$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa File: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (raw, json) Hash identifier: nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY= Subject key identifier: 85:82:09:98:E8:79:81:43:5D:2E:91:5F:66:F8:C1:0B:45:35:E9:D8 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 60597DC67B4F27391F31EC642B8682C27AB269B8 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa Signing time: Sun 07 Jul 2024 19:03:43 +0000 ROA not before: Sun 07 Jul 2024 18:58:43 +0000 ROA not after: Sun 06 Jul 2025 19:03:43 +0000 asID: 212245 IP address blocks: 2a11:f2c0:aca0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 03:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:59:7d:c6:7b:4f:27:39:1f:31:ec:64:2b:86:82:c2:7a:b2:69:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Jul 7 18:58:43 2024 GMT Not After : Jul 6 19:03:43 2025 GMT Subject: CN=85820998E87981435D2E915F66F8C10B4535E9D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:8b:5e:a2:d5:11:a0:f7:67:78:38:d8:2a: ad:7a:fa:2f:c9:a4:31:74:20:bb:31:ec:6c:50:6d: 87:5d:c4:e6:2d:73:db:f3:4b:7a:01:49:f8:7f:d6: b8:d6:fb:aa:d3:84:12:3a:6a:52:06:8a:70:56:97: 7f:42:cd:2b:f9:cb:34:42:2b:49:a8:b8:cc:02:19: 2f:b9:44:23:0d:32:44:5d:36:1d:f2:cb:0b:d9:8d: 79:38:90:ea:e9:61:65:be:b4:68:9e:e5:0e:71:be: 9c:e8:15:5e:75:f0:1d:85:cb:15:8d:c9:44:a4:53: 9d:41:63:94:6f:37:86:4b:71:b7:93:1a:e1:13:f6: 25:a2:4c:93:7d:dc:87:e1:97:4d:22:be:38:12:b4: f0:7a:f2:80:e5:04:40:ef:ab:9c:cf:bd:19:a7:bd: 6e:b1:cb:97:d8:72:15:ca:95:98:ce:ea:11:ff:8d: e7:f4:3b:39:6c:e9:94:f6:24:e7:f3:6c:ec:8c:8e: a3:b2:98:fd:94:6e:25:ac:b7:64:34:61:86:b6:c3: 07:e2:93:4e:9c:99:f7:64:b2:1d:32:65:eb:c9:a2: 8e:5a:a3:f3:dd:6d:69:9d:52:71:ae:48:90:ae:d6: 78:45:5a:de:5b:68:91:34:81:3a:3a:49:f1:e5:89: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:82:09:98:E8:79:81:43:5D:2E:91:5F:66:F8:C1:0B:45:35:E9:D8 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f2c0:aca0::/44 Signature Algorithm: sha256WithRSAEncryption 5a:ac:e2:ab:2a:c7:df:54:d2:ef:20:c6:03:39:76:a9:c5:eb: 86:ce:44:3b:3d:6b:b7:31:6a:b4:c6:58:14:1e:7c:d3:01:48: 7b:79:16:d0:cb:b3:8b:fa:f1:36:c9:95:30:4e:14:af:a4:e3: f7:64:42:68:9e:bd:66:e9:d5:20:e6:77:85:46:85:8e:ba:a8: f4:22:ad:e0:00:90:a5:d6:f2:6a:f1:bd:68:a0:48:fa:16:83: 73:b5:54:d9:5d:97:11:c4:05:9f:61:73:44:72:4a:f0:eb:5c: 68:db:bc:ab:ab:d7:7f:98:5c:cc:b8:f5:10:79:8c:7c:88:8e: 67:1a:3e:59:e6:30:e8:0f:b2:68:92:e9:e4:c6:ee:e4:b5:8c: 6d:dc:09:7e:e1:bb:75:c7:8e:87:d2:72:49:7b:75:5c:7c:e9: 46:d5:64:ab:83:66:87:dc:c4:92:33:b5:38:ac:b8:38:54:58: f1:cf:91:a6:af:e5:41:bb:e8:e7:87:6f:44:46:95:dc:bc:24: 2d:0d:3d:01:db:5c:4d:86:ca:78:0d:4a:dc:6f:5b:d4:81:35: c6:4b:d7:e8:df:dc:23:eb:06:90:2f:56:ed:d5:9f:ed:e2:a7: 74:3c:95:dd:e6:85:b8:59:60:1e:5d:50:30:c5:2c:d2:3a:2a: 8b:37:3b:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgIUYFl9xntPJzkfMexkK4aCwnqyabgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNDA3MDcxODU4NDNaFw0yNTA3MDYxOTAzNDNaMDMxMTAvBgNV BAMTKDg1ODIwOTk4RTg3OTgxNDM1RDJFOTE1RjY2RjhDMTBCNDUzNUU5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgYteotURoPdneDjYKq16+i/J pDF0ILsx7GxQbYddxOYtc9vzS3oBSfh/1rjW+6rThBI6alIGinBWl39CzSv5yzRC K0mouMwCGS+5RCMNMkRdNh3yywvZjXk4kOrpYWW+tGie5Q5xvpzoFV518B2FyxWN yUSkU51BY5RvN4ZLcbeTGuET9iWiTJN93Ifhl00ivjgStPB68oDlBEDvq5zPvRmn vW6xy5fYchXKlZjO6hH/jef0Ozls6ZT2JOfzbOyMjqOymP2UbiWst2Q0YYa2wwfi k06cmfdksh0yZevJoo5ao/PdbWmdUnGuSJCu1nhFWt5baJE0gTo6SfHlibTlAgMB AAGjggJ7MIICdzAdBgNVHQ4EFgQUhYIJmOh5gUNdLpFfZvjBC0U16dgwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV85ZDgz OWNhMGE1NWU0MmE0OWQxMGRlMDcxZjQ2NTk4Yi8wLzMyNjEzMTMxM2E2NjMyNjMz MDNhNjE2MzYxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMxMzIzMjM0MzUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwQqEfLArKAwDQYJKoZIhvcNAQELBQADggEBAFqs4qsqx99U0u8g xgM5dqnF64bORDs9a7cxarTGWBQefNMBSHt5FtDLs4v68TbJlTBOFK+k4/dkQmie vWbp1SDmd4VGhY66qPQireAAkKXW8mrxvWigSPoWg3O1VNldlxHEBZ9hc0RySvDr XGjbvKur13+YXMy49RB5jHyIjmcaPlnmMOgPsmiS6eTG7uS1jG3cCX7hu3XHjofS ckl7dVx86UbVZKuDZofcxJIztTisuDhUWPHPkaav5UG76OeHb0RGldy8JC0NPQHb XE2GyngNStxvW9SBNcZL1+jf3CPrBpAvVu3Vn+3ip3Q8ld3mhbhZYB5dUDDFLNI6 Kos3O2Y= -----END CERTIFICATE-----Generated at Thu Sep 19 18:20:17 2024 by rpki-client on console-ams.rpki-client.org