$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa File: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (raw, json) Hash identifier: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4= Subject key identifier: DC:5F:CD:15:B5:E7:C0:59:F6:E7:1C:E6:C9:46:CB:AD:27:5B:3A:32 Certificate issuer: /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Certificate serial: 67528489AFFC3D434A3A7F991212B3F70DD88ACC Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa Signing time: Tue 10 Sep 2024 19:15:19 +0000 ROA not before: Tue 10 Sep 2024 19:10:19 +0000 ROA not after: Tue 09 Sep 2025 19:15:19 +0000 asID: 50755 IP address blocks: 2a0a:6040:b1f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 08:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:52:84:89:af:fc:3d:43:4a:3a:7f:99:12:12:b3:f7:0d:d8:8a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Validity Not Before: Sep 10 19:10:19 2024 GMT Not After : Sep 9 19:15:19 2025 GMT Subject: CN=DC5FCD15B5E7C059F6E71CE6C946CBAD275B3A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:81:fa:9e:4c:92:09:5c:90:7f:cf:17:e1: 7e:cd:1c:19:32:d9:b4:a0:32:67:b9:fb:f6:3d:b5: 1c:88:13:1b:75:0c:51:77:24:d7:df:b5:98:13:8d: cb:48:4d:e9:1e:18:23:84:4d:db:d7:a9:e4:05:d9: cc:94:23:57:b8:9b:7f:71:8b:54:e9:c6:af:04:c8: 78:21:a3:6c:d6:dc:2a:6f:60:85:b9:41:c8:bc:f8: 24:04:56:4f:32:a0:2c:49:77:71:da:e7:0a:f9:95: ac:ee:f4:37:77:04:72:30:cd:57:02:41:53:de:fe: 13:33:40:a9:ab:aa:cb:d4:f6:5e:00:d7:5b:a0:e4: fb:58:dc:f5:5a:70:86:03:3d:8f:fc:25:77:b5:c3: a7:e2:40:bb:2b:b6:45:31:9a:7e:4a:5e:af:6c:32: f6:ca:cc:b5:35:67:37:84:c8:24:86:89:5e:2d:17: c8:b2:c9:51:60:01:60:c1:c2:79:aa:c5:44:be:93: b0:4d:17:da:29:fc:87:c6:82:25:1c:47:a8:61:1f: 09:8e:ac:a2:36:d5:55:b6:f3:fc:4d:25:47:d3:bf: 55:10:0b:3b:8b:3a:a2:dd:f3:90:53:eb:de:63:76: b0:7a:66:b4:5d:fb:44:d0:34:3b:51:0e:45:5e:2d: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5F:CD:15:B5:E7:C0:59:F6:E7:1C:E6:C9:46:CB:AD:27:5B:3A:32 X509v3 Authority Key Identifier: keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b1f7::/48 Signature Algorithm: sha256WithRSAEncryption 89:79:33:1d:5f:aa:51:14:c3:22:98:6d:5d:6d:00:4c:25:44: da:5f:cb:68:e5:fd:41:00:7d:2d:cc:41:52:2a:87:a2:9f:34: 0b:53:c2:fa:89:67:f9:39:f9:f7:ac:77:a0:ff:76:5f:38:5b: a1:5b:7a:9b:7d:50:53:2c:84:26:cf:74:72:43:d0:ef:73:27: 1a:0d:e6:97:0b:74:b3:1e:70:82:b2:b8:9c:57:da:5a:bd:d2: 2c:5c:24:c0:c9:a5:90:22:ce:71:34:3a:87:19:27:b7:99:d4: bf:16:2a:8e:f5:89:cd:73:94:d1:dc:08:cf:e7:f1:5d:68:fc: 6b:a4:ee:22:9a:2e:fe:1c:32:48:f7:32:be:65:e8:0b:c5:8b: 4c:d4:89:ba:e8:62:ce:6d:54:df:ea:54:64:82:6e:f5:c6:3c: 35:57:3e:f6:05:db:c3:08:d1:ff:d8:28:02:33:5e:95:24:77: 81:36:46:99:ff:d4:79:a4:3b:c5:81:93:90:03:a5:4e:da:d2: bd:a3:2f:e4:dc:a7:2e:fa:b6:95:4c:a5:bd:8a:28:0b:9a:96: f6:ec:6b:c9:be:b6:a7:79:b9:eb:60:dd:a7:0d:f0:5a:4d:a0: 7c:91:aa:e7:5d:f7:f1:df:ad:26:af:3f:5d:a1:53:d7:70:8b: ce:54:c2:89 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUZ1KEia/8PUNKOn+ZEhKz9w3YiswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz MTA0RkU3NjAeFw0yNDA5MTAxOTEwMTlaFw0yNTA5MDkxOTE1MTlaMDMxMTAvBgNV BAMTKERDNUZDRDE1QjVFN0MwNTlGNkU3MUNFNkM5NDZDQkFEMjc1QjNBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgIH6nkySCVyQf88X4X7NHBky 2bSgMme5+/Y9tRyIExt1DFF3JNfftZgTjctITekeGCOETdvXqeQF2cyUI1e4m39x i1Tpxq8EyHgho2zW3CpvYIW5Qci8+CQEVk8yoCxJd3Ha5wr5lazu9Dd3BHIwzVcC QVPe/hMzQKmrqsvU9l4A11ug5PtY3PVacIYDPY/8JXe1w6fiQLsrtkUxmn5KXq9s MvbKzLU1ZzeEyCSGiV4tF8iyyVFgAWDBwnmqxUS+k7BNF9op/IfGgiUcR6hhHwmO rKI21VW28/xNJUfTv1UQCzuLOqLd85BT695jdrB6ZrRd+0TQNDtRDkVeLX5hAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQU3F/NFbXnwFn25xzmyUbLrSdbOjIwHwYDVR0j BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5LzJhY2EzY2E2LTM0Y2MtNDc3Mi1iYWMwLWEzNWRkMDE5NWNl Ny8wLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjIzMTY2MzczYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTMwMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQLH3MA0GCSqGSIb3DQEB CwUAA4IBAQCJeTMdX6pRFMMimG1dbQBMJUTaX8to5f1BAH0tzEFSKoeinzQLU8L6 iWf5Ofn3rHeg/3ZfOFuhW3qbfVBTLIQmz3RyQ9DvcycaDeaXC3SzHnCCsricV9pa vdIsXCTAyaWQIs5xNDqHGSe3mdS/FiqO9YnNc5TR3AjP5/FdaPxrpO4imi7+HDJI 9zK+ZegLxYtM1Im66GLObVTf6lRkgm71xjw1Vz72BdvDCNH/2CgCM16VJHeBNkaZ /9R5pDvFgZOQA6VO2tK9oy/k3Kcu+raVTKW9iigLmpb27GvJvranebnrYN2nDfBa TaB8karnXffx360mrz9doVPXcIvOVMKJ -----END CERTIFICATE-----Generated at Tue Oct 22 20:22:08 2024 by rpki-client on console-fra.rpki-client.org