$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50391.roa File: AS50391.roa (raw, json) Hash identifier: SYQBkvNK4gO8NpnlIS9dknFqGJhDElfAjLmDNlBk6Ac= Subject key identifier: 62:98:AB:1C:2C:3D:CC:67:21:2D:60:DA:72:1F:CA:BE:EF:BD:D5:4C Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 38E5DAAA2F9593595D6BE94AC81246595F6FA7C8 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50391.roa Signing time: Tue 20 Aug 2024 02:31:52 +0000 ROA not before: Tue 20 Aug 2024 02:26:52 +0000 ROA not after: Tue 19 Aug 2025 02:31:52 +0000 asID: 50391 IP address blocks: 2a07:54c4:1760::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 06:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e5:da:aa:2f:95:93:59:5d:6b:e9:4a:c8:12:46:59:5f:6f:a7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:52 2024 GMT Not After : Aug 19 02:31:52 2025 GMT Subject: CN=6298AB1C2C3DCC67212D60DA721FCABEEFBDD54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:56:09:53:59:d9:ea:a4:6a:4f:15:c1:2d: 2a:64:56:ee:fd:63:2b:55:39:9a:4a:39:8c:d0:e5: aa:20:0d:ee:db:2d:4e:36:40:55:c8:29:ea:31:77: 55:bf:a4:82:1a:2f:28:dc:29:d9:19:0f:f0:66:89: c3:f3:d0:45:1d:dd:7a:79:e9:18:58:6b:05:c7:07: 95:81:e6:2b:06:75:d0:3f:6a:6e:85:67:5c:4b:b6: 10:04:98:73:8d:4d:df:c4:39:d9:99:d0:03:a4:51: 2d:32:a2:0b:95:d3:b0:ac:f1:d7:84:6a:19:8c:3f: e0:c9:bc:da:7c:4c:b2:0a:d1:bc:1c:8d:a2:81:92: 05:43:6c:1e:8d:4f:da:71:c1:83:0c:e0:60:e2:3a: 0c:cb:77:a9:a1:22:43:c9:38:78:51:e2:6a:f6:90: 16:33:a2:6d:63:2f:ed:c7:9d:e5:fa:b5:66:e4:79: d8:b1:97:99:d8:59:21:f3:d3:dc:7a:43:c9:58:32: 6f:a5:9d:ba:d5:87:6b:99:40:31:ab:ca:36:b9:d9: a2:eb:65:de:f1:f6:ff:b8:f5:ae:4a:85:c9:2e:bf: ae:8c:d6:38:bb:33:14:0f:4b:2e:e0:44:ce:9d:e2: e8:96:d4:f5:7d:3f:c0:c4:3f:37:7f:7a:2d:dd:2c: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:98:AB:1C:2C:3D:CC:67:21:2D:60:DA:72:1F:CA:BE:EF:BD:D5:4C X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1760::/48 Signature Algorithm: sha256WithRSAEncryption 79:c8:dd:71:e8:55:ee:6a:ed:e0:63:18:3e:16:67:7e:b4:5a: 66:44:21:c9:d2:9f:b1:05:7f:88:03:66:83:96:1d:67:44:28: c1:3f:f0:47:0e:dc:44:04:67:46:21:ac:2f:42:01:41:13:a6: 81:6f:34:1b:6d:17:d8:e8:85:2b:58:a7:d3:6c:d2:39:80:79: 88:4c:2d:28:fb:9a:90:cf:01:3a:66:8b:e9:40:ab:d7:87:d8: 08:6a:29:02:20:24:a5:ca:c1:57:9e:3a:2f:c0:c9:89:d4:1b: 57:11:97:05:22:39:be:0b:24:b0:bc:bf:30:56:04:c3:ed:48: 2a:47:e3:ce:b6:b7:ff:a2:92:52:05:1b:00:49:55:43:64:1a: 57:9a:77:b2:d1:c7:45:d2:8e:a6:eb:48:9d:ba:10:7a:f1:90: 0a:b6:c3:fd:ed:38:e9:70:50:d2:19:86:9d:a3:9d:70:b8:57: 72:d5:79:73:8c:c9:cc:0a:70:63:ee:62:35:6e:d0:1c:5d:5e: c9:b3:42:3d:ae:fb:a1:16:01:92:e8:4b:68:36:eb:66:7f:f8: 5c:96:8f:19:34:c1:ba:b4:c0:d8:73:09:4a:ed:0c:f9:43:ef: 63:43:c8:47:13:dd:11:3b:29:7b:77:69:65:24:e7:20:ba:9f: 32:5a:5b:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOXaqi+Vk1lda+lKyBJGWV9vp8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTJaFw0yNTA4MTkwMjMxNTJaMDMxMTAvBgNV BAMTKDYyOThBQjFDMkMzRENDNjcyMTJENjBEQTcyMUZDQUJFRUZCREQ1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwVYJU1nZ6qRqTxXBLSpkVu79 YytVOZpKOYzQ5aogDe7bLU42QFXIKeoxd1W/pIIaLyjcKdkZD/BmicPz0EUd3Xp5 6RhYawXHB5WB5isGddA/am6FZ1xLthAEmHONTd/EOdmZ0AOkUS0yoguV07Cs8deE ahmMP+DJvNp8TLIK0bwcjaKBkgVDbB6NT9pxwYMM4GDiOgzLd6mhIkPJOHhR4mr2 kBYzom1jL+3HneX6tWbkedixl5nYWSHz09x6Q8lYMm+lnbrVh2uZQDGryja52aLr Zd7x9v+49a5Khckuv66M1ji7MxQPSy7gRM6d4uiW1PV9P8DEPzd/ei3dLMabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpirHCw9zGchLWDach/Kvu+91UwwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTAzOTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TE F2AwDQYJKoZIhvcNAQELBQADggEBAHnI3XHoVe5q7eBjGD4WZ360WmZEIcnSn7EF f4gDZoOWHWdEKME/8EcO3EQEZ0YhrC9CAUETpoFvNBttF9johStYp9Ns0jmAeYhM LSj7mpDPATpmi+lAq9eH2AhqKQIgJKXKwVeeOi/AyYnUG1cRlwUiOb4LJLC8vzBW BMPtSCpH4862t/+iklIFGwBJVUNkGlead7LRx0XSjqbrSJ26EHrxkAq2w/3tOOlw UNIZhp2jnXC4V3LVeXOMycwKcGPuYjVu0BxdXsmzQj2u+6EWAZLoS2g262Z/+FyW jxk0wbq0wNhzCUrtDPlD72NDyEcT3RE7KXt3aWUk5yC6nzJaWyQ= -----END CERTIFICATE-----Generated at Sat Sep 28 08:59:06 2024 by rpki-client on console-ams.rpki-client.org