$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa File: 326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa (raw, json) Hash identifier: nDiz84C0jqVZ65MNv0sNV6FKCd/YxTdQFsSrJ4dbO4g= Subject key identifier: EA:85:21:5A:A1:9F:F2:8A:53:29:23:03:FF:F4:A5:BA:F8:64:44:18 Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Certificate serial: 4056B3780D52170625836CCC8540D258482377EC Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa Signing time: Fri 15 Nov 2024 12:36:14 +0000 ROA not before: Fri 15 Nov 2024 12:31:14 +0000 ROA not after: Fri 14 Nov 2025 12:36:14 +0000 asID: 213851 IP address blocks: 2a14:7c0:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 13:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:56:b3:78:0d:52:17:06:25:83:6c:cc:85:40:d2:58:48:23:77:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088 Validity Not Before: Nov 15 12:31:14 2024 GMT Not After : Nov 14 12:36:14 2025 GMT Subject: CN=EA85215AA19FF28A53292303FFF4A5BAF8644418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:8a:68:6f:58:5a:09:59:7b:6f:97:f5:67:43: f5:ec:46:2a:e3:36:3a:fd:06:72:ec:df:46:d9:81: 6f:4a:5c:19:b6:85:87:7d:4f:d8:06:f9:3d:75:48: cd:d7:4a:99:fe:a8:ef:4a:81:e9:74:a0:1e:2c:93: 90:5f:e6:98:e8:48:f2:f0:63:4a:0d:19:80:f0:b3: a3:89:39:a3:37:69:af:a7:eb:42:8f:49:07:a4:8a: be:46:b5:f5:5a:ce:2f:47:20:42:e5:94:d2:d2:64: 82:fe:0c:0e:24:47:7b:ff:ee:a8:e8:05:ee:12:47: b4:d7:49:ca:09:58:46:78:bf:5d:e9:82:64:ad:6c: 6d:4d:c5:ba:8a:50:4b:9c:31:db:9d:15:a7:cb:23: ef:5d:e6:08:5e:75:12:62:ab:98:3d:90:af:3d:cc: e9:03:90:c9:45:ac:66:60:05:f3:b4:1b:50:fb:19: b3:4c:53:f7:10:11:5f:c3:23:2c:91:a9:16:6c:1d: d3:3f:55:0b:0f:32:0c:9a:b5:c3:ac:c8:cc:fa:60: 9e:92:e5:89:c6:6f:ec:03:d1:23:b2:c1:5d:21:dd: ac:99:37:f1:ce:75:14:7e:b7:87:a8:4c:e6:fa:ec: 18:ee:e3:64:17:85:99:85:dc:4c:57:50:cf:a7:72: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:21:5A:A1:9F:F2:8A:53:29:23:03:FF:F4:A5:BA:F8:64:44:18 X509v3 Authority Key Identifier: keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030333a3a2f34382d3438203d3e20323133383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7c0:1003::/48 Signature Algorithm: sha256WithRSAEncryption 1e:57:2d:7b:28:6e:82:ea:ce:f1:4e:c0:7d:78:72:a7:ce:01: d6:2a:2f:f6:a1:43:fe:51:12:f2:2e:d4:70:87:e1:da:f8:90: e1:22:4f:b2:a2:16:ac:2c:eb:3c:b2:ad:62:91:4e:c9:21:75: c4:dc:ae:ba:71:81:c7:99:70:26:21:46:f8:7c:6d:b9:a7:d5: 86:26:7f:63:21:00:a0:42:13:0a:31:f7:8e:4b:bb:93:bb:b3: fb:8b:69:18:bb:f2:75:93:51:b3:2b:39:0b:3e:8e:c8:14:35: cd:58:5a:d5:88:b4:af:f3:be:f6:db:7f:89:b5:20:fe:ac:fb: 3e:22:ef:4b:d4:aa:9f:42:f9:fe:51:3a:d7:e1:b7:a4:4b:8d: f0:6d:77:73:ac:97:cd:e0:af:47:f6:30:f5:d8:e9:04:34:47: 3e:27:45:0f:58:39:72:78:dc:53:e5:ae:4c:b4:f6:e0:3a:c8: 19:c3:39:10:a6:1b:86:66:64:58:86:c2:aa:d6:44:9c:e6:bd: bd:39:5a:55:06:5b:50:04:82:ce:9c:3c:88:e1:da:4f:c9:cf: e2:33:3b:3a:dd:33:68:bd:e2:32:f4:3c:1f:3e:1b:02:ff:fc: bc:aa:4c:16:a5:d8:25:96:1e:25:1a:89:15:0a:c4:8c:6f:d0: 11:17:3d:95 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUQFazeA1SFwYlg2zMhUDSWEgjd+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FCRjM3M0VBRENEOTM3NkU1MjRDRTMxM0FCODY4QzAz RUVCMTA4ODAeFw0yNDExMTUxMjMxMTRaFw0yNTExMTQxMjM2MTRaMDMxMTAvBgNV BAMTKEVBODUyMTVBQTE5RkYyOEE1MzI5MjMwM0ZGRjRBNUJBRjg2NDQ0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7imhvWFoJWXtvl/VnQ/XsRirj Njr9BnLs30bZgW9KXBm2hYd9T9gG+T11SM3XSpn+qO9Kgel0oB4sk5Bf5pjoSPLw Y0oNGYDws6OJOaM3aa+n60KPSQekir5GtfVazi9HIELllNLSZIL+DA4kR3v/7qjo Be4SR7TXScoJWEZ4v13pgmStbG1NxbqKUEucMdudFafLI+9d5ghedRJiq5g9kK89 zOkDkMlFrGZgBfO0G1D7GbNMU/cQEV/DIyyRqRZsHdM/VQsPMgyatcOsyMz6YJ6S 5YnGb+wD0SOywV0h3ayZN/HOdRR+t4eoTOb67Bju42QXhZmF3ExXUM+nct/LAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU6oUhWqGf8opTKSMD//SluvhkRBgwHwYDVR0j BBgwFoAUyr83Pq3Nk3blJM4xOrhowD7rEIgwDgYDVR0PAQH/BAQDAgeAMG0GA1Ud HwRmMGQwYqBgoF6GXHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vcGZjbG91 ZC10Z2V3aWVzZS8wL0NBQkYzNzNFQURDRDkzNzZFNTI0Q0UzMTNBQjg2OEMwM0VF QjEwODguY3JsMHMGCCsGAQUFBwEBBGcwZTBjBggrBgEFBQcwAoZXcnN5bmM6Ly9y ZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmlyb3V0ZS8xL0NBQkYzNzNFQURDRDkz NzZFNTI0Q0UzMTNBQjg2OEMwM0VFQjEwODguY2VyMIGQBggrBgEFBQcBCwSBgzCB gDB+BggrBgEFBQcwC4ZycnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9wZmNs b3VkLXRnZXdpZXNlLzAvMzI2MTMxMzQzYTM3NjMzMDNhMzEzMDMwMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMjMxMzMzODM1MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqFAfAEAMw DQYJKoZIhvcNAQELBQADggEBAB5XLXsoboLqzvFOwH14cqfOAdYqL/ahQ/5REvIu 1HCH4dr4kOEiT7KiFqws6zyyrWKRTskhdcTcrrpxgceZcCYhRvh8bbmn1YYmf2Mh AKBCEwox945Lu5O7s/uLaRi78nWTUbMrOQs+jsgUNc1YWtWItK/zvvbbf4m1IP6s +z4i70vUqp9C+f5ROtfht6RLjfBtd3Osl83gr0f2MPXY6QQ0Rz4nRQ9YOXJ43FPl rky09uA6yBnDORCmG4ZmZFiGwqrWRJzmvb05WlUGW1AEgs6cPIjh2k/Jz+IzOzrd M2i94jL0PB8+GwL//LyqTBal2CWWHiUaiRUKxIxv0BEXPZU= -----END CERTIFICATE-----Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org