$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623430323a3a2f34382d3438203d3e20323135363439.roa File: 326130363a313238333a623430323a3a2f34382d3438203d3e20323135363439.roa (raw, json) Hash identifier: cE6yxB1E1QA2RT1qtZ0mzzTrc6xOVeRVpW4lSERCMuk= Subject key identifier: 15:89:BF:7E:85:AA:00:AF:A4:48:99:5D:43:70:27:38:DE:E8:BE:61 Certificate issuer: /CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24 Certificate serial: 21DD5506756D15CBF7C9351A228756BE4A81DD3F Authority key identifier: 72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623430323a3a2f34382d3438203d3e20323135363439.roa Signing time: Sun 28 Apr 2024 20:16:51 +0000 ROA not before: Sun 28 Apr 2024 20:11:51 +0000 ROA not after: Sun 27 Apr 2025 20:16:51 +0000 asID: 215649 IP address blocks: 2a06:1283:b402::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 03:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dd:55:06:75:6d:15:cb:f7:c9:35:1a:22:87:56:be:4a:81:dd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=729896CB421DE8ED6A598D27F2F6491BCABB9F24 Validity Not Before: Apr 28 20:11:51 2024 GMT Not After : Apr 27 20:16:51 2025 GMT Subject: CN=1589BF7E85AA00AFA448995D43702738DEE8BE61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:04:cb:e0:af:65:1e:4b:6c:b5:40:51:b9: ed:45:8b:86:73:84:09:0f:5e:a8:fb:21:90:43:68: d0:76:0d:38:6f:cd:7a:d5:f1:f2:3a:0f:9d:e5:5b: e5:8a:ba:d2:60:90:17:2d:6c:ed:b4:68:13:48:07: 4f:02:04:4c:5c:c1:1c:7a:12:0b:36:50:94:f2:cf: 0a:53:6b:48:c1:a2:01:ea:15:ff:5a:50:6e:33:23: 04:52:9e:9a:de:89:94:08:5c:bb:60:c0:10:bf:ed: 9b:5c:30:e1:2b:dd:b7:5e:a8:27:1a:28:de:5d:34: 3b:5c:53:db:fa:68:01:05:f9:a5:75:ec:91:a7:3d: 0c:72:16:e1:c2:0c:e8:a7:f3:20:1d:bc:4d:37:ff: cf:90:83:87:6a:ec:a9:d1:c8:b5:5f:1a:5a:e6:d3: 88:11:76:75:7b:57:28:37:91:d3:22:e5:bc:ce:da: e4:b2:f7:91:6f:e7:8c:a6:54:dd:06:38:a0:fe:d7: af:6e:4c:f7:e8:f1:02:b6:89:25:35:56:2d:ca:61: ef:24:21:cb:61:81:07:76:49:f9:ec:3f:9a:33:66: 1a:1f:7f:81:ef:80:a1:0f:67:68:1e:d1:46:e9:d1: df:12:d5:9b:45:27:c7:68:f6:e8:aa:f0:b8:92:ac: 05:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:BF:7E:85:AA:00:AF:A4:48:99:5D:43:70:27:38:DE:E8:BE:61 X509v3 Authority Key Identifier: keyid:72:98:96:CB:42:1D:E8:ED:6A:59:8D:27:F2:F6:49:1B:CA:BB:9F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/729896CB421DE8ED6A598D27F2F6491BCABB9F24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/729896CB421DE8ED6A598D27F2F6491BCABB9F24.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/58833e98-6f21-4d30-8d83-140aca938d71/1/326130363a313238333a623430323a3a2f34382d3438203d3e20323135363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:b402::/48 Signature Algorithm: sha256WithRSAEncryption 04:55:cb:c3:a9:95:9c:81:2d:cd:25:0a:35:5f:c3:58:6e:95: 71:8b:34:f3:86:6e:97:c3:bd:e5:ef:9c:18:41:74:b2:6b:bb: 1d:ea:e9:5f:44:95:d3:fd:83:8b:22:d3:f4:4a:7c:4b:ae:59: 46:5a:d6:e2:6d:9d:be:43:c9:b8:fd:3d:d2:13:ba:00:20:c5: b4:85:40:7f:e6:cb:03:da:b8:15:50:1f:f8:ee:18:87:8e:d0: d9:81:f8:30:3a:20:c9:36:c9:49:1a:4e:6e:2d:5f:d2:49:e7: 3c:ec:6b:35:f6:9f:d9:da:f8:6e:e1:34:ce:87:44:6c:a1:6a: 93:67:7d:2f:3c:f3:09:94:23:09:60:75:d8:01:39:49:0f:8b: de:42:3b:b1:43:e1:d2:74:af:c4:25:f2:c5:0a:07:54:1e:65: 4c:34:6e:bc:1a:15:3e:da:28:bf:37:bc:86:3c:9f:e1:44:12: c9:98:b6:f7:b8:78:53:9b:d2:4a:e6:c3:78:65:1e:93:ad:2e: 5a:06:a2:d9:01:7f:fc:6e:0c:9f:4a:87:ad:f8:4f:cd:7c:e9: 5c:2f:00:46:ed:30:2a:16:31:a5:fd:6f:d7:6e:55:b8:1a:fd: 6c:66:13:17:c3:0d:b9:21:b7:f5:60:ed:55:b2:7f:d2:52:43: 8c:14:29:e8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIUId1VBnVtFcv3yTUaIodWvkqB3T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJD QUJCOUYyNDAeFw0yNDA0MjgyMDExNTFaFw0yNTA0MjcyMDE2NTFaMDMxMTAvBgNV BAMTKDE1ODlCRjdFODVBQTAwQUZBNDQ4OTk1RDQzNzAyNzM4REVFOEJFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUQTL4K9lHktstUBRue1Fi4Zz hAkPXqj7IZBDaNB2DThvzXrV8fI6D53lW+WKutJgkBctbO20aBNIB08CBExcwRx6 Egs2UJTyzwpTa0jBogHqFf9aUG4zIwRSnpreiZQIXLtgwBC/7ZtcMOEr3bdeqCca KN5dNDtcU9v6aAEF+aV17JGnPQxyFuHCDOin8yAdvE03/8+Qg4dq7KnRyLVfGlrm 04gRdnV7Vyg3kdMi5bzO2uSy95Fv54ymVN0GOKD+169uTPfo8QK2iSU1Vi3KYe8k IcthgQd2SfnsP5ozZhoff4HvgKEPZ2ge0Ubp0d8S1ZtFJ8do9uiq8LiSrAV9AgMB AAGjggJ6MIICdjAdBgNVHQ4EFgQUFYm/foWqAK+kSJldQ3AnON7ovmEwHwYDVR0j BBgwFoAUcpiWy0Id6O1qWY0n8vZJG8q7nyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTg4MzNlOTgtNmYyMS00ZDMwLThkODMtMTQwYWNhOTM4 ZDcxLzEvNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJDQUJCOUYyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNzI5ODk2Q0I0MjFERThFRDZBNTk4RDI3RjJGNjQ5MUJDQUJC OUYyNC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTg4MzNlOTgt NmYyMS00ZDMwLThkODMtMTQwYWNhOTM4ZDcxLzEvMzI2MTMwMzYzYTMxMzIzODMz M2E2MjM0MzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM2MzQzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACoGEoO0AjANBgkqhkiG9w0BAQsFAAOCAQEABFXLw6mVnIEtzSUK NV/DWG6VcYs084Zul8O95e+cGEF0smu7HerpX0SV0/2DiyLT9Ep8S65ZRlrW4m2d vkPJuP090hO6ACDFtIVAf+bLA9q4FVAf+O4Yh47Q2YH4MDogyTbJSRpObi1f0knn POxrNfaf2dr4buE0zodEbKFqk2d9LzzzCZQjCWB12AE5SQ+L3kI7sUPh0nSvxCXy xQoHVB5lTDRuvBoVPtoovze8hjyf4UQSyZi297h4U5vSSubDeGUek60uWgai2QF/ /G4Mn0qHrfhPzXzpXC8ARu0wKhYxpf1v125VuBr9bGYTF8MNuSG39WDtVbJ/0lJD jBQp6A== -----END CERTIFICATE-----Generated at Tue Jul 2 11:42:49 2024 by rpki-client on console-fra.rpki-client.org