$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa File: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (raw, json) Hash identifier: Mh81Bt1D/0NWzP7XokM8MvVPTE3WS32gTiIFUz4Wq7Y= Subject key identifier: 0F:29:A4:65:E7:A8:9B:99:95:55:52:6C:60:D2:A3:EB:C7:0E:D0:8E Certificate issuer: /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Certificate serial: 20B83BA06795BD63025D36FD3CBA16F98A547E65 Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa Signing time: Fri 19 Jan 2024 19:27:18 +0000 ROA not before: Fri 19 Jan 2024 19:22:18 +0000 ROA not after: Fri 17 Jan 2025 19:27:18 +0000 asID: 216107 IP address blocks: 2a05:dfc1:cd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Dec 2024 17:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b8:3b:a0:67:95:bd:63:02:5d:36:fd:3c:ba:16:f9:8a:54:7e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD Validity Not Before: Jan 19 19:22:18 2024 GMT Not After : Jan 17 19:27:18 2025 GMT Subject: CN=0F29A465E7A89B999555526C60D2A3EBC70ED08E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:e8:f2:24:a5:83:2f:16:a1:ee:8f:30:2a: 1c:64:9c:1f:e7:b2:f3:56:98:64:87:2f:92:57:85: 30:ac:28:b2:37:3a:fe:77:57:30:02:a4:5e:4e:9b: 1f:d2:92:76:f3:bd:0c:4b:25:15:19:5e:88:80:04: e4:c9:4e:26:6f:1a:e2:79:c2:cb:f5:24:1c:fa:3a: 0c:37:03:c5:02:b9:00:16:60:c0:81:9b:de:b0:d2: 1a:ea:db:76:97:9c:d9:a5:f8:15:b2:01:4b:38:5f: c5:33:1e:12:50:36:fb:29:bf:4c:cd:dc:de:1b:7e: 15:8b:ca:e9:21:88:ad:67:e1:45:3c:7c:81:36:2b: 01:d3:5d:a0:3a:83:25:34:49:ae:5d:14:a2:fc:61: 19:b0:3b:71:b3:0c:60:88:b2:6b:26:a8:d5:ae:92: 26:9c:80:17:0e:20:bc:66:89:4d:78:9f:f7:14:ca: 42:8d:95:98:b9:ce:89:b2:a7:6c:87:9c:9e:91:b5: b7:8b:97:92:13:eb:d7:88:3d:e6:74:4b:da:f8:33: b8:e1:ed:a8:d3:13:c1:7e:d2:88:5d:ae:99:f8:9c: 76:c1:e2:e5:fa:66:94:e5:b4:22:5c:28:95:50:95: 88:e4:8d:b6:ce:cc:73:57:6c:29:2a:b9:58:fd:61: 8b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:29:A4:65:E7:A8:9B:99:95:55:52:6C:60:D2:A3:EB:C7:0E:D0:8E X509v3 Authority Key Identifier: keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:cd0::/48 Signature Algorithm: sha256WithRSAEncryption 95:29:b9:a2:85:59:86:44:1d:e2:a5:05:90:65:e3:7d:51:fd: 5e:de:de:7d:22:bd:cd:01:9b:5c:67:25:9c:25:c0:cc:d8:8c: 15:f2:b4:c9:f7:5c:a9:49:32:48:d4:53:93:fa:b5:eb:e0:0c: 69:c2:bb:6c:a9:f5:39:21:69:b1:82:9d:50:9e:75:1d:6b:66: 56:de:f0:4b:94:e1:d7:c3:a5:25:ce:18:fc:05:b6:02:f5:48: e5:f3:9e:d0:80:23:95:8f:6e:0a:7c:29:28:64:b6:94:75:dc: 65:b1:13:ae:db:92:bc:45:7c:97:67:55:5c:cd:9e:19:c9:16: ff:74:e9:41:b6:83:ee:6b:2e:d3:c8:74:93:db:09:c4:81:7a: 8f:c6:51:4e:ab:7a:f3:60:37:c7:2d:d2:7f:1c:95:66:63:36: 40:93:de:58:96:b4:0f:59:99:9a:d2:88:b5:dc:80:9a:51:3c: ca:29:69:ae:8d:8f:2b:35:2a:13:fe:ba:90:d7:c5:9e:21:5d: d5:6c:46:22:38:f4:3f:23:38:e8:52:e9:45:6d:1c:b4:0f:89: 5c:ef:d0:58:76:f0:69:98:ee:3f:04:8c:4d:75:d2:9f:7f:f9: 30:5b:24:62:f1:42:35:86:28:33:15:be:ec:97:db:c1:7b:34: 60:1e:5b:96 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUILg7oGeVvWMCXTb9PLoW+YpUfmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5 NzE5OEJGRDAeFw0yNDAxMTkxOTIyMThaFw0yNTAxMTcxOTI3MThaMDMxMTAvBgNV BAMTKDBGMjlBNDY1RTdBODlCOTk5NTU1NTI2QzYwRDJBM0VCQzcwRUQwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMejyJKWDLxah7o8wKhxknB/n svNWmGSHL5JXhTCsKLI3Ov53VzACpF5Omx/SknbzvQxLJRUZXoiABOTJTiZvGuJ5 wsv1JBz6Ogw3A8UCuQAWYMCBm96w0hrq23aXnNml+BWyAUs4X8UzHhJQNvspv0zN 3N4bfhWLyukhiK1n4UU8fIE2KwHTXaA6gyU0Sa5dFKL8YRmwO3GzDGCIsmsmqNWu kiacgBcOILxmiU14n/cUykKNlZi5zomyp2yHnJ6RtbeLl5IT69eIPeZ0S9r4M7jh 7ajTE8F+0ohdrpn4nHbB4uX6ZpTltCJcKJVQlYjkjbbOzHNXbCkquVj9YYsHAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUDymkZeeom5mVVVJsYNKj68cO0I4wHwYDVR0j BBgwFoAUoL3NTO8Cuao8vQqDdmZxY5cZi/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5 MjQzLzEvQTBCRENENENFRjAyQjlBQTNDQkQwQTgzNzY2NjcxNjM5NzE5OEJGRC5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0EwQkRDRDRDRUYwMkI5 QUEzQ0JEMEE4Mzc2NjY3MTYzOTcxOThCRkQuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0 My8xLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjM2NDMwM2EzYTJmMzQzODJkMzQzODIw M2QzZTIwMzIzMTM2MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwQzQMA0GCSqGSIb3DQEB CwUAA4IBAQCVKbmihVmGRB3ipQWQZeN9Uf1e3t59Ir3NAZtcZyWcJcDM2IwV8rTJ 91ypSTJI1FOT+rXr4AxpwrtsqfU5IWmxgp1QnnUda2ZW3vBLlOHXw6Ulzhj8BbYC 9Ujl857QgCOVj24KfCkoZLaUddxlsROu25K8RXyXZ1VczZ4ZyRb/dOlBtoPuay7T yHST2wnEgXqPxlFOq3rzYDfHLdJ/HJVmYzZAk95YlrQPWZma0oi13ICaUTzKKWmu jY8rNSoT/rqQ18WeIV3VbEYiOPQ/IzjoUulFbRy0D4lc79BYdvBpmO4/BIxNddKf f/kwWyRi8UI1higzFb7sl9vBezRgHluW -----END CERTIFICATE-----Generated at Tue Dec 3 03:27:16 2024 by rpki-client on console-fra.rpki-client.org