$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa File: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (raw, json) Hash identifier: MohLLX8Sy/zW2nWkcZiofRJsITCqYsBthAW1Nb7L2Hw= Subject key identifier: 33:6D:6C:9C:54:7E:E0:23:74:F3:2B:4C:66:0A:7C:7D:2B:C8:46:9E Certificate issuer: /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Certificate serial: 48D06D71F75B9F7E2A19316500F1843EF743FF95 Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa Signing time: Sun 07 Jul 2024 19:08:46 +0000 ROA not before: Sun 07 Jul 2024 19:03:46 +0000 ROA not after: Sun 06 Jul 2025 19:08:46 +0000 asID: 205589 IP address blocks: 2a11:f2c0:ffc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 03:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d0:6d:71:f7:5b:9f:7e:2a:19:31:65:00:f1:84:3e:f7:43:ff:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115 Validity Not Before: Jul 7 19:03:46 2024 GMT Not After : Jul 6 19:08:46 2025 GMT Subject: CN=336D6C9C547EE02374F32B4C660A7C7D2BC8469E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:4d:a5:2c:bb:df:65:5d:06:5b:e3:a2:ad: 23:83:41:c9:b4:d3:b9:37:45:fe:8f:ec:06:a7:2a: 54:3f:ff:1f:a8:de:9d:e2:62:bf:02:39:c9:06:fe: 31:3f:a4:48:2c:82:ab:53:99:98:3d:c8:03:c8:1f: 04:6b:05:76:f5:91:2f:40:a3:f5:5a:24:80:9f:4b: 08:b9:07:34:cb:91:4e:97:fa:7a:41:90:2d:fc:de: e0:e4:aa:ef:b8:d3:54:36:07:04:ec:80:af:be:9e: 81:ac:88:d1:43:50:24:78:af:36:b0:8a:04:04:39: 86:46:45:8e:b2:6a:46:bb:1b:72:8d:bd:8b:9e:d6: e9:fd:ba:e2:a0:db:bf:6a:f7:ba:ce:cb:52:24:69: 42:62:04:14:71:db:ac:d1:05:4a:73:7b:d3:e6:36: 9c:92:e9:01:a3:e1:7d:33:33:13:dd:65:01:73:42: d0:40:9b:51:39:37:6c:95:6f:a8:29:6e:ed:32:8e: 75:b5:0b:3e:0c:09:c4:23:11:03:42:41:66:dd:ec: c8:b3:81:7c:39:68:fa:09:9e:e4:71:6a:ec:52:35: 06:96:c2:90:e7:2e:c1:12:14:e9:23:bd:8e:ed:ea: 2a:87:55:f5:10:b8:8a:11:9e:44:3b:62:8c:ca:35: 3e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:6C:9C:54:7E:E0:23:74:F3:2B:4C:66:0A:7C:7D:2B:C8:46:9E X509v3 Authority Key Identifier: keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:ffc0::/48 Signature Algorithm: sha256WithRSAEncryption c2:ee:f7:16:e0:78:f6:98:9b:1b:66:88:7b:2a:9f:09:87:ee: a3:70:06:e2:85:33:85:ae:98:c9:6a:53:09:93:4c:e6:a0:6c: e3:fe:6f:7f:4d:69:a6:7d:bd:63:c3:19:fa:57:b1:40:7c:c3: 08:2b:85:6e:eb:4d:3f:c1:58:45:31:6a:cf:fe:7b:01:04:c6: da:c2:72:06:ca:04:ce:df:e3:2b:d8:86:e9:71:ad:16:56:01: 8c:10:1c:b7:86:50:b9:05:20:99:79:81:e6:2b:40:2d:d0:8e: 4b:13:e9:ed:ba:71:c6:b5:c6:9c:0d:68:de:2f:cc:9b:ba:d5: ee:35:44:37:89:f7:e1:81:97:26:d3:7c:d9:fd:01:9e:0b:9e: b5:20:a7:1c:c7:5d:84:55:17:73:ad:70:6e:cf:2d:18:79:a4: f9:65:fa:96:75:85:ef:4d:00:a7:11:91:5a:44:ab:f7:55:61: 58:a7:04:7c:e0:bb:a0:55:6c:41:b3:6e:ad:fb:c1:47:9e:cf: 9b:9b:66:72:3f:73:e7:be:bf:f5:ed:b6:7b:4c:7f:e2:b5:32: 61:71:6f:70:5e:db:12:15:60:99:9c:4d:ca:ad:e0:37:02:13: 85:90:4e:ad:a5:38:72:61:25:e6:1c:1e:a1:cc:f5:e9:af:a1: fc:b1:1f:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUSNBtcfdbn34qGTFlAPGEPvdD/5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdE NzM3QjExNTAeFw0yNDA3MDcxOTAzNDZaFw0yNTA3MDYxOTA4NDZaMDMxMTAvBgNV BAMTKDMzNkQ2QzlDNTQ3RUUwMjM3NEYzMkI0QzY2MEE3QzdEMkJDODQ2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Pk2lLLvfZV0GW+OirSODQcm0 07k3Rf6P7AanKlQ//x+o3p3iYr8COckG/jE/pEgsgqtTmZg9yAPIHwRrBXb1kS9A o/VaJICfSwi5BzTLkU6X+npBkC383uDkqu+401Q2BwTsgK++noGsiNFDUCR4rzaw igQEOYZGRY6yaka7G3KNvYue1un9uuKg279q97rOy1IkaUJiBBRx26zRBUpze9Pm NpyS6QGj4X0zMxPdZQFzQtBAm1E5N2yVb6gpbu0yjnW1Cz4MCcQjEQNCQWbd7Miz gXw5aPoJnuRxauxSNQaWwpDnLsESFOkjvY7t6iqHVfUQuIoRnkQ7YozKNT4hAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUM21snFR+4CN08ytMZgp8fSvIRp4wHwYDVR0j BBgwFoAUu+0U6Xk5Bewepc4QqgPEl9c3sRUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzNhOTdmNzYxODAzODRkMjNhNzIxZDQ2YWUwZTUwNjhmLzAv QkJFRDE0RTk3OTM5MDVFQzFFQTVDRTEwQUEwM0M0OTdENzM3QjExNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CQkVEMTRFOTc5MzkwNUVDMUVBNUNFMTBBQTAzQzQ5 N0Q3MzdCMTE1LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8zYTk3 Zjc2MTgwMzg0ZDIzYTcyMWQ0NmFlMGU1MDY4Zi8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjYzMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzNTM4Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA/8AwDQYJKoZIhvcNAQELBQADggEBAMLu9xbgePaYmxtm iHsqnwmH7qNwBuKFM4WumMlqUwmTTOagbOP+b39NaaZ9vWPDGfpXsUB8wwgrhW7r TT/BWEUxas/+ewEExtrCcgbKBM7f4yvYhulxrRZWAYwQHLeGULkFIJl5geYrQC3Q jksT6e26cca1xpwNaN4vzJu61e41RDeJ9+GBlybTfNn9AZ4LnrUgpxzHXYRVF3Ot cG7PLRh5pPll+pZ1he9NAKcRkVpEq/dVYVinBHzgu6BVbEGzbq37wUeez5ubZnI/ c+e+v/XttntMf+K1MmFxb3Be2xIVYJmcTcqt4DcCE4WQTq2lOHJhJeYcHqHM9emv ofyxHzU= -----END CERTIFICATE-----Generated at Thu Sep 19 08:55:08 2024 by rpki-client on console-ams.rpki-client.org