$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa File: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (raw, json) Hash identifier: 7Ht9ysaUQlknniITxiGGZVb7FReUYStDZL1yen2prNE= Subject key identifier: C3:EC:84:6B:21:8A:62:A5:8D:C4:AB:58:11:74:E5:C9:0B:16:9F:F1 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 21D84CAAD9092F7873F2FB9D8A24C27D37C9B49F Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa Signing time: Sun 10 Nov 2024 14:48:25 +0000 ROA not before: Sun 10 Nov 2024 14:43:25 +0000 ROA not after: Sun 09 Nov 2025 14:48:25 +0000 asID: 214084 IP address blocks: 2a14:7580:f310::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d8:4c:aa:d9:09:2f:78:73:f2:fb:9d:8a:24:c2:7d:37:c9:b4:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Nov 10 14:43:25 2024 GMT Not After : Nov 9 14:48:25 2025 GMT Subject: CN=C3EC846B218A62A58DC4AB581174E5C90B169FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:ba:cb:55:8f:f7:19:1d:01:96:14:0f:0f: 53:38:8c:a2:60:c1:09:b2:f7:1d:eb:59:eb:3c:c9: 7f:96:1a:ba:c6:bd:bc:ca:49:73:e8:45:a5:25:4c: 9c:c1:0a:d6:da:c4:73:ad:42:47:7c:d0:7b:4d:e0: 8d:8a:1d:ce:9b:35:fd:68:69:be:5d:14:cc:be:5c: c1:5c:ce:7f:1c:55:6b:5d:37:97:73:8e:01:e3:b8: 7d:1d:86:b8:e2:4f:b2:20:a8:56:65:c1:e5:ab:b5: b5:89:3a:b6:d9:33:02:09:3f:8b:dc:bf:3e:73:49: e3:5d:f5:c4:75:7f:bd:ac:f6:3e:67:37:cf:25:99: 75:3f:aa:54:55:bc:4f:10:12:b2:ed:d6:df:b7:bb: 7c:29:4b:39:5c:5c:e3:ef:a0:87:a7:e9:9c:e9:1b: 02:14:bc:77:c7:6a:3b:eb:74:fc:0d:16:1b:cb:fe: ac:7f:f3:ab:a4:63:f0:b5:e2:fc:4c:90:b7:ba:1c: bb:84:d1:e2:01:df:3e:d4:af:1f:72:7d:d8:d0:03: 56:10:75:de:50:b8:19:85:7c:8b:45:73:bf:31:65: a6:c1:62:e5:e7:6a:12:8c:57:a7:fa:9f:e2:e4:a4: 76:25:7c:a5:59:3f:5c:3e:c1:48:92:a9:81:bf:eb: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EC:84:6B:21:8A:62:A5:8D:C4:AB:58:11:74:E5:C9:0B:16:9F:F1 X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f310::/44 Signature Algorithm: sha256WithRSAEncryption 89:39:d9:a2:f5:1c:51:51:cd:b5:10:1f:83:97:91:17:00:9f: 0c:72:09:99:af:90:d9:98:41:36:13:bb:93:89:83:9d:14:65: 49:80:23:9d:e8:40:f6:d8:33:7e:eb:42:84:a8:5c:5f:03:5d: c4:70:8c:c0:36:fa:66:a7:73:19:58:a1:13:e5:4c:8b:32:ff: 3a:18:25:71:84:6c:a6:ad:c6:36:95:18:8b:e8:0b:89:9c:42: aa:d6:f9:06:a7:1f:66:ea:f8:c9:07:47:42:63:f2:0c:89:63: 30:2c:12:76:1a:ac:34:49:c7:7b:ca:d0:31:be:ff:0d:65:92: 79:f8:4e:06:de:6f:8d:8e:c4:91:62:cc:62:dc:34:1f:f9:17: 4a:c1:5a:58:9c:79:bc:46:55:68:96:8d:f1:d3:2c:c9:4d:63: 58:a8:5a:c9:60:4a:f7:b3:a0:5a:e4:16:4c:60:2d:68:95:75: e4:b6:cf:37:35:93:1b:46:ff:c1:92:e2:f1:52:47:bb:4f:93: 17:6e:9c:19:fe:26:b2:9d:08:ca:14:96:ae:9f:1a:86:52:ae: 84:a9:99:e2:97:2f:20:8c:bd:2e:fb:f3:d8:df:eb:1d:0d:d3: a9:6c:2f:b7:10:99:4d:59:7e:4f:41:07:e8:eb:ce:21:a7:24: b8:65:34:fb -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIdhMqtkJL3hz8vudiiTCfTfJtJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNDExMTAxNDQzMjVaFw0yNTExMDkxNDQ4MjVaMDMxMTAvBgNV BAMTKEMzRUM4NDZCMjE4QTYyQTU4REM0QUI1ODExNzRFNUM5MEIxNjlGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOkrrLVY/3GR0BlhQPD1M4jKJg wQmy9x3rWes8yX+WGrrGvbzKSXPoRaUlTJzBCtbaxHOtQkd80HtN4I2KHc6bNf1o ab5dFMy+XMFczn8cVWtdN5dzjgHjuH0dhrjiT7IgqFZlweWrtbWJOrbZMwIJP4vc vz5zSeNd9cR1f72s9j5nN88lmXU/qlRVvE8QErLt1t+3u3wpSzlcXOPvoIen6Zzp GwIUvHfHajvrdPwNFhvL/qx/86ukY/C14vxMkLe6HLuE0eIB3z7Urx9yfdjQA1YQ dd5QuBmFfItFc78xZabBYuXnahKMV6f6n+LkpHYlfKVZP1w+wUiSqYG/6zcNAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUw+yEayGKYqWNxKtYEXTlyQsWn/EwHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8xOWFhOWRhNy1mMWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvMC8zMjYxMzEz NDNhMzczNTM4MzAzYTY2MzMzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIz MTM0MzAzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gPMQMA0GCSqGSIb3DQEBCwUAA4IBAQCJ Odmi9RxRUc21EB+Dl5EXAJ8McgmZr5DZmEE2E7uTiYOdFGVJgCOd6ED22DN+60KE qFxfA13EcIzANvpmp3MZWKET5UyLMv86GCVxhGymrcY2lRiL6AuJnEKq1vkGpx9m 6vjJB0dCY/IMiWMwLBJ2Gqw0Scd7ytAxvv8NZZJ5+E4G3m+NjsSRYsxi3DQf+RdK wVpYnHm8RlVolo3x0yzJTWNYqFrJYEr3s6Ba5BZMYC1olXXkts83NZMbRv/BkuLx Uke7T5MXbpwZ/iaynQjKFJaunxqGUq6EqZnily8gjL0u+/PY3+sdDdOpbC+3EJlN WX5PQQfo684hpyS4ZTT7 -----END CERTIFICATE-----Generated at Mon Nov 25 04:59:44 2024 by rpki-client on console-fra.rpki-client.org