$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa File: 326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa (raw, json) Hash identifier: OiIXAtns3uXFvVWOl31TEqksY0fuCEYEgxh1kGMMPqM= Subject key identifier: EC:E3:D6:2E:1B:01:BF:53:C7:7D:A6:D6:78:35:30:39:78:05:26:7F Certificate issuer: /CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Certificate serial: 3CBD2332BE3864142BCB7CCD1F1111552E91F558 Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/2/326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa Signing time: Wed 29 May 2024 14:15:43 +0000 ROA not before: Wed 29 May 2024 14:10:43 +0000 ROA not after: Wed 28 May 2025 14:15:43 +0000 asID: 215580 IP address blocks: 2a14:7c0:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 18:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bd:23:32:be:38:64:14:2b:cb:7c:cd:1f:11:11:55:2e:91:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Validity Not Before: May 29 14:10:43 2024 GMT Not After : May 28 14:15:43 2025 GMT Subject: CN=ECE3D62E1B01BF53C77DA6D6783530397805267F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:ec:1d:73:05:35:34:9c:6f:f2:ab:0f:8b: 41:8b:89:ca:b0:5a:bd:61:14:e0:b1:d4:4b:29:06: dd:8d:0d:fb:7d:72:d3:77:ec:c4:d8:e2:e8:12:26: cb:ba:88:26:91:ca:e9:a5:7a:b5:a4:b8:34:c2:8d: 51:6c:1b:35:ba:f0:cd:99:f2:8f:1c:fe:ef:94:ba: 67:96:eb:30:87:ee:a0:d7:39:12:64:6b:75:eb:ac: 52:72:c3:8f:e1:b3:c4:c3:41:98:c4:db:e1:bf:a1: 81:12:ef:88:51:e8:29:a6:1f:ef:b1:b0:69:73:a6: cc:6b:70:8c:6b:4b:69:8e:8e:5f:c6:2e:fc:d5:d3: 45:7a:12:43:5f:d1:cc:e1:c6:66:10:24:61:d3:37: 7f:35:7f:5d:04:aa:c0:99:09:3d:6c:8c:f1:69:ef: 70:a8:e4:5e:eb:f9:f8:fc:c5:94:76:1c:86:1e:44: 45:74:4c:0c:bd:f7:83:12:48:71:2e:37:d5:ec:3d: 43:38:5d:74:61:68:14:76:e1:a8:15:e3:9b:fb:ab: 0b:e0:bf:3e:3d:a4:7f:22:e2:e3:a9:cc:2c:c4:31: cf:ec:66:a3:19:fa:fb:7e:32:7e:24:33:fe:ef:95: 7e:8f:8d:4b:3f:b4:95:26:01:af:24:68:82:d0:41: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E3:D6:2E:1B:01:BF:53:C7:7D:A6:D6:78:35:30:39:78:05:26:7F X509v3 Authority Key Identifier: keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:3800::/40 Signature Algorithm: sha256WithRSAEncryption a9:2d:ce:13:9d:50:e6:26:86:4b:66:1f:ce:45:fa:b7:5f:23: 65:aa:82:83:2d:87:1a:e8:85:f1:c7:aa:1c:5d:de:4a:0c:4a: 64:19:49:93:b7:bb:a6:0b:cf:50:6f:28:73:77:cd:42:8f:f8: 87:2c:10:22:16:3b:36:64:1e:7e:06:ea:bf:d3:ba:17:b4:2d: 8f:bc:fe:fa:e6:d9:b9:b1:e2:e4:a5:89:a4:7c:22:bd:c2:61: d5:b2:e2:b7:c3:77:40:5e:4f:dd:32:be:25:71:af:c4:94:27: 4c:87:f4:0d:b3:a2:a1:b7:84:e5:59:a7:6c:0c:89:f6:44:30: 2c:a6:7c:e8:1c:56:77:fb:b8:24:d2:70:56:60:42:57:04:e9: 33:1e:0d:11:61:60:e5:c8:f7:6d:20:ac:51:6d:8f:11:66:28: 91:9c:9a:a3:6e:80:e7:83:b3:2a:bc:47:32:fd:56:88:9e:ba: e1:93:a7:68:9a:bc:c7:d6:50:fd:06:8c:12:ce:a4:c2:c3:52: 66:df:73:17:de:62:c7:a0:53:88:70:31:6c:cf:cd:3c:73:e1: 4f:dc:2f:fc:6c:cc:9f:33:22:85:99:ff:d1:d1:6a:d0:71:75: 14:18:a8:92:b8:c1:51:df:50:42:34:2a:62:40:9b:12:0a:7f: 51:5f:61:1b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUPL0jMr44ZBQry3zNHxERVS6R9VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdENjJBNTVEMDlBMEU1NDc5N0E3QkFENUM0MDA0NTRE NTUyOTU0NjAeFw0yNDA1MjkxNDEwNDNaFw0yNTA1MjgxNDE1NDNaMDMxMTAvBgNV BAMTKEVDRTNENjJFMUIwMUJGNTNDNzdEQTZENjc4MzUzMDM5NzgwNTI2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxB+wdcwU1NJxv8qsPi0GLicqw Wr1hFOCx1EspBt2NDft9ctN37MTY4ugSJsu6iCaRyumlerWkuDTCjVFsGzW68M2Z 8o8c/u+UumeW6zCH7qDXORJka3XrrFJyw4/hs8TDQZjE2+G/oYES74hR6CmmH++x sGlzpsxrcIxrS2mOjl/GLvzV00V6EkNf0czhxmYQJGHTN381f10EqsCZCT1sjPFp 73Co5F7r+fj8xZR2HIYeREV0TAy994MSSHEuN9XsPUM4XXRhaBR24agV45v7qwvg vz49pH8i4uOpzCzEMc/sZqMZ+vt+Mn4kM/7vlX6PjUs/tJUmAa8kaILQQbp7AgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU7OPWLhsBv1PHfabWeDUwOXgFJn8wHwYDVR0j BBgwFoAUZ9YqVdCaDlR5enutXEAEVNVSlUYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMi82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNy bDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8vcmVwby5ycGtp LnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdC QUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNlcjCBhgYIKwYBBQUHAQsEejB4MHYGCCsGAQUF BzALhmpyc3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzIvMzI2 MTMxMzQzYTM3NjMzMDNhMzMzODMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAz MjMxMzUzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFAfAODANBgkqhkiG9w0BAQsFAAOCAQEA qS3OE51Q5iaGS2YfzkX6t18jZaqCgy2HGuiF8ceqHF3eSgxKZBlJk7e7pgvPUG8o c3fNQo/4hywQIhY7NmQefgbqv9O6F7Qtj7z++ubZubHi5KWJpHwivcJh1bLit8N3 QF5P3TK+JXGvxJQnTIf0DbOiobeE5VmnbAyJ9kQwLKZ86BxWd/u4JNJwVmBCVwTp Mx4NEWFg5cj3bSCsUW2PEWYokZyao26A54OzKrxHMv1WiJ664ZOnaJq8x9ZQ/QaM Es6kwsNSZt9zF95ix6BTiHAxbM/NPHPhT9wv/GzMnzMihZn/0dFq0HF1FBiokrjB Ud9QQjQqYkCbEgp/UV9hGw== -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org