$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa File: 326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (raw, json) Hash identifier: lVtF5NwM/y4VEdugMwdt8tI1sYxZq/0nAd61eRBWSSE= Subject key identifier: 45:AC:90:B3:56:6E:EA:65:1F:0C:6C:09:A1:6D:DE:3B:FE:C3:93:0D Certificate issuer: /CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Certificate serial: 6C5C642496A6B26EF667BF1EDBC8AFA4564AAC5A Authority key identifier: 49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa Signing time: Sat 07 Sep 2024 19:35:53 +0000 ROA not before: Sat 07 Sep 2024 19:30:53 +0000 ROA not after: Sat 06 Sep 2025 19:35:53 +0000 asID: 215241 IP address blocks: 2a0a:6044:c110::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5c:64:24:96:a6:b2:6e:f6:67:bf:1e:db:c8:af:a4:56:4a:ac:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Validity Not Before: Sep 7 19:30:53 2024 GMT Not After : Sep 6 19:35:53 2025 GMT Subject: CN=45AC90B3566EEA651F0C6C09A16DDE3BFEC3930D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0c:07:0f:53:34:33:dd:7a:73:29:81:7f:03: 27:0e:5a:62:d0:37:33:65:36:37:c8:dd:bb:04:d4: 0d:6a:fc:ab:26:b4:e3:a8:ca:97:c2:b3:09:13:da: c0:90:47:87:6c:55:3f:3d:83:2f:52:7c:24:61:2d: 1e:4d:9e:c4:c3:0d:01:f4:88:43:7e:ab:50:71:99: 47:f3:cc:ad:a9:ea:31:ab:27:a2:2c:3a:98:21:db: 34:3e:13:37:b9:74:2e:8e:80:23:5b:c0:d3:b9:f8: cb:2b:1b:08:66:4e:08:22:2b:3b:1a:97:46:d2:8f: da:9e:30:df:74:16:ea:20:75:39:c9:02:a6:b4:53: e0:f6:c7:f2:e8:e4:f7:6c:02:15:70:4a:a2:ba:34: a7:e0:c5:d0:2c:58:41:26:f3:42:19:5a:c8:92:8d: 63:04:92:d5:dc:df:2a:4e:c8:56:3d:c2:34:13:5b: fb:29:3b:92:88:d5:fd:df:0c:3d:b4:80:81:e4:ed: ba:f6:1a:8b:b9:a5:74:c3:f9:1e:65:ae:64:17:5e: 36:0f:b0:b5:b0:75:e9:2a:dc:7c:53:9c:c0:2a:25: d4:e3:33:5c:d2:77:9c:9d:b4:7e:51:ea:a6:96:e8: af:1f:f9:54:a6:74:a1:ac:4c:65:c9:b3:b0:d7:95: 0b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AC:90:B3:56:6E:EA:65:1F:0C:6C:09:A1:6D:DE:3B:FE:C3:93:0D X509v3 Authority Key Identifier: keyid:49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:c110::/44 Signature Algorithm: sha256WithRSAEncryption 22:c3:85:89:05:08:93:d8:3c:c4:82:d6:cb:42:83:8b:bf:65: 38:a2:89:56:32:5b:95:dc:63:ed:08:22:cd:b7:38:d6:a6:ee: 88:a0:36:a0:99:58:3a:36:8e:ea:54:a2:77:71:8f:28:04:5b: 12:bc:54:e9:53:9c:66:12:c6:f8:db:97:73:97:29:69:e2:19: 07:fc:b4:e7:e3:d6:e7:4c:8c:35:a7:97:34:24:a8:db:1b:fd: 84:bd:c9:2b:4a:c4:a2:65:af:67:55:f0:54:52:3e:22:69:50: c4:cc:ef:7c:ec:e9:37:57:1d:b7:62:d1:2b:67:32:c7:40:23: 9c:55:7d:00:28:ae:75:1e:24:ae:e4:39:6c:a5:b1:e5:ef:a4: fc:db:fd:d2:11:b7:66:db:79:fb:9b:df:3c:04:ee:fa:2d:54: 6d:b3:4b:29:02:2c:bc:52:a8:40:00:38:03:c3:08:38:5f:7a: 7c:2a:bf:87:bc:fd:a5:42:26:26:02:e7:3d:07:e4:4e:7c:54: 52:b1:02:d1:92:c1:ae:75:7b:d4:a9:e3:6f:64:19:6f:48:4b: 87:89:d1:37:15:14:63:ba:59:0d:91:9d:d4:c1:1b:57:35:10: b9:be:9b:bf:ac:e9:03:38:97:92:45:f9:b3:63:f6:5a:a7:81: 87:6c:1e:1c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUbFxkJJamsm72Z78e28ivpFZKrFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxRTdDMUIzRDcyNUE0QzY3QTc5OENFQzIxRjZBNjk5 RDgyODUzQTAeFw0yNDA5MDcxOTMwNTNaFw0yNTA5MDYxOTM1NTNaMDMxMTAvBgNV BAMTKDQ1QUM5MEIzNTY2RUVBNjUxRjBDNkMwOUExNkRERTNCRkVDMzkzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRDAcPUzQz3XpzKYF/AycOWmLQ NzNlNjfI3bsE1A1q/KsmtOOoypfCswkT2sCQR4dsVT89gy9SfCRhLR5NnsTDDQH0 iEN+q1BxmUfzzK2p6jGrJ6IsOpgh2zQ+Eze5dC6OgCNbwNO5+MsrGwhmTggiKzsa l0bSj9qeMN90FuogdTnJAqa0U+D2x/Lo5PdsAhVwSqK6NKfgxdAsWEEm80IZWsiS jWMEktXc3ypOyFY9wjQTW/spO5KI1f3fDD20gIHk7br2Gou5pXTD+R5lrmQXXjYP sLWwdekq3HxTnMAqJdTjM1zSd5ydtH5R6qaW6K8f+VSmdKGsTGXJs7DXlQtJAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQURayQs1Zu6mUfDGwJoW3eO/7Dkw0wHwYDVR0j BBgwFoAUSR58Gz1yWkxnp5jOwh9qaZ2ChTowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzRjMTU3MmMtZTk3Yy00MTAwLWFlZmYtMTM3M2Y0ZTk0 MzNhLzEvNDkxRTdDMUIzRDcyNUE0QzY3QTc5OENFQzIxRjZBNjk5RDgyODUzQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80OTFFN0MxQjNENzI1QTRDNjdBNzk4Q0VD MjFGNkE2OTlEODI4NTNBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83NGMxNTcyYy1lOTdjLTQxMDAtYWVmZi0xMzczZjRlOTQzM2EvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYzMzEzMTMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM1MzIzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRMEQMA0GCSqGSIb3DQEBCwUAA4IBAQAi w4WJBQiT2DzEgtbLQoOLv2U4oolWMluV3GPtCCLNtzjWpu6IoDagmVg6No7qVKJ3 cY8oBFsSvFTpU5xmEsb425dzlylp4hkH/LTn49bnTIw1p5c0JKjbG/2EvckrSsSi Za9nVfBUUj4iaVDEzO987Ok3Vx23YtErZzLHQCOcVX0AKK51HiSu5DlspbHl76T8 2/3SEbdm23n7m988BO76LVRts0spAiy8UqhAADgDwwg4X3p8Kr+HvP2lQiYmAuc9 B+ROfFRSsQLRksGudXvUqeNvZBlvSEuHidE3FRRjulkNkZ3UwRtXNRC5vpu/rOkD OJeSRfmzY/Zap4GHbB4c -----END CERTIFICATE-----Generated at Sat Sep 28 16:24:42 2024 by rpki-client on console-fra.rpki-client.org