$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa File: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (raw, json) Hash identifier: UbNylh5P6nuf5cNR2u+/87y22yS7yGAzdkJKrmcwv2M= Subject key identifier: A7:A0:2D:B5:71:56:5A:DD:7C:7E:E2:15:E1:F8:0A:76:AE:DC:4A:0A Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 20B64B29F0852CA1CBFD98EFB23E927CF235E55F Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa Signing time: Wed 06 Mar 2024 01:17:12 +0000 ROA not before: Wed 06 Mar 2024 01:12:12 +0000 ROA not after: Wed 05 Mar 2025 01:17:12 +0000 asID: 215617 IP address blocks: 2a0f:85c1:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Jun 2024 14:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b6:4b:29:f0:85:2c:a1:cb:fd:98:ef:b2:3e:92:7c:f2:35:e5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Mar 6 01:12:12 2024 GMT Not After : Mar 5 01:17:12 2025 GMT Subject: CN=A7A02DB571565ADD7C7EE215E1F80A76AEDC4A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:60:15:74:ed:5d:cc:63:28:1b:b6:ed:33:9a: da:77:d2:b4:95:68:a8:e9:79:39:03:e8:a6:5e:3f: e7:5d:0e:8b:40:48:01:a6:5b:97:cc:95:19:ec:94: 63:39:ff:35:fc:58:ce:10:e3:e6:d2:87:c8:b5:6e: 7d:ad:ef:5d:67:72:64:d9:61:40:0a:46:d2:ba:46: 55:eb:2e:7b:fa:26:cf:d2:2f:53:d0:a6:41:cf:92: 28:70:53:2d:8a:84:28:ff:3f:6a:25:20:df:ef:23: 97:f1:51:c8:2d:d0:cf:da:39:24:d2:3a:f9:b6:2e: 9f:84:02:02:70:ec:c3:a2:e9:c7:5e:18:63:c1:8f: 7d:4f:1d:64:22:29:08:0e:87:8c:16:91:6d:27:83: b0:19:a4:a2:11:a8:c1:05:d3:d5:fb:6d:bd:35:02: 64:7c:b0:32:85:25:62:0d:3c:ba:60:c4:5a:56:32: 38:72:e3:6e:94:cb:3a:32:51:65:aa:87:30:5c:71: f3:d5:82:35:dc:38:02:49:3f:03:6f:f4:c5:9a:fc: 16:93:34:9d:12:fa:9c:75:9f:4e:41:ed:f1:2f:52: 3e:17:23:2a:bc:74:5b:78:8f:46:4e:e5:e2:37:11: b8:91:e3:d0:d9:5b:c9:f4:6b:07:b1:3b:c0:b9:4c: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:2D:B5:71:56:5A:DD:7C:7E:E2:15:E1:F8:0A:76:AE:DC:4A:0A X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:363::/48 Signature Algorithm: sha256WithRSAEncryption 79:c8:fd:f4:c9:d6:f7:a1:13:6a:3f:55:d6:66:95:91:bb:a1: f7:2e:ea:33:25:db:b7:b3:c0:ac:8a:98:ee:2b:e9:8a:5d:7e: c0:9f:67:26:27:84:09:d6:9f:40:65:fc:7f:5b:0f:5c:99:2e: 8a:ac:29:99:6b:db:b3:5c:a4:c8:2a:9a:a4:e0:fe:b7:04:29: be:81:c6:ca:24:18:03:5f:35:6b:c8:1d:11:63:d1:27:84:40: 5d:62:6d:82:6d:b9:d1:56:2c:83:f4:d7:88:c5:29:0f:01:1f: 62:2d:04:c8:5b:0c:57:60:7b:a4:e9:00:03:72:1d:54:d4:b1: 73:4b:ce:9e:e8:04:22:f8:82:a6:27:df:37:c8:5b:a4:96:45: 09:a8:59:cb:58:ca:0e:d2:2d:0b:f8:91:ee:84:55:31:1e:1b: 9f:40:16:61:30:ed:8b:3b:6d:98:ed:97:39:b9:94:14:29:82: 57:aa:0a:87:52:92:8b:5c:ca:0f:b8:57:b0:55:6c:31:3a:76: 56:79:a3:7a:48:b0:18:55:bd:19:6b:97:57:b4:63:83:6d:29: 7d:33:b5:73:00:2b:22:c8:7f:e8:99:fc:4b:30:fa:26:bb:23: c2:6a:f1:bc:dd:80:00:9d:f2:be:66:e6:0a:b6:c9:bd:b1:de: b8:68:6e:cc -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUILZLKfCFLKHL/Zjvsj6SfPI15V8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNDAzMDYwMTEyMTJaFw0yNTAzMDUwMTE3MTJaMDMxMTAvBgNV BAMTKEE3QTAyREI1NzE1NjVBREQ3QzdFRTIxNUUxRjgwQTc2QUVEQzRBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYBV07V3MYygbtu0zmtp30rSV aKjpeTkD6KZeP+ddDotASAGmW5fMlRnslGM5/zX8WM4Q4+bSh8i1bn2t711ncmTZ YUAKRtK6RlXrLnv6Js/SL1PQpkHPkihwUy2KhCj/P2olIN/vI5fxUcgt0M/aOSTS Ovm2Lp+EAgJw7MOi6cdeGGPBj31PHWQiKQgOh4wWkW0ng7AZpKIRqMEF09X7bb01 AmR8sDKFJWINPLpgxFpWMjhy426UyzoyUWWqhzBccfPVgjXcOAJJPwNv9MWa/BaT NJ0S+px1n05B7fEvUj4XIyq8dFt4j0ZO5eI3EbiR49DZW8n0awexO8C5TK+XAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUp6AttXFWWt18fuIV4fgKdq7cSgowHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS8yM2Q1ZjY4Mi1iNTFiLTQ4MTItYjhiMS00MzBlMzg2ODM3NDgvMi8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzYzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM2MzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDYzANBgkqhkiG9w0BAQsFAAOCAQEAecj9 9MnW96ETaj9V1maVkbuh9y7qMyXbt7PArIqY7ivpil1+wJ9nJieECdafQGX8f1sP XJkuiqwpmWvbs1ykyCqapOD+twQpvoHGyiQYA181a8gdEWPRJ4RAXWJtgm250VYs g/TXiMUpDwEfYi0EyFsMV2B7pOkAA3IdVNSxc0vOnugEIviCpiffN8hbpJZFCahZ y1jKDtItC/iR7oRVMR4bn0AWYTDtizttmO2XObmUFCmCV6oKh1KSi1zKD7hXsFVs MTp2VnmjekiwGFW9GWuXV7Rjg20pfTO1cwArIsh/6Jn8SzD6JrsjwmrxvN2AAJ3y vmbmCrbJvbHeuGhuzA== -----END CERTIFICATE-----Generated at Fri Jun 28 00:01:27 2024 by rpki-client on console-fra.rpki-client.org