$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa File: 326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa (raw, json) Hash identifier: ui5hHpqfdb7gIpXWviTW+EDQNvP+Y2m9Xjq+0KvKjcw= Subject key identifier: 75:31:90:CD:11:4F:D8:81:F6:6F:62:AD:1F:3C:95:4A:91:32:74:4F Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 25F778DF38765DD52689152FF0AB5CA594B02AE9 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa Signing time: Fri 17 May 2024 13:23:13 +0000 ROA not before: Fri 17 May 2024 13:18:13 +0000 ROA not after: Fri 16 May 2025 13:23:13 +0000 asID: 205398 IP address blocks: 2a0a:6044:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Jun 2024 07:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f7:78:df:38:76:5d:d5:26:89:15:2f:f0:ab:5c:a5:94:b0:2a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: May 17 13:18:13 2024 GMT Not After : May 16 13:23:13 2025 GMT Subject: CN=753190CD114FD881F66F62AD1F3C954A9132744F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:04:b4:06:3f:6e:00:ae:aa:c7:5d:db:c7: 87:e0:ee:16:79:ad:64:7e:31:8f:ba:3d:4f:45:25: 60:0b:4e:9d:f6:3e:ac:ec:57:f1:c5:86:ad:98:b5: 54:ff:d1:a4:68:e3:1a:90:7a:51:34:a3:cb:95:52: 3b:d4:2c:1d:71:64:24:2d:70:ab:28:27:2f:89:95: e8:c7:f8:16:00:98:c3:2b:03:7b:fc:82:02:c1:f9: 4a:64:3f:79:b0:17:f5:07:59:42:9c:05:54:a6:ed: 33:bc:29:4d:7e:c4:1a:7a:01:41:e3:aa:ae:7b:66: 94:30:f6:f3:35:48:53:9e:e7:3f:71:39:b5:a8:49: b6:1c:c6:e5:d5:90:b8:33:bc:87:46:89:5d:58:4a: 3e:83:5e:9a:12:32:1f:2f:fb:35:15:a5:58:77:b1: ae:83:9f:71:14:85:fc:a5:c3:a4:c9:b8:9a:41:0f: f1:04:e6:71:e0:0a:38:b6:e5:9c:4e:43:b8:6b:73: ea:0d:17:4e:3a:71:78:05:fe:36:80:d7:dc:fd:50: c4:8b:af:94:f6:4f:23:db:19:eb:54:7b:5a:9e:b2: 8a:82:d9:f2:5f:93:9c:e6:d1:b4:09:33:41:77:05: 28:4b:7a:61:58:5a:b8:71:ae:e9:bb:a7:b7:20:2f: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:31:90:CD:11:4F:D8:81:F6:6F:62:AD:1F:3C:95:4A:91:32:74:4F X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/326130613a363034343a616530303a3a2f34302d3438203d3e20323035333938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ae00::/40 Signature Algorithm: sha256WithRSAEncryption 9f:ac:e5:1d:7b:01:8b:e9:5b:6e:15:78:6f:5f:e8:a1:99:29: d1:b4:99:10:20:a6:17:0e:c7:f0:04:a7:39:ea:12:90:e1:d8: 46:6c:45:10:a7:82:42:c6:23:f9:ae:59:cf:85:79:b6:d7:14: 3a:20:b6:28:22:c2:3c:13:49:7e:16:bf:20:f4:4f:c0:32:89: b7:94:62:71:33:51:f6:50:5d:d6:40:32:e6:9e:39:c5:aa:3f: f5:90:df:1f:7e:69:dd:15:89:4c:a3:2a:19:90:2d:1f:63:fc: 5d:c5:29:7d:37:a3:bb:1b:4d:e6:86:c8:a9:ae:e2:7c:ed:64: 78:d9:0e:9a:4b:00:f9:89:73:60:97:05:bf:9b:e5:10:2c:66: 27:55:e5:39:02:d0:92:b9:c1:72:b3:5a:34:fd:bc:fc:c1:e8: 0e:01:a9:a9:98:02:0b:76:3d:ed:f3:b1:1e:3c:b8:3d:47:58: cd:1e:b5:7b:d1:f1:83:f6:ca:5d:b5:35:0c:7f:64:72:7f:5b: 55:e4:67:c5:cc:29:db:13:79:7f:ad:da:c6:ea:a2:aa:81:bb: dc:b5:aa:14:ff:96:20:67:63:66:b4:f2:b7:dc:6e:0c:ac:54: 67:65:f1:60:79:9a:93:aa:b7:c9:ee:9b:6c:4f:8d:46:bd:e0: 53:24:84:05 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUJfd43zh2XdUmiRUv8KtcpZSwKukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA1MTcxMzE4MTNaFw0yNTA1MTYxMzIzMTNaMDMxMTAvBgNV BAMTKDc1MzE5MENEMTE0RkQ4ODFGNjZGNjJBRDFGM0M5NTRBOTEzMjc0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFAS0Bj9uAK6qx13bx4fg7hZ5 rWR+MY+6PU9FJWALTp32PqzsV/HFhq2YtVT/0aRo4xqQelE0o8uVUjvULB1xZCQt cKsoJy+JlejH+BYAmMMrA3v8ggLB+UpkP3mwF/UHWUKcBVSm7TO8KU1+xBp6AUHj qq57ZpQw9vM1SFOe5z9xObWoSbYcxuXVkLgzvIdGiV1YSj6DXpoSMh8v+zUVpVh3 sa6Dn3EUhfylw6TJuJpBD/EE5nHgCji25ZxOQ7hrc+oNF046cXgF/jaA19z9UMSL r5T2TyPbGetUe1qesoqC2fJfk5zm0bQJM0F3BShLemFYWrhxrum7p7cgL7qzAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUdTGQzRFP2IH2b2KtHzyVSpEydE8wHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMt ZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzAvMzI2MTMwNjEzYTM2MzAzNDM0 M2E2MTY1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzNTMzMzkzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw DgQCAAIwCAMGACoKYESuMA0GCSqGSIb3DQEBCwUAA4IBAQCfrOUdewGL6VtuFXhv X+ihmSnRtJkQIKYXDsfwBKc56hKQ4dhGbEUQp4JCxiP5rlnPhXm21xQ6ILYoIsI8 E0l+Fr8g9E/AMom3lGJxM1H2UF3WQDLmnjnFqj/1kN8ffmndFYlMoyoZkC0fY/xd xSl9N6O7G03mhsipruJ87WR42Q6aSwD5iXNglwW/m+UQLGYnVeU5AtCSucFys1o0 /bz8wegOAampmAILdj3t87EePLg9R1jNHrV70fGD9spdtTUMf2Ryf1tV5GfFzCnb E3l/rdrG6qKqgbvctaoU/5YgZ2NmtPK33G4MrFRnZfFgeZqTqrfJ7ptsT41GveBT JIQF -----END CERTIFICATE-----Generated at Sat Jun 1 13:55:57 2024 by rpki-client on console-fra.rpki-client.org