$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: okjmfMUPtNtmB+YgoKbmrSqd6CYYzeYzA5IuvR4FqE4= Subject key identifier: 56:F7:65:27:E2:D9:F0:2E:C8:41:6E:A9:5E:C1:AB:90:E4:0F:21:87 Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Certificate serial: 3997DF855E503F27BA48B6F30A9C1FC3809AC7A5 Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 19 Jan 2024 19:27:45 +0000 ROA not before: Fri 19 Jan 2024 19:22:45 +0000 ROA not after: Fri 17 Jan 2025 19:27:45 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cd2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 12:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:97:df:85:5e:50:3f:27:ba:48:b6:f3:0a:9c:1f:c3:80:9a:c7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Validity Not Before: Jan 19 19:22:45 2024 GMT Not After : Jan 17 19:27:45 2025 GMT Subject: CN=56F76527E2D9F02EC8416EA95EC1AB90E40F2187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:79:78:e5:51:3b:bd:be:d9:17:d2:df:3f: 01:f2:b8:f7:77:96:50:e4:73:36:f2:5f:7d:2b:ec: 42:c1:2d:f3:e1:9a:03:fe:eb:44:a9:4b:0f:cf:22: 2c:91:7d:7e:37:6d:b5:86:6f:ae:de:5b:7c:d1:df: 5d:89:9a:cd:d5:26:c7:2c:a9:fa:35:89:a4:32:21: d6:dd:a3:0e:f2:c7:e2:5f:aa:cd:e0:f5:35:f9:d8: e9:70:33:70:1c:52:b9:36:54:16:77:c0:c7:db:78: 9a:f3:78:0a:89:9e:53:bc:f5:40:a1:77:84:ab:6f: ca:54:ec:59:37:c5:25:4a:a7:60:21:85:30:b4:f9: ca:d3:7c:57:06:c1:ce:a6:b9:d9:32:3a:f0:3c:d3: bd:98:ed:17:2a:38:73:ba:59:81:1e:9e:aa:54:2c: 6b:32:c0:ee:f1:ba:51:e1:1f:80:e2:3f:f2:99:62: 05:08:be:46:a6:a2:b0:d2:32:a8:dc:88:c7:56:d7: 19:93:ba:a5:53:eb:e2:b7:e4:dd:d1:bc:ab:44:fb: 2e:be:2f:64:f2:58:e6:e5:f4:f6:13:f5:b0:5f:22: 95:4d:47:49:2d:7e:4a:81:95:67:87:9d:7f:a4:34: f4:6b:fa:a3:fd:1d:b8:cd:78:35:3f:52:45:d8:96: 05:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F7:65:27:E2:D9:F0:2E:C8:41:6E:A9:5E:C1:AB:90:E4:0F:21:87 X509v3 Authority Key Identifier: keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cd2::/48 Signature Algorithm: sha256WithRSAEncryption 14:f8:a2:69:74:83:ec:d9:1a:83:2c:54:32:20:c5:12:f3:70: 90:13:ed:e3:6b:de:2e:3a:6a:6e:58:4a:95:00:4e:bd:d9:c6: 85:46:2a:7a:25:dd:89:09:44:c6:ab:c5:bf:7a:25:04:52:6f: 69:a0:42:8b:4c:e1:29:c4:38:5b:2f:b8:1a:b6:ed:a1:d9:89: 10:9c:82:25:83:2b:2f:bd:12:ef:4c:90:5a:bd:10:62:af:02: 1a:4d:4d:f3:ef:0d:e6:61:12:1e:d1:40:f0:97:f9:81:15:e0: 7d:43:e9:96:7e:6d:32:e0:8a:b0:28:cc:1b:b2:ba:02:e0:e0: c4:2a:4c:9b:10:89:02:71:52:9f:f2:be:43:50:d2:27:1d:d8: a7:0e:9b:38:09:62:43:57:d0:c1:f1:d3:ba:0a:f1:de:8d:8b: 16:9b:54:ee:1c:be:33:bd:b2:89:cb:d7:38:a4:9b:e7:ea:8b: 3a:72:2e:91:c7:32:2e:5d:1f:75:78:0a:3a:36:ed:63:1e:06: 8a:be:c8:76:a3:6c:4a:77:89:fe:95:3c:d1:bf:cc:86:d1:b5: 08:0f:ab:6e:fd:05:c0:66:e8:b5:75:9d:8e:93:33:71:ef:10: 38:3e:18:e2:2c:d4:47:25:5d:79:fd:26:b5:83:90:2d:a6:7a: c6:e3:90:c0 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUOZffhV5QPye6SLbzCpwfw4Cax6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5 NzE5OEJGRDAeFw0yNDAxMTkxOTIyNDVaFw0yNTAxMTcxOTI3NDVaMDMxMTAvBgNV BAMTKDU2Rjc2NTI3RTJEOUYwMkVDODQxNkVBOTVFQzFBQjkwRTQwRjIxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkHl45VE7vb7ZF9LfPwHyuPd3 llDkczbyX30r7ELBLfPhmgP+60SpSw/PIiyRfX43bbWGb67eW3zR312Jms3VJscs qfo1iaQyIdbdow7yx+Jfqs3g9TX52OlwM3AcUrk2VBZ3wMfbeJrzeAqJnlO89UCh d4Srb8pU7Fk3xSVKp2AhhTC0+crTfFcGwc6mudkyOvA8072Y7RcqOHO6WYEenqpU LGsywO7xulHhH4DiP/KZYgUIvkamorDSMqjciMdW1xmTuqVT6+K35N3RvKtE+y6+ L2TyWObl9PYT9bBfIpVNR0ktfkqBlWeHnX+kNPRr+qP9HbjNeDU/UkXYlgUpAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUVvdlJ+LZ8C7IQW6pXsGrkOQPIYcwHwYDVR0j BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5 QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2NDMyM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQzSMA0GCSqGSIb3DQEB CwUAA4IBAQAU+KJpdIPs2RqDLFQyIMUS83CQE+3ja94uOmpuWEqVAE692caFRip6 Jd2JCUTGq8W/eiUEUm9poEKLTOEpxDhbL7gatu2h2YkQnIIlgysvvRLvTJBavRBi rwIaTU3z7w3mYRIe0UDwl/mBFeB9Q+mWfm0y4IqwKMwbsroC4ODEKkybEIkCcVKf 8r5DUNInHdinDps4CWJDV9DB8dO6CvHejYsWm1TuHL4zvbKJy9c4pJvn6os6ci6R xzIuXR91eAo6Nu1jHgaKvsh2o2xKd4n+lTzRv8yG0bUID6tu/QXAZui1dZ2OkzNx 7xA4PhjiLNRHJV15/Sa1g5AtpnrG45DA -----END CERTIFICATE-----Generated at Fri Sep 27 22:22:12 2024 by rpki-client on console-ams.rpki-client.org