$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323030303a3a2f33362d3430203d3e20343031333836.roa File: 326131343a373538313a323030303a3a2f33362d3430203d3e20343031333836.roa (raw, json) Hash identifier: 8IFGRtk5v0qcYwFFJo4MFsTNImvT7YJWplXVNkvagAI= Subject key identifier: 12:DC:F2:C7:1F:F5:93:F3:28:64:2C:2A:E9:73:25:6F:EE:DA:47:F4 Certificate issuer: /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD Certificate serial: 61C4E0992C452FEF323FB759262E4657228F98FD Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323030303a3a2f33362d3430203d3e20343031333836.roa Signing time: Sat 12 Oct 2024 17:22:50 +0000 ROA not before: Sat 12 Oct 2024 17:17:50 +0000 ROA not after: Sat 11 Oct 2025 17:22:50 +0000 asID: 401386 IP address blocks: 2a14:7581:2000::/36 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c4:e0:99:2c:45:2f:ef:32:3f:b7:59:26:2e:46:57:22:8f:98:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD Validity Not Before: Oct 12 17:17:50 2024 GMT Not After : Oct 11 17:22:50 2025 GMT Subject: CN=12DCF2C71FF593F328642C2AE973256FEEDA47F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:93:98:6f:ff:35:76:08:22:e1:83:f4:13: 2c:09:01:7f:11:ce:f0:1e:df:f7:ef:b6:71:be:d2: 95:d3:01:60:3a:29:be:e5:44:c0:36:f8:c1:06:67: ed:ee:01:d6:a9:3d:0a:96:99:2f:c2:9e:d9:6a:7c: 2c:c0:ab:27:c6:fc:36:57:2a:67:27:08:49:3a:cb: 47:22:53:ae:c5:69:3b:df:fa:b3:50:0b:c9:32:dd: 3f:08:50:29:02:38:a4:19:27:20:b9:46:bd:4a:d2: 67:56:44:ba:0c:9f:de:95:02:dc:1b:a1:4e:22:b0: 96:5f:bc:f1:e3:95:86:55:04:c7:60:98:0f:80:3a: b7:e3:4f:32:0b:c2:b1:0c:46:f5:6d:1f:35:35:97: f5:9a:3e:f2:51:1e:46:f7:93:75:e1:f6:d9:20:5e: 2a:b8:e0:af:06:e3:e5:ff:eb:cd:02:80:cf:ac:cd: e2:46:d7:e7:00:47:69:f5:15:6b:2c:b1:c2:7b:8f: f6:1f:71:32:17:1f:85:79:da:02:0b:ff:3d:e8:8e: 0d:87:9b:4e:be:6d:5c:5d:67:9f:35:c5:d4:a5:f4: b0:1d:15:f3:8c:1e:fb:7f:59:5c:0d:fd:4e:60:bc: 3c:4c:17:c2:72:39:81:bb:e4:ae:a8:ce:05:46:22: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DC:F2:C7:1F:F5:93:F3:28:64:2C:2A:E9:73:25:6F:EE:DA:47:F4 X509v3 Authority Key Identifier: keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a323030303a3a2f33362d3430203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2000::/36 Signature Algorithm: sha256WithRSAEncryption 58:68:ec:a1:83:5c:35:01:00:72:fa:3c:bd:22:8a:06:b5:de: ee:0d:c4:76:e1:32:60:19:c5:39:46:6d:7a:bb:a3:e4:c3:e1: 3f:32:9a:0d:6b:a6:57:9f:be:5d:68:75:3c:73:f1:12:98:d8: ba:aa:00:18:45:eb:91:76:45:cf:82:31:6c:80:6e:ae:aa:62: f2:15:93:2c:81:97:66:95:ee:ae:3b:95:bb:60:6c:b9:c8:54: 05:59:3d:5c:f8:28:08:7a:3f:6f:0c:74:27:63:eb:6e:24:db: 1d:df:a9:22:50:21:59:35:ac:0b:78:54:7d:41:9a:f1:77:91: e3:41:12:c0:f2:2e:90:fb:7e:8f:f0:b0:39:e3:b0:c3:03:53: 64:53:9b:71:40:05:f2:33:31:1d:27:82:1b:63:c7:c8:07:88: 1b:9c:2d:19:38:e3:70:dc:49:71:89:43:d2:77:dd:15:71:d1: fa:06:56:00:29:55:a9:6c:9b:88:91:e4:8b:10:3b:c4:4e:48: 22:dc:dd:82:88:fa:72:69:ff:60:da:a6:60:1c:74:e9:84:c0: 58:1a:22:be:8a:f9:0b:4d:32:82:49:ae:a2:89:93:f8:6b:11: 92:99:24:87:a9:85:29:5b:8d:eb:a1:95:d7:53:fa:07:0a:6c: 2f:de:8d:2a -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUYcTgmSxFL+8yP7dZJi5GVyKPmP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0 NjA4OUFGRDAeFw0yNDEwMTIxNzE3NTBaFw0yNTEwMTExNzIyNTBaMDMxMTAvBgNV BAMTKDEyRENGMkM3MUZGNTkzRjMyODY0MkMyQUU5NzMyNTZGRUVEQTQ3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHJOYb/81dggi4YP0EywJAX8R zvAe3/fvtnG+0pXTAWA6Kb7lRMA2+MEGZ+3uAdapPQqWmS/CntlqfCzAqyfG/DZX KmcnCEk6y0ciU67FaTvf+rNQC8ky3T8IUCkCOKQZJyC5Rr1K0mdWRLoMn96VAtwb oU4isJZfvPHjlYZVBMdgmA+AOrfjTzILwrEMRvVtHzU1l/WaPvJRHkb3k3Xh9tkg Xiq44K8G4+X/680CgM+szeJG1+cAR2n1FWssscJ7j/YfcTIXH4V52gIL/z3ojg2H m06+bVxdZ581xdSl9LAdFfOMHvt/WVwN/U5gvDxMF8JyOYG75K6ozgVGIlxZAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUEtzyxx/1k/MoZCwq6XMlb+7aR/QwHwYDVR0j BBgwFoAUrt7T3ssdqKTmquZyboBVMEYImv0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTI1NDk5NDMtNjQ1Ny00NWUwLWE1NGYtYzE5MzA4MTVi NmY3LzAvQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0NjA4OUFGRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRURFRDNERUNCMURBOEE0RTZBQUU2NzI2 RTgwNTUzMDQ2MDg5QUZELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xMjU0OTk0My02NDU3LTQ1ZTAtYTU0Zi1jMTkzMDgxNWI2ZjcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyMzAzMDMwM2EzYTJmMzMzNjJkMzQzMDIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gSAwDQYJKoZIhvcNAQELBQADggEBAFho 7KGDXDUBAHL6PL0iiga13u4NxHbhMmAZxTlGbXq7o+TD4T8ymg1rplefvl1odTxz 8RKY2LqqABhF65F2Rc+CMWyAbq6qYvIVkyyBl2aV7q47lbtgbLnIVAVZPVz4KAh6 P28MdCdj624k2x3fqSJQIVk1rAt4VH1BmvF3keNBEsDyLpD7fo/wsDnjsMMDU2RT m3FABfIzMR0nghtjx8gHiBucLRk443DcSXGJQ9J33RVx0foGVgApValsm4iR5IsQ O8ROSCLc3YKI+nJp/2DapmAcdOmEwFgaIr6K+QtNMoJJrqKJk/hrEZKZJIephSlb jeuhlddT+gcKbC/ejSo= -----END CERTIFICATE-----Generated at Fri Nov 22 04:59:12 2024 by rpki-client on console-ams.rpki-client.org