0+smUjvJ5wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v NTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUwZWFkYTNkNzA1LTAvMC9EMzQ2MDY5 NDlEMzg1REI0MjcxNEZFNzEyNzRGQUM5OTQ4RUYyNzlDLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzAwMmUwYmEzLWZlNjAtNDViMS05MTYwLTg2OGEy ZjhhNDNiMS8zL0QzNDYwNjk0OUQzODVEQjQyNzE0RkU3MTI3NEZBQzk5NDhFRjI3 OUMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9yLm1h Z2VsbGFuLmlweG8uY29tL3JlcG8vNTI4YTIxOGYtYWQyOC00MGQyLWJkN2YtMzUw ZWFkYTNkNzA1LTAvMC9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFWJgQDBAJWJrgDBAFZdPID BAFZdPYwDQYJKoZIhvcNAQELBQADggEBACbqUqmgJyXKjvGT+r/87RnUnj5CKLxN XVkGhyNDJOvPsfNxydoYLsmCZpsXTCWYMSjTC76wofA3m76cwfJiz4ula/aF9EaZ JaUw6R166ceTokxRuB2CeedUoO7GUsEM0f5HwspH3gNHkAbHTvxKMNmRb1+GpmaC 5Z59WCcwn2pUYRSk8thrJmjetQU1hho9WZgeX7aTojibwBTiqJJs29A+gERYivYV 6NcnakajSF6skrBaXZmnrJfZD72yd8tKdZ7xRljkHSrCoVuzhnHa3eGAf2YSv3t7 /h7fxAO3psv8w63JmEiNbWv1r/vOKze6Gg2iHTAttGSW9dwBMy83H28= -----END CERTIFICATE-----Generated at Wed May 7 13:01:46 2025 by rpki-client