$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa File: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (raw, json) Hash identifier: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24= Subject key identifier: EC:DC:F9:B9:C2:F9:E5:12:F8:D3:67:2F:B5:03:B5:4E:FB:D0:29:B5 Certificate issuer: /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Certificate serial: 61C4961C1D58E933ACB60998E937F108B7042CC3 Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa Signing time: Tue 10 Sep 2024 19:15:17 +0000 ROA not before: Tue 10 Sep 2024 19:10:17 +0000 ROA not after: Tue 09 Sep 2025 19:15:17 +0000 asID: 50755 IP address blocks: 2a0a:6040:b1f6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 00:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c4:96:1c:1d:58:e9:33:ac:b6:09:98:e9:37:f1:08:b7:04:2c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Validity Not Before: Sep 10 19:10:17 2024 GMT Not After : Sep 9 19:15:17 2025 GMT Subject: CN=ECDCF9B9C2F9E512F8D3672FB503B54EFBD029B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:39:c5:f5:8c:1e:6a:2b:70:a7:a5:67:6e: b2:a1:0a:fa:15:87:89:14:73:94:a0:90:2e:5c:67: 64:9a:6d:f7:30:6d:4c:48:8c:de:79:a4:cb:bb:48: 94:9a:18:fc:f2:5c:14:1e:db:6e:25:ea:07:7c:e9: 6d:66:44:72:5d:67:d5:18:64:d0:60:53:1d:17:94: 29:36:2f:b2:08:84:a8:de:8b:5e:27:5c:7d:cf:e3: 35:b1:58:96:56:49:18:0b:02:7a:f6:16:05:f7:1b: 2c:89:c6:29:ec:19:cb:9f:2c:1a:30:4c:98:eb:b6: f8:4b:91:b9:c2:d3:dc:0b:e2:c8:b1:be:d1:d8:f5: 2f:20:29:98:48:9a:f9:e0:0e:36:8b:8e:24:2f:58: 6e:39:d6:eb:6f:94:a9:19:34:7d:13:7b:85:7e:d0: d9:36:f1:41:48:14:dd:f5:77:b6:25:ee:ea:c6:84: 66:6c:8a:c0:62:b0:e4:4f:64:68:5d:ac:c2:7f:e4: c5:33:ac:e0:73:17:c3:99:c6:0e:59:1a:d4:2c:d3: 7b:5c:90:1e:98:0b:f5:4d:c2:3b:81:9c:e5:15:c4: 5f:d3:70:40:e3:1b:3e:2d:a0:85:7e:61:22:39:06: b5:78:b6:da:bb:bd:ec:ae:57:03:c3:cf:52:1d:4e: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DC:F9:B9:C2:F9:E5:12:F8:D3:67:2F:B5:03:B5:4E:FB:D0:29:B5 X509v3 Authority Key Identifier: keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b1f6::/48 Signature Algorithm: sha256WithRSAEncryption 18:3e:d5:34:54:7d:a1:fe:fe:fa:02:ec:40:fa:bd:f7:e6:2a: 38:01:78:d7:61:c4:96:74:08:10:bb:22:44:f4:f8:a5:94:2b: d4:e0:02:65:31:73:12:b1:8f:cf:4e:3a:93:14:7c:ec:05:f8: 69:21:0b:1c:95:e6:a4:2c:e2:a9:13:42:5c:4d:02:a7:c9:b0: 79:59:e5:59:40:69:df:55:c7:55:5f:c9:d1:e7:67:a9:8e:45: 83:49:da:ca:04:17:92:5f:ec:0d:4e:a0:40:0f:59:55:52:a8: 89:37:ac:4d:92:f4:8d:70:07:38:1e:69:25:9a:79:45:80:09: 24:b2:aa:09:9f:10:c9:f5:0b:2e:2a:36:ca:db:bc:5c:8e:51: 29:62:c8:4c:80:9a:d9:2f:c3:84:2b:7b:c4:3f:8d:a6:31:22: cd:39:67:3f:49:56:60:f3:4f:93:e6:d7:05:1a:51:31:d8:49: 61:cf:8a:1f:81:65:b1:68:13:ab:d2:55:fd:01:4a:54:ac:40: 64:f7:a6:68:aa:bc:72:bf:52:52:60:02:7b:61:71:d7:95:09: b5:d7:13:30:36:90:64:3a:02:67:27:d4:47:15:aa:a0:1d:20: b6:1a:e8:dc:8b:c5:18:69:d7:3c:a7:4c:d1:27:bc:d6:84:0a: 23:0b:c4:89 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUYcSWHB1Y6TOstgmY6TfxCLcELMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz MTA0RkU3NjAeFw0yNDA5MTAxOTEwMTdaFw0yNTA5MDkxOTE1MTdaMDMxMTAvBgNV BAMTKEVDRENGOUI5QzJGOUU1MTJGOEQzNjcyRkI1MDNCNTRFRkJEMDI5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04jnF9Yweaitwp6VnbrKhCvoV h4kUc5SgkC5cZ2SabfcwbUxIjN55pMu7SJSaGPzyXBQe224l6gd86W1mRHJdZ9UY ZNBgUx0XlCk2L7IIhKjei14nXH3P4zWxWJZWSRgLAnr2FgX3GyyJxinsGcufLBow TJjrtvhLkbnC09wL4sixvtHY9S8gKZhImvngDjaLjiQvWG451utvlKkZNH0Te4V+ 0Nk28UFIFN31d7Yl7urGhGZsisBisORPZGhdrMJ/5MUzrOBzF8OZxg5ZGtQs03tc kB6YC/VNwjuBnOUVxF/TcEDjGz4toIV+YSI5BrV4ttq7veyuVwPDz1IdTj8VAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU7Nz5ucL55RL402cvtQO1TvvQKbUwHwYDVR0j BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl Ny8wLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzYzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTMwMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQLH2MA0GCSqGSIb3DQEB CwUAA4IBAQAYPtU0VH2h/v76AuxA+r335io4AXjXYcSWdAgQuyJE9PillCvU4AJl MXMSsY/PTjqTFHzsBfhpIQscleakLOKpE0JcTQKnybB5WeVZQGnfVcdVX8nR52ep jkWDSdrKBBeSX+wNTqBAD1lVUqiJN6xNkvSNcAc4HmklmnlFgAkksqoJnxDJ9Qsu KjbK27xcjlEpYshMgJrZL8OEK3vEP42mMSLNOWc/SVZg80+T5tcFGlEx2Elhz4of gWWxaBOr0lX9AUpUrEBk96Zoqrxyv1JSYAJ7YXHXlQm11xMwNpBkOgJnJ9RHFaqg HSC2Gujci8UYadc8p0zRJ7zWhAojC8SJ -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:35 2025 by rpki-client