$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa File: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json) Hash identifier: D0ROwoTKCiO0SHKC02McjK2f9xdxhPqW80gKE+eCaEY= Subject key identifier: 33:A8:35:CC:47:E7:9E:B6:6A:26:4C:07:04:DF:E5:32:57:4F:F6:0D Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 2248B602381546563A16AC8A52D2C374063E1660 Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa Signing time: Mon 08 Jul 2024 09:30:24 +0000 ROA not before: Mon 08 Jul 2024 09:25:24 +0000 ROA not after: Mon 07 Jul 2025 09:30:24 +0000 asID: 204017 IP address blocks: 2a11:f2c0:fffa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 27 Nov 2024 17:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:48:b6:02:38:15:46:56:3a:16:ac:8a:52:d2:c3:74:06:3e:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Jul 8 09:25:24 2024 GMT Not After : Jul 7 09:30:24 2025 GMT Subject: CN=33A835CC47E79EB66A264C0704DFE532574FF60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:a6:6a:5b:22:f4:b0:9c:75:3a:22:41:6f: 82:75:f9:d9:fd:e6:27:a0:d6:a5:2d:ed:b3:12:dd: 83:e9:de:df:30:f4:ed:85:a8:f4:90:ff:43:8a:cf: 29:f1:0b:1a:24:db:34:b3:86:e2:ea:51:fb:4f:9d: 80:e5:a6:14:2c:cd:4a:d6:0e:15:78:c2:d4:70:41: d8:6b:77:74:ea:8d:ed:a8:4c:f4:39:e9:99:f6:df: 59:32:2e:b7:1e:ba:63:94:54:a0:2a:0e:7b:7d:bf: 77:d8:df:db:a8:5c:2e:f5:99:a8:b5:45:a1:73:14: a9:e1:fd:a0:18:5b:14:81:10:25:36:2c:b7:15:cb: de:6a:26:48:dd:b0:f4:3f:a4:34:40:e3:2d:9a:8a: 79:ba:72:39:e1:12:87:83:b5:29:a9:66:81:7a:0a: 3f:bb:a3:0a:35:70:09:90:77:ed:9c:7b:ad:4a:63: 3c:c6:1c:a2:26:bb:cd:18:25:ff:49:10:b3:1b:ed: 33:0c:c8:cf:ed:23:f7:4c:4a:9c:10:9c:1e:99:0e: b9:8a:22:28:c7:b0:8e:f4:2f:a7:b4:54:b2:b5:e6: 8d:ea:7e:15:2c:eb:16:eb:81:bf:66:7b:00:88:cf: 83:3b:07:42:3d:e0:9c:32:e2:10:5a:75:9d:4f:35: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A8:35:CC:47:E7:9E:B6:6A:26:4C:07:04:DF:E5:32:57:4F:F6:0D X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:fffa::/48 Signature Algorithm: sha256WithRSAEncryption 90:78:f3:43:85:03:29:3a:fd:29:f1:61:a5:68:dc:aa:96:33: 96:9b:a3:84:29:de:c2:9b:7e:0c:67:9c:33:74:fa:f6:50:a0: e4:66:90:0b:69:a0:45:3d:9c:ca:07:ee:a7:9b:0a:1e:25:d4: 7a:13:a3:9d:6d:96:73:44:ac:1a:e6:dc:44:9c:a7:fe:fe:0c: 06:0d:88:89:25:3d:d0:05:dd:f4:b5:2f:b4:35:b5:a0:52:91: d9:1f:f3:b4:70:3b:99:d2:7b:87:34:b4:a4:51:f4:9f:fa:82: 00:e7:fe:18:16:14:bd:71:78:d2:34:e3:60:3f:23:55:f5:df: fe:35:09:48:27:4c:61:d3:a4:15:34:02:5e:cc:f9:3e:8d:7c: 00:74:de:18:e6:a7:68:f3:06:a2:32:53:fc:bc:a9:bd:10:d8: b5:d8:20:3d:25:cb:b5:ef:31:99:f0:04:06:8d:e0:ed:38:a6: 60:5f:4d:14:dd:e0:29:b0:c4:05:b9:47:b1:ca:79:06:55:64: c6:b0:b2:cd:72:5f:af:ed:ba:e6:db:00:56:3f:21:59:35:29: c1:63:4e:44:15:d5:73:06:26:6f:c6:44:c3:d2:23:1e:46:3e: a0:5b:21:7a:cd:02:0b:e4:40:8b:06:27:1d:1c:9f:55:21:9b: b7:81:60:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUIki2AjgVRlY6FqyKUtLDdAY+FmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNDA3MDgwOTI1MjRaFw0yNTA3MDcwOTMwMjRaMDMxMTAvBgNV BAMTKDMzQTgzNUNDNDdFNzlFQjY2QTI2NEMwNzA0REZFNTMyNTc0RkY2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPt6ZqWyL0sJx1OiJBb4J1+dn9 5ieg1qUt7bMS3YPp3t8w9O2FqPSQ/0OKzynxCxok2zSzhuLqUftPnYDlphQszUrW DhV4wtRwQdhrd3Tqje2oTPQ56Zn231kyLrceumOUVKAqDnt9v3fY39uoXC71mai1 RaFzFKnh/aAYWxSBECU2LLcVy95qJkjdsPQ/pDRA4y2ainm6cjnhEoeDtSmpZoF6 Cj+7owo1cAmQd+2ce61KYzzGHKImu80YJf9JELMb7TMMyM/tI/dMSpwQnB6ZDrmK IijHsI70L6e0VLK15o3qfhUs6xbrgb9mewCIz4M7B0I94Jwy4hBadZ1PNTntAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUM6g1zEfnnrZqJkwHBN/lMldP9g0wHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV82MGEw OTBjMjdjMDY0ZTA3OGE3ZjZlNDQ2YTRmYmY3MC8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjY2NjY2NjEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQzMDMxMzcu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAqEfLA//owDQYJKoZIhvcNAQELBQADggEBAJB480OFAyk6/Snx YaVo3KqWM5abo4Qp3sKbfgxnnDN0+vZQoORmkAtpoEU9nMoH7qebCh4l1HoTo51t lnNErBrm3EScp/7+DAYNiIklPdAF3fS1L7Q1taBSkdkf87RwO5nSe4c0tKRR9J/6 ggDn/hgWFL1xeNI042A/I1X13/41CUgnTGHTpBU0Al7M+T6NfAB03hjmp2jzBqIy U/y8qb0Q2LXYID0ly7XvMZnwBAaN4O04pmBfTRTd4CmwxAW5R7HKeQZVZMawss1y X6/tuubbAFY/IVk1KcFjTkQV1XMGJm/GRMPSIx5GPqBbIXrNAgvkQIsGJx0cn1Uh m7eBYOY= -----END CERTIFICATE-----Generated at Wed Nov 27 07:11:09 2024 by rpki-client on console-fra.rpki-client.org