$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199682.roa File: AS199682.roa (raw, json) Hash identifier: wkju3P2nOevCS6EfmV+7EW0hItL7QDYgNx/c5RAjVOs= Subject key identifier: EB:8C:E7:29:2A:E2:4A:CD:F2:1C:32:FA:64:1A:0C:C9:96:56:0D:83 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 05E1065ECE7AC8E2D8353A36799780FD7DC8B966 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199682.roa Signing time: Thu 29 Aug 2024 03:41:16 +0000 ROA not before: Thu 29 Aug 2024 03:36:16 +0000 ROA not after: Thu 28 Aug 2025 03:41:16 +0000 asID: 199682 IP address blocks: 2a0a:6044:7800::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e1:06:5e:ce:7a:c8:e2:d8:35:3a:36:79:97:80:fd:7d:c8:b9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:16 2024 GMT Not After : Aug 28 03:41:16 2025 GMT Subject: CN=EB8CE7292AE24ACDF21C32FA641A0CC996560D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:f5:90:78:9a:1c:0f:b7:6d:8f:f4:ee:9f: ef:30:7b:cf:39:0b:1e:1c:e2:4b:15:b2:75:54:fb: 04:6a:78:59:88:25:17:a6:6c:91:a3:55:8a:df:ee: 39:10:8e:38:57:60:c5:e4:63:7e:96:8c:db:cc:03: 9b:54:d1:99:a9:78:5c:40:99:2c:76:52:3a:fc:41: 3b:c0:b4:2c:8a:6d:c5:ec:ad:7e:57:60:c9:4f:10: ff:43:4c:8d:d7:ac:7a:9a:bb:60:ab:44:87:ea:b7: 48:aa:8c:67:a5:88:61:e9:80:8c:0e:c4:d1:48:a8: 60:09:4c:30:c0:66:65:1c:be:51:04:e2:c8:16:d5: 12:66:6d:f4:29:6c:36:97:e1:29:db:f3:17:2f:28: 76:ba:58:6c:9b:f4:d4:55:36:02:10:ce:dd:84:62: 8b:cc:05:20:65:3c:e8:4c:7d:39:4b:8a:3c:c1:77: ab:25:0a:e8:eb:65:1a:c3:65:ed:00:43:1f:f5:4e: 22:c8:8c:d0:cd:65:26:54:c4:3b:6f:3f:bc:82:d6: f4:e1:11:5d:90:27:d2:5c:6b:c3:89:7b:0e:92:d7: a5:39:8e:03:c7:c6:68:59:f2:78:fe:c4:21:a1:6a: bc:ef:61:fa:fd:29:21:c0:30:e1:6e:fa:07:0c:9e: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8C:E7:29:2A:E2:4A:CD:F2:1C:32:FA:64:1A:0C:C9:96:56:0D:83 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS199682.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7800::/40 Signature Algorithm: sha256WithRSAEncryption 28:1f:a1:be:8b:d8:45:5f:1e:0c:7f:78:32:83:d1:70:c2:9b: fb:d2:90:e3:b0:ce:f2:8d:79:7a:9b:dd:4a:12:81:2a:c7:95: 4c:7e:aa:9a:ca:fe:04:8d:b2:67:21:87:36:78:ad:27:e8:11: 7c:b2:a2:e9:23:db:49:04:d1:4f:f8:38:0b:c1:67:d4:c2:0b: 1d:6d:ee:75:b1:3b:b5:a9:5b:bf:c4:ba:6b:40:03:81:33:ed: f1:2d:62:d5:b9:de:b4:8c:3e:de:dd:7d:26:6c:62:77:ba:37: dc:d4:3e:47:dd:8f:3c:3b:34:1c:08:8b:c0:16:2b:66:be:48: 56:bd:8a:0b:95:b2:9a:22:62:47:ec:ff:96:81:f2:a2:9a:c4: 6f:6f:97:74:8c:aa:0a:d2:ca:88:80:1e:97:96:9a:28:19:69: bb:8a:e8:1e:e3:83:51:bc:ff:05:5f:11:46:5a:f4:5d:de:0f: b7:03:33:1f:0d:a2:1e:b9:97:1a:73:a3:67:3e:0e:29:6a:aa: 2d:49:ee:bb:c5:7e:0e:7a:5b:6e:36:95:85:36:7f:81:57:4e: 4b:96:0b:35:c8:41:13:9f:e2:ce:2d:47:a4:8f:cd:a4:aa:f0: 1f:85:2f:23:01:1c:8d:40:e6:84:81:6e:97:39:ab:f7:b9:ca: 84:13:ae:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBeEGXs56yOLYNTo2eZeA/X3IuWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTZaFw0yNTA4MjgwMzQxMTZaMDMxMTAvBgNV BAMTKEVCOENFNzI5MkFFMjRBQ0RGMjFDMzJGQTY0MUEwQ0M5OTY1NjBEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId/WQeJocD7dtj/Tun+8we885 Cx4c4ksVsnVU+wRqeFmIJRembJGjVYrf7jkQjjhXYMXkY36WjNvMA5tU0ZmpeFxA mSx2Ujr8QTvAtCyKbcXsrX5XYMlPEP9DTI3XrHqau2CrRIfqt0iqjGeliGHpgIwO xNFIqGAJTDDAZmUcvlEE4sgW1RJmbfQpbDaX4Snb8xcvKHa6WGyb9NRVNgIQzt2E YovMBSBlPOhMfTlLijzBd6slCujrZRrDZe0AQx/1TiLIjNDNZSZUxDtvP7yC1vTh EV2QJ9Jca8OJew6S16U5jgPHxmhZ8nj+xCGharzvYfr9KSHAMOFu+gcMnj3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64znKSriSs3yHDL6ZBoMyZZWDYMwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMTk5NjgyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg RHgwDQYJKoZIhvcNAQELBQADggEBACgfob6L2EVfHgx/eDKD0XDCm/vSkOOwzvKN eXqb3UoSgSrHlUx+qprK/gSNsmchhzZ4rSfoEXyyoukj20kE0U/4OAvBZ9TCCx1t 7nWxO7WpW7/EumtAA4Ez7fEtYtW53rSMPt7dfSZsYne6N9zUPkfdjzw7NBwIi8AW K2a+SFa9iguVspoiYkfs/5aB8qKaxG9vl3SMqgrSyoiAHpeWmigZabuK6B7jg1G8 /wVfEUZa9F3eD7cDMx8Noh65lxpzo2c+Dilqqi1J7rvFfg56W242lYU2f4FXTkuW CzXIQROf4s4tR6SPzaSq8B+FLyMBHI1A5oSBbpc5q/e5yoQTrsU= -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org