$ rpki-client -vvf r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa File: 33372e3233302e34392e302f32342d3234203d3e20323131343135.roa (raw, json) Hash identifier: ODSO6PE8lHsObtnFXP3qH2bSrsIJl4YlLmx16DoyJ/A= Subject key identifier: AF:B6:66:B1:0E:F0:A7:56:FD:73:99:CE:7F:97:B3:E9:9E:DF:A8:95 Certificate issuer: /CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Certificate serial: 187F30E736F60007126EED3FAB300F1ACA933748 Authority key identifier: 2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject info access: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa Signing time: Wed 05 Mar 2025 14:15:47 +0000 ROA not before: Wed 05 Mar 2025 14:10:47 +0000 ROA not after: Wed 04 Mar 2026 14:15:47 +0000 asID: 211415 IP address blocks: 37.230.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.mft rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7f:30:e7:36:f6:00:07:12:6e:ed:3f:ab:30:0f:1a:ca:93:37:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2FB4DB0AA4D006958316872E467B554E0FD0BE Validity Not Before: Mar 5 14:10:47 2025 GMT Not After : Mar 4 14:15:47 2026 GMT Subject: CN=AFB666B10EF0A756FD7399CE7F97B3E99EDFA895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:53:82:e3:f9:72:5d:f3:36:b1:43:48:c9: 8e:c2:45:af:0a:51:54:09:3c:98:0f:5f:b7:b2:e4: 96:bf:9f:66:f3:5a:b7:f0:bf:89:08:a2:80:6b:46: ec:01:ff:99:25:46:91:d7:21:cf:47:1f:08:d8:92: b8:7e:9f:8b:b2:fc:f6:ed:e9:f7:e5:55:bd:c8:5d: 82:f9:b1:06:62:6f:9e:7b:fe:40:b0:41:9d:5d:66: a6:e1:37:22:fb:8a:26:8b:ad:33:36:67:58:99:cf: 3e:ed:5f:3b:fc:48:f3:e7:ed:20:1c:16:b5:f4:8f: 2a:27:63:1b:d3:c8:c5:ad:46:6d:46:cc:57:17:61: 94:16:e2:4e:96:43:c7:59:fa:09:a2:27:7f:90:4c: 04:1e:d9:a2:88:fc:7c:dd:de:5d:b3:49:de:7b:39: 73:41:f0:90:5a:dc:a5:a1:87:04:c5:83:d1:c6:15: ba:51:3e:34:c4:73:6d:c4:08:79:af:84:8f:5b:b2: b9:66:f5:93:72:97:e6:a7:da:24:58:6b:88:86:96: 41:0a:6d:9c:91:c4:f2:fb:31:98:55:c1:43:95:07: dd:1b:84:70:8f:1b:f6:e8:e7:77:be:8f:c0:7b:a0: 2d:2a:75:7b:da:46:42:9f:be:a9:0c:44:38:bd:31: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B6:66:B1:0E:F0:A7:56:FD:73:99:CE:7F:97:B3:E9:9E:DF:A8:95 X509v3 Authority Key Identifier: keyid:2A:2F:B4:DB:0A:A4:D0:06:95:83:16:87:2E:46:7B:55:4E:0F:D0:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer Subject Information Access: Signed Object - URI:rsync://r.magellan.ipxo.com/repo/a6f2147a-de8a-4440-bca2-6d8b7c876fda-0/0/33372e3233302e34392e302f32342d3234203d3e20323131343135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.49.0/24 Signature Algorithm: sha256WithRSAEncryption a1:85:46:06:c6:e5:3c:4e:fe:86:c4:f3:46:68:c4:35:57:30: 03:f7:8c:5c:0a:b0:44:8c:5d:41:00:56:d8:29:2a:b4:40:3f: 4d:74:8f:1b:17:e2:e4:5f:5a:4c:5e:51:d6:1b:c6:14:f9:d4: 3c:67:f3:d9:ea:21:f2:c9:ec:40:e2:e5:fe:ba:e5:25:32:b0: 4b:13:f6:72:40:ad:f8:ff:e9:1c:c8:1c:49:e9:7e:23:2e:03: 15:4c:71:d6:bd:a6:8a:04:75:1f:2f:9a:6e:cd:1f:57:3d:34: 34:02:b5:88:d8:b8:64:ec:4a:69:a1:04:51:42:4f:c3:5f:b9: c2:d1:7d:be:0a:fc:0c:3a:6d:fd:71:08:73:9f:f0:9d:6d:14: 4f:1f:e9:32:50:9e:e4:95:c1:80:e3:16:05:e8:cf:0a:60:c7: f0:a0:ee:18:f3:9e:a8:a7:b4:75:06:71:a3:a3:58:24:51:04: b7:c6:f1:00:99:60:7c:b0:7e:c3:6f:aa:ba:25:37:02:63:bd: d9:ec:69:8c:c9:14:e6:18:09:75:e0:34:30:33:f3:b3:34:24: 18:fd:e0:74:a1:69:19:52:64:f6:73:a1:b4:c7:38:0b:e4:ba: 95:a2:e2:cc:52:f8:05:6f:4c:f6:ce:fa:70:da:26:93:75:22: 1e:84:87:fc -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUGH8w5zb2AAcSbu0/qzAPGsqTN0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRkI0REIwQUE0RDAwNjk1ODMxNjg3MkU0NjdCNTU0 RTBGRDBCRTAeFw0yNTAzMDUxNDEwNDdaFw0yNjAzMDQxNDE1NDdaMDMxMTAvBgNV BAMTKEFGQjY2NkIxMEVGMEE3NTZGRDczOTlDRTdGOTdCM0U5OUVERkE4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJTVOC4/lyXfM2sUNIyY7CRa8K UVQJPJgPX7ey5Ja/n2bzWrfwv4kIooBrRuwB/5klRpHXIc9HHwjYkrh+n4uy/Pbt 6fflVb3IXYL5sQZib557/kCwQZ1dZqbhNyL7iiaLrTM2Z1iZzz7tXzv8SPPn7SAc FrX0jyonYxvTyMWtRm1GzFcXYZQW4k6WQ8dZ+gmiJ3+QTAQe2aKI/Hzd3l2zSd57 OXNB8JBa3KWhhwTFg9HGFbpRPjTEc23ECHmvhI9bsrlm9ZNyl+an2iRYa4iGlkEK bZyRxPL7MZhVwUOVB90bhHCPG/bo53e+j8B7oC0qdXvaRkKfvqkMRDi9MeaBAgMB AAGjggJiMIICXjAdBgNVHQ4EFgQUr7ZmsQ7wp1b9c5nOf5ez6Z7fqJUwHwYDVR0j BBgwFoAUKi+02wqk0AaVgxaHLkZ7VU4P0L4wDgYDVR0PAQH/BAQDAgeAMIGIBgNV HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v YTZmMjE0N2EtZGU4YS00NDQwLWJjYTItNmQ4YjdjODc2ZmRhLTAvMC8yQTJGQjRE QjBBQTREMDA2OTU4MzE2ODcyRTQ2N0I1NTRFMEZEMEJFLmNybDCBngYIKwYBBQUH AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5LzlkZjMzYTU3LTdlNGYtNDg0NC04NGUyLWI3MTUz YjU1MTFiNC8wLzJBMkZCNERCMEFBNEQwMDY5NTgzMTY4NzJFNDY3QjU1NEUwRkQw QkUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby9hNmYyMTQ3YS1kZThhLTQ0NDAtYmNh Mi02ZDhiN2M4NzZmZGEtMC8wLzMzMzcyZTMyMzMzMDJlMzQzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzEzMTM0MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACXmMTANBgkqhkiG 9w0BAQsFAAOCAQEAoYVGBsblPE7+hsTzRmjENVcwA/eMXAqwRIxdQQBW2CkqtEA/ TXSPGxfi5F9aTF5R1hvGFPnUPGfz2eoh8snsQOLl/rrlJTKwSxP2ckCt+P/pHMgc Sel+Iy4DFUxx1r2migR1Hy+abs0fVz00NAK1iNi4ZOxKaaEEUUJPw1+5wtF9vgr8 DDpt/XEIc5/wnW0UTx/pMlCe5JXBgOMWBejPCmDH8KDuGPOeqKe0dQZxo6NYJFEE t8bxAJlgfLB+w2+quiU3AmO92expjMkU5hgJdeA0MDPzszQkGP3gdKFpGVJk9nOh tMc4C+S6laLizFL4BW9M9s76cNomk3UiHoSH/A== -----END CERTIFICATE-----Generated at Tue May 13 12:47:12 2025 by rpki-client