$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa File: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (raw, json) Hash identifier: g1At5H1WGB9pJd143T4S3ULq7iOWiXWKs6MoqCgmWaY= Subject key identifier: 18:BC:E6:9F:46:8C:E1:BC:17:A0:C7:2C:F1:3F:F0:6A:4F:A7:FE:19 Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Certificate serial: 287108896EE6F599209907C5F89CC9E21BBCF6D5 Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa Signing time: Mon 11 Mar 2024 07:12:22 +0000 ROA not before: Mon 11 Mar 2024 07:07:22 +0000 ROA not after: Mon 10 Mar 2025 07:12:22 +0000 asID: 50555 IP address blocks: 2a12:dd47:860e::/48 maxlen: 48 Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Apr 2024 05:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:71:08:89:6e:e6:f5:99:20:99:07:c5:f8:9c:c9:e2:1b:bc:f6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Validity Not Before: Mar 11 07:07:22 2024 GMT Not After : Mar 10 07:12:22 2025 GMT Subject: CN=18BCE69F468CE1BC17A0C72CF13FF06A4FA7FE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:f1:68:1f:9b:ca:73:14:0a:51:2f:9d:4e: 85:2b:6d:e9:8a:22:39:5d:19:fd:89:bb:07:fc:ec: 94:59:18:0e:47:e7:fc:ef:b0:63:c7:bd:2c:45:96: 02:86:9e:8e:01:74:d4:b5:b9:6d:0c:bb:e8:29:ba: d6:3e:4b:4a:fe:41:e8:20:59:fb:bf:2f:d0:8b:72: b1:5d:60:c2:1c:55:2f:93:66:1a:e2:d1:a1:36:ce: b1:98:6a:99:ac:c7:3f:93:85:1a:3b:6d:96:34:f8: bd:02:a9:fb:72:d7:fb:17:eb:21:4e:7d:dd:a1:fd: 8a:86:03:db:b9:e3:c7:8d:a5:b9:e0:56:9d:08:6a: 45:6a:a1:9b:7b:1b:f2:aa:fb:20:85:19:c8:6f:24: e6:dc:96:59:58:3a:44:5e:62:31:b4:cd:4c:de:2b: 9a:f4:d3:33:69:ff:83:07:63:77:5b:bc:9a:14:f9: 11:99:c9:8c:57:d2:65:aa:7f:73:30:2d:8f:55:a1: b9:29:cd:74:c5:32:06:70:26:4d:35:04:a8:ce:7c: 18:3a:fa:11:88:52:23:a0:1d:fa:30:61:26:56:60: cc:f1:9f:7b:13:f7:d6:33:01:07:79:c3:cb:2a:ec: 79:bc:dc:8f:96:4c:f7:c5:90:2a:88:af:07:7f:18: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BC:E6:9F:46:8C:E1:BC:17:A0:C7:2C:F1:3F:F0:6A:4F:A7:FE:19 X509v3 Authority Key Identifier: keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:860e::/48 Signature Algorithm: sha256WithRSAEncryption 1c:59:19:a2:67:ee:0d:ff:6c:6d:91:bd:ae:b1:e4:71:ab:60: 22:d8:aa:33:b2:7c:47:41:57:ef:9d:d7:b7:64:a5:c6:c8:9a: 72:2d:74:12:6a:da:e5:5e:f8:bb:8e:93:94:57:1b:08:10:a9: 83:b5:dd:4c:de:f4:df:93:e5:cd:7b:97:2f:66:76:b0:09:ea: 12:df:b9:4b:bf:c1:9d:2a:83:5c:01:f9:3a:fa:25:f9:b7:69: 4f:67:65:32:fb:35:7a:b7:47:49:61:ea:08:51:d3:98:04:6f: 1e:1a:f1:a9:36:46:6c:e5:55:fb:4d:85:70:24:47:68:26:2d: a4:a2:70:0e:0f:b1:66:9b:ad:1e:cd:d6:40:f0:52:09:9b:ae: 8c:ce:9f:28:2a:0d:70:ca:75:95:f5:77:c2:09:36:b4:84:c8: fe:77:bf:40:b4:8d:6f:af:7a:6d:47:a9:e4:d8:a7:6b:41:78: 3c:c6:b9:99:3e:9d:25:51:ee:f6:58:31:a4:04:7e:48:15:de: 05:4d:57:d2:b8:32:1c:91:20:12:52:81:d1:8c:64:22:24:7a: 87:9e:42:99:63:78:58:4e:55:60:6f:21:17:63:ee:ef:bb:f4: a3:08:86:c1:93:1b:e1:77:4a:87:43:d4:74:60:3d:e5:cf:2d: d1:4f:ea:e4 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUKHEIiW7m9ZkgmQfF+JzJ4hu89tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFD RENDNThBMzAeFw0yNDAzMTEwNzA3MjJaFw0yNTAzMTAwNzEyMjJaMDMxMTAvBgNV BAMTKDE4QkNFNjlGNDY4Q0UxQkMxN0EwQzcyQ0YxM0ZGMDZBNEZBN0ZFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11PFoH5vKcxQKUS+dToUrbemK IjldGf2Juwf87JRZGA5H5/zvsGPHvSxFlgKGno4BdNS1uW0Mu+gputY+S0r+Qegg Wfu/L9CLcrFdYMIcVS+TZhri0aE2zrGYapmsxz+ThRo7bZY0+L0Cqfty1/sX6yFO fd2h/YqGA9u548eNpbngVp0IakVqoZt7G/Kq+yCFGchvJObclllYOkReYjG0zUze K5r00zNp/4MHY3dbvJoU+RGZyYxX0mWqf3MwLY9VobkpzXTFMgZwJk01BKjOfBg6 +hGIUiOgHfowYSZWYMzxn3sT99YzAQd5w8sq7Hm83I+WTPfFkCqIrwd/GBihAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUGLzmn0aM4bwXoMcs8T/wak+n/hkwHwYDVR0j BBgwFoAUAodsEZJMvaAb4a05oyBs+s3MWKMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM YWlyLVRFU1QvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1 OEEzLmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBr aS5jby9yZXBvL0FTOTQ1LzEvMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZD RkFDRENDNThBMy5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJz eW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdMYWlyLVRFU1QvMS8zMjYx MzEzMjNhNjQ2NDM0MzczYTM4MzYzMDY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw MzUzMDM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeGDjANBgkqhkiG9w0BAQsFAAOCAQEA HFkZomfuDf9sbZG9rrHkcatgItiqM7J8R0FX753Xt2Slxsiaci10Emra5V74u46T lFcbCBCpg7XdTN7035PlzXuXL2Z2sAnqEt+5S7/BnSqDXAH5Ovol+bdpT2dlMvs1 erdHSWHqCFHTmARvHhrxqTZGbOVV+02FcCRHaCYtpKJwDg+xZputHs3WQPBSCZuu jM6fKCoNcMp1lfV3wgk2tITI/ne/QLSNb696bUep5Nina0F4PMa5mT6dJVHu9lgx pAR+SBXeBU1X0rgyHJEgElKB0YxkIiR6h55CmWN4WE5VYG8hF2Pu77v0owiGwZMb 4XdKh0PUdGA95c8t0U/q5A== -----END CERTIFICATE-----Generated at Thu Apr 18 12:01:12 2024 by rpki-client on console-fra.rpki-client.org