$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa File: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (raw, json) Hash identifier: 2T6/wGpI7a+2C8eOZHCpHiTBZ9NcKjM+64tR++LvjJE= Subject key identifier: B2:03:CA:9F:D0:0D:27:A8:86:BA:C2:CF:5E:B6:B1:07:5C:2F:EC:F0 Certificate issuer: /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD Certificate serial: 1751B1B8A631EF703059410BE73338F33EDCC8BF Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa Signing time: Fri 22 Nov 2024 02:32:52 +0000 ROA not before: Fri 22 Nov 2024 02:27:52 +0000 ROA not after: Fri 21 Nov 2025 02:32:52 +0000 asID: 401386 IP address blocks: 2a14:7581:2f01::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:51:b1:b8:a6:31:ef:70:30:59:41:0b:e7:33:38:f3:3e:dc:c8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD Validity Not Before: Nov 22 02:27:52 2024 GMT Not After : Nov 21 02:32:52 2025 GMT Subject: CN=B203CA9FD00D27A886BAC2CF5EB6B1075C2FECF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:84:b0:2a:49:25:3a:73:ee:61:cc:4e:74: f1:c7:32:c9:fa:f2:a5:61:19:09:9c:6f:26:3a:ec: 00:be:b4:e6:96:ed:82:6a:5c:e9:62:f4:75:02:3b: 1b:69:e6:a3:3b:e4:96:ed:8b:cc:f5:1c:45:4a:a5: d8:de:4a:2c:6d:24:10:86:78:1a:ab:e1:24:2a:2a: f3:6d:e6:ab:99:67:ec:6e:ab:2b:95:c4:04:40:4e: 1d:06:9b:26:f5:9b:23:44:0b:1c:1d:e2:d2:56:99: cb:38:47:dc:15:25:82:4a:72:31:b3:10:ea:29:98: de:e7:1f:80:ed:60:5f:30:09:8e:03:43:eb:3c:6a: 84:18:0d:f8:cb:55:6e:1c:25:df:2a:3c:96:bc:e4: ea:f0:89:5d:18:13:44:ff:a1:19:a9:5e:f7:79:f7: 44:72:9d:73:cd:bd:14:69:76:a4:71:73:b9:70:e8: 41:79:01:49:bf:8a:e7:00:90:d3:f2:bf:ec:2b:df: 9b:c6:45:fe:5e:42:1c:b4:d4:1c:0e:e9:8b:64:47: 5b:a7:a6:c6:9b:fd:1a:16:89:f0:d2:d6:ae:16:94: 94:85:1d:87:37:a4:34:27:91:d5:5e:11:89:6d:57: bb:34:ee:27:44:9e:db:4c:8e:95:d8:21:ba:bd:9a: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:03:CA:9F:D0:0D:27:A8:86:BA:C2:CF:5E:B6:B1:07:5C:2F:EC:F0 X509v3 Authority Key Identifier: keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:2f01::/48 Signature Algorithm: sha256WithRSAEncryption 4c:19:a1:e2:0b:e4:e2:5e:d0:1f:9e:60:7a:63:f7:99:a8:7a: 5e:12:20:e1:de:eb:0c:96:da:84:53:84:9a:ba:0b:23:9c:67: cb:16:5f:d0:85:78:e4:4b:00:cf:bc:33:e4:45:17:ab:9d:57: df:f6:f2:57:56:6c:bb:67:07:01:44:c4:d8:21:c5:3e:c3:47: fc:63:07:d9:5b:45:c0:53:f7:bb:86:19:c0:10:79:75:1e:b9: 27:9b:4e:11:2e:97:3a:76:67:3e:06:cd:30:e7:78:4a:25:d4: bd:22:f3:79:1f:93:b9:96:6c:0f:13:a2:18:2e:2d:39:99:75: b0:1e:a5:53:69:3f:71:7e:78:57:11:1f:5c:31:4b:5f:be:97: 54:97:b7:84:4b:78:29:75:5a:a1:c6:99:fe:22:82:dd:ad:b7: 30:d9:93:9c:3e:a3:06:f7:fb:d7:a8:cd:c0:27:ef:93:58:11: d6:9f:cc:db:67:55:95:a4:ea:cf:1d:8d:1b:85:c1:83:96:7d: 5b:4e:53:a1:6b:55:cd:9a:d9:02:97:51:77:f8:29:ea:08:04: d1:3d:9b:77:c0:37:76:65:86:9d:a2:a7:78:de:02:1f:b7:f4: 06:ed:a6:e0:8f:68:9f:2e:7c:86:da:35:7e:76:69:24:05:04: fd:ee:cd:a5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUF1GxuKYx73AwWUEL5zM48z7cyL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0 NjA4OUFGRDAeFw0yNDExMjIwMjI3NTJaFw0yNTExMjEwMjMyNTJaMDMxMTAvBgNV BAMTKEIyMDNDQTlGRDAwRDI3QTg4NkJBQzJDRjVFQjZCMTA3NUMyRkVDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxoSwKkklOnPuYcxOdPHHMsn6 8qVhGQmcbyY67AC+tOaW7YJqXOli9HUCOxtp5qM75Jbti8z1HEVKpdjeSixtJBCG eBqr4SQqKvNt5quZZ+xuqyuVxARATh0Gmyb1myNECxwd4tJWmcs4R9wVJYJKcjGz EOopmN7nH4DtYF8wCY4DQ+s8aoQYDfjLVW4cJd8qPJa85OrwiV0YE0T/oRmpXvd5 90RynXPNvRRpdqRxc7lw6EF5AUm/iucAkNPyv+wr35vGRf5eQhy01BwO6YtkR1un psab/RoWifDS1q4WlJSFHYc3pDQnkdVeEYltV7s07idEnttMjpXYIbq9mhbHAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUsgPKn9ANJ6iGusLPXraxB1wv7PAwHwYDVR0j BBgwFoAUrt7T3ssdqKTmquZyboBVMEYImv0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTI1NDk5NDMtNjQ1Ny00NWUwLWE1NGYtYzE5MzA4MTVi NmY3LzAvQUVERUQzREVDQjFEQThBNEU2QUFFNjcyNkU4MDU1MzA0NjA4OUFGRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BRURFRDNERUNCMURBOEE0RTZBQUU2NzI2 RTgwNTUzMDQ2MDg5QUZELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xMjU0OTk0My02NDU3LTQ1ZTAtYTU0Zi1jMTkzMDgxNWI2ZjcvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTMyNjYzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQz MDMxMzMzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gS8BMA0GCSqGSIb3DQEBCwUAA4IBAQBM GaHiC+TiXtAfnmB6Y/eZqHpeEiDh3usMltqEU4SaugsjnGfLFl/QhXjkSwDPvDPk RRernVff9vJXVmy7ZwcBRMTYIcU+w0f8YwfZW0XAU/e7hhnAEHl1Hrknm04RLpc6 dmc+Bs0w53hKJdS9IvN5H5O5lmwPE6IYLi05mXWwHqVTaT9xfnhXER9cMUtfvpdU l7eES3gpdVqhxpn+IoLdrbcw2ZOcPqMG9/vXqM3AJ++TWBHWn8zbZ1WVpOrPHY0b hcGDln1bTlOha1XNmtkCl1F3+CnqCATRPZt3wDd2ZYadoqd43gIft/QG7abgj2if LnyG2jV+dmkkBQT97s2l -----END CERTIFICATE-----Generated at Fri Nov 22 04:59:13 2024 by rpki-client on console-ams.rpki-client.org