$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa File: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (raw, json) Hash identifier: 2KFsAHpLftCLwZtbIHo+pYTrjbgMoXhuDq6pQ1osTQE= Subject key identifier: 18:08:30:91:E3:6F:75:C1:8E:CB:36:09:F8:F8:4A:EB:C4:26:ED:DF Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 2C7D8D62033CFCADE8A1F0F540B361E5649C4AA0 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa Signing time: Tue 28 May 2024 11:29:08 +0000 ROA not before: Tue 28 May 2024 11:24:08 +0000 ROA not after: Tue 27 May 2025 11:29:08 +0000 asID: 151544 IP address blocks: 2a14:7581:4860::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 13:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7d:8d:62:03:3c:fc:ad:e8:a1:f0:f5:40:b3:61:e5:64:9c:4a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: May 28 11:24:08 2024 GMT Not After : May 27 11:29:08 2025 GMT Subject: CN=18083091E36F75C18ECB3609F8F84AEBC426EDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:00:1e:3a:02:42:32:38:13:af:4f:03:ad: 17:45:f1:a6:a1:1b:87:78:0a:5f:3b:fa:59:8d:42: b4:fa:7b:9f:15:8e:4e:9f:17:46:28:36:4a:a2:84: d5:54:1f:a1:a0:30:2c:9b:ff:aa:70:83:3e:1c:d4: ba:9b:7f:16:03:1c:4c:42:7e:d3:84:08:9e:20:22: 0f:5b:4d:18:88:98:de:9e:b6:04:23:ef:6d:f2:80: 93:22:12:86:c7:50:2b:c1:45:a4:e6:6f:98:55:56: e0:dd:65:86:68:7b:46:bf:9a:52:93:8a:29:be:66: 06:c3:cc:12:71:e0:bc:38:9a:b6:47:ee:b5:50:c0: 6e:e5:5d:2f:ca:82:6e:57:98:20:e1:b5:b1:a5:dd: 09:07:4e:86:32:ec:4d:5f:0d:64:ce:ce:2b:0b:e7: 2e:1e:09:2c:ed:d5:ce:7b:0e:13:5e:ae:ad:52:95: 6a:fe:fb:cc:4f:80:4a:01:50:df:e7:e8:1a:7f:60: 4a:6e:a4:85:68:12:fe:cb:69:74:80:27:71:9b:7c: f0:bb:3d:e3:cd:17:d6:77:d8:32:51:11:51:33:96: 9d:08:d2:3f:77:4b:2b:07:43:df:78:c5:e2:d3:e3: 6c:ba:8f:25:71:d2:24:1c:63:74:a2:34:0c:52:60: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:30:91:E3:6F:75:C1:8E:CB:36:09:F8:F8:4A:EB:C4:26:ED:DF X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:4860::/44 Signature Algorithm: sha256WithRSAEncryption 9e:0e:85:3c:be:a4:99:13:f7:54:cf:a3:b1:50:73:2c:4d:56: 73:95:64:7e:90:96:69:b4:11:3c:05:37:19:8c:59:a9:7e:69: 07:93:47:0c:c1:c7:06:81:5c:3f:1e:3b:25:d4:99:07:42:82: c9:c0:a3:a2:e8:c1:5f:ad:a1:be:b7:65:4d:2f:c6:74:9d:fe: 68:cb:c8:b5:d5:68:72:35:08:8e:02:07:bf:9a:1a:05:7e:86: 63:be:7b:05:e1:5c:03:e9:7b:52:af:6f:8d:82:d5:54:75:c7: 48:be:97:60:c5:1f:d7:9f:47:34:f9:ab:18:65:58:14:bc:a6: f5:25:4b:32:77:43:d6:46:47:f9:a9:d8:12:b7:04:3f:b7:b8: c2:7c:a3:a4:7a:fe:c5:ac:d0:fc:41:c5:1d:c6:69:b3:94:69: fd:3b:b4:73:77:49:2d:4f:e7:b6:ad:c0:92:5c:ec:d0:9f:b1: 33:31:a6:97:6a:86:e1:96:f1:93:77:6f:cf:d4:67:03:b3:7e: 90:07:65:79:c2:ec:25:1f:ec:e2:69:d4:1e:2c:34:f6:f4:2c: 5c:10:82:50:ed:ec:5f:05:f4:77:f4:31:d8:b4:fc:aa:69:7f: ab:8c:46:d1:68:6c:2f:af:97:52:3c:86:cc:c9:b6:ef:3e:95: 1b:84:eb:d4 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULH2NYgM8/K3oofD1QLNh5WScSqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNDA1MjgxMTI0MDhaFw0yNTA1MjcxMTI5MDhaMDMxMTAvBgNV BAMTKDE4MDgzMDkxRTM2Rjc1QzE4RUNCMzYwOUY4Rjg0QUVCQzQyNkVEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLAgAeOgJCMjgTr08DrRdF8aah G4d4Cl87+lmNQrT6e58Vjk6fF0YoNkqihNVUH6GgMCyb/6pwgz4c1LqbfxYDHExC ftOECJ4gIg9bTRiImN6etgQj723ygJMiEobHUCvBRaTmb5hVVuDdZYZoe0a/mlKT iim+ZgbDzBJx4Lw4mrZH7rVQwG7lXS/Kgm5XmCDhtbGl3QkHToYy7E1fDWTOzisL 5y4eCSzt1c57DhNerq1SlWr++8xPgEoBUN/n6Bp/YEpupIVoEv7LaXSAJ3GbfPC7 PePNF9Z32DJREVEzlp0I0j93SysHQ994xeLT42y6jyVx0iQcY3SiNAxSYMlpAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUGAgwkeNvdcGOyzYJ+PhK68Qm7d8wHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8zMTFlNDdjNC0wMmYwLTQ2NTctOTAyMi1kMmI4M2NmZjg3NTUvNC8zMjYxMzEz NDNhMzczNTM4MzEzYTM0MzgzNjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEz NTMxMzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gUhgMA0GCSqGSIb3DQEBCwUAA4IBAQCe DoU8vqSZE/dUz6OxUHMsTVZzlWR+kJZptBE8BTcZjFmpfmkHk0cMwccGgVw/Hjsl 1JkHQoLJwKOi6MFfraG+t2VNL8Z0nf5oy8i11WhyNQiOAge/mhoFfoZjvnsF4VwD 6XtSr2+NgtVUdcdIvpdgxR/Xn0c0+asYZVgUvKb1JUsyd0PWRkf5qdgStwQ/t7jC fKOkev7FrND8QcUdxmmzlGn9O7Rzd0ktT+e2rcCSXOzQn7EzMaaXaobhlvGTd2/P 1GcDs36QB2V5wuwlH+ziadQeLDT29CxcEIJQ7exfBfR39DHYtPyqaX+rjEbRaGwv r5dSPIbMybbvPpUbhOvU -----END CERTIFICATE-----Generated at Fri Sep 27 23:37:03 2024 by rpki-client on console-fra.rpki-client.org