$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa File: 326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa (raw, json) Hash identifier: tMsNakIaNE1YSnO83Wdq/qu0k7JReRsPeGD6S/YEGho= Subject key identifier: B9:BD:97:DF:E1:CF:79:4A:2D:1F:1F:1D:77:5C:93:C8:E1:A2:5F:D6 Certificate issuer: /CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B Certificate serial: 48069FA8B6D7C091AE38D9BA6A32CB3D9B93C17C Authority key identifier: 86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa Signing time: Fri 21 Jun 2024 09:14:59 +0000 ROA not before: Fri 21 Jun 2024 09:09:59 +0000 ROA not after: Fri 20 Jun 2025 09:14:59 +0000 asID: 215147 IP address blocks: 2a07:2486:fc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jul 2024 14:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:06:9f:a8:b6:d7:c0:91:ae:38:d9:ba:6a:32:cb:3d:9b:93:c1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86A3055545CB4F4C420BE943F5C18559EBC1F39B Validity Not Before: Jun 21 09:09:59 2024 GMT Not After : Jun 20 09:14:59 2025 GMT Subject: CN=B9BD97DFE1CF794A2D1F1F1D775C93C8E1A25FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:a5:97:b6:b8:cb:2d:46:d5:58:20:da:88: b3:9a:84:ff:90:d3:67:ef:58:cb:4e:bf:96:bc:84: 0c:77:c3:58:be:57:e1:7a:88:ff:73:71:4d:d7:b9: e3:1b:c7:5b:40:98:a0:f7:c7:73:8f:a7:b2:ff:5b: 40:a7:50:60:6a:1e:d5:04:c3:40:72:65:e9:50:ea: 30:91:6c:21:c1:26:6d:70:cb:55:f8:76:cf:f2:74: ae:47:c6:39:63:42:f5:79:a0:85:10:6b:35:43:89: c1:94:de:60:0a:03:a0:a1:67:9d:c5:37:c2:3e:f0: 75:11:04:01:cd:bd:68:ea:7c:cf:8c:43:38:bd:f0: d1:6e:b8:75:ac:cb:f4:6f:0e:8c:04:20:06:4d:17: 9e:e5:d3:93:6a:ce:93:d9:75:6e:9b:e0:72:da:cb: 01:06:9a:31:87:84:9f:bd:b0:a2:ce:c8:34:5b:69: eb:42:2c:32:f5:55:b5:94:ba:ab:45:80:46:79:1a: 2c:dc:84:14:c5:89:c2:bf:42:db:cd:7b:54:5b:40: 1f:49:09:df:69:2a:37:9f:b4:2a:82:e9:1c:4a:ca: c3:b4:51:58:3d:80:13:6a:2f:d1:f9:82:cc:8e:a7: 17:ad:7b:63:cb:5f:ad:89:9c:6d:d1:f2:c7:09:20: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BD:97:DF:E1:CF:79:4A:2D:1F:1F:1D:77:5C:93:C8:E1:A2:5F:D6 X509v3 Authority Key Identifier: keyid:86:A3:05:55:45:CB:4F:4C:42:0B:E9:43:F5:C1:85:59:EB:C1:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/86A3055545CB4F4C420BE943F5C18559EBC1F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/1/326130373a323438363a6663303a3a2f34342d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2486:fc0::/44 Signature Algorithm: sha256WithRSAEncryption 0d:70:14:3b:b0:ec:c9:a3:26:24:04:f1:cc:8a:08:64:c5:f6: 71:45:0b:9d:65:58:d5:ce:ec:a8:b0:1a:ce:18:d5:05:02:40: a3:2a:6b:af:04:aa:1e:30:90:64:1a:3c:38:5d:cc:a4:d7:6d: 0b:7d:5d:32:f5:05:7c:7b:95:de:c5:70:84:2b:b7:9d:5d:d1: 07:20:4d:7b:bb:80:52:33:14:a7:df:d8:33:4d:40:96:10:ae: fd:4f:49:93:31:c7:ce:36:2a:82:bd:1b:1d:f5:6d:25:9d:30: 59:9a:1a:c5:94:46:bb:d6:2d:55:85:4d:c6:2b:e5:6d:ef:bb: fb:76:00:61:4b:4d:76:4c:3d:13:14:37:04:fc:0a:dd:43:e0: dd:38:d3:dc:cd:f1:0b:04:6b:51:e6:86:5b:e1:b4:b1:58:d7: 18:7e:ef:ee:dc:8a:66:01:7a:56:7f:9d:d5:56:10:0f:1f:86: 04:ad:f6:a8:ac:dd:cd:f1:ec:44:24:24:b8:3e:f5:31:dc:e3: e8:5f:bb:51:dc:17:65:1d:ea:fd:ea:80:4e:67:95:bf:be:29: 8e:56:4f:b1:d9:73:4a:00:f3:e5:63:79:5b:7a:bf:21:22:ca: 2f:68:64:cd:eb:a5:12:67:ac:94:1d:fe:f7:d3:95:84:ba:29: f1:c2:f3:2a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUSAafqLbXwJGuONm6ajLLPZuTwXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZBMzA1NTU0NUNCNEY0QzQyMEJFOTQzRjVDMTg1NTlF QkMxRjM5QjAeFw0yNDA2MjEwOTA5NTlaFw0yNTA2MjAwOTE0NTlaMDMxMTAvBgNV BAMTKEI5QkQ5N0RGRTFDRjc5NEEyRDFGMUYxRDc3NUM5M0M4RTFBMjVGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFaWXtrjLLUbVWCDaiLOahP+Q 02fvWMtOv5a8hAx3w1i+V+F6iP9zcU3XueMbx1tAmKD3x3OPp7L/W0CnUGBqHtUE w0ByZelQ6jCRbCHBJm1wy1X4ds/ydK5HxjljQvV5oIUQazVDicGU3mAKA6ChZ53F N8I+8HURBAHNvWjqfM+MQzi98NFuuHWsy/RvDowEIAZNF57l05NqzpPZdW6b4HLa ywEGmjGHhJ+9sKLOyDRbaetCLDL1VbWUuqtFgEZ5GizchBTFicK/QtvNe1RbQB9J Cd9pKjeftCqC6RxKysO0UVg9gBNqL9H5gsyOpxete2PLX62JnG3R8scJIERPAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUub2X3+HPeUotHx8dd1yTyOGiX9YwHwYDVR0j BBgwFoAUhqMFVUXLT0xCC+lD9cGFWevB85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzEvODZBMzA1NTU0NUNCNEY0QzQyMEJFOTQzRjVDMTg1NTlFQkMxRjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0zYzEwLTQ1 MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC84NkEzMDU1NTQ1Q0I0RjRDNDIwQkU5NDNG NUMxODU1OUVCQzFGMzlCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMS8zMjYxMzAz NzNhMzIzNDM4MzYzYTY2NjMzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzEz NTMxMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHBCoHJIYPwDANBgkqhkiG9w0BAQsFAAOCAQEADXAU O7DsyaMmJATxzIoIZMX2cUULnWVY1c7sqLAazhjVBQJAoyprrwSqHjCQZBo8OF3M pNdtC31dMvUFfHuV3sVwhCu3nV3RByBNe7uAUjMUp9/YM01AlhCu/U9JkzHHzjYq gr0bHfVtJZ0wWZoaxZRGu9YtVYVNxivlbe+7+3YAYUtNdkw9ExQ3BPwK3UPg3TjT 3M3xCwRrUeaGW+G0sVjXGH7v7tyKZgF6Vn+d1VYQDx+GBK32qKzdzfHsRCQkuD71 Mdzj6F+7UdwXZR3q/eqATmeVv74pjlZPsdlzSgDz5WN5W3q/ISLKL2hkzeulEmes lB3+99OVhLop8cLzKg== -----END CERTIFICATE-----Generated at Sun Jul 7 02:18:30 2024 by rpki-client on console-ams.rpki-client.org