$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS202224.roa File: AS202224.roa (raw, json) Hash identifier: jMZ39EgUDJrvV+E17DbEdMebSeDs7Ow+XDeZCWXySV0= Subject key identifier: 2A:AA:AB:7C:7D:E6:B9:0F:DD:07:4B:79:C7:62:48:CB:82:B3:15:BF Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 143E2D62CDC086B2A726B8A595AB3E312C04A05B Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS202224.roa Signing time: Thu 29 Aug 2024 03:41:17 +0000 ROA not before: Thu 29 Aug 2024 03:36:17 +0000 ROA not after: Thu 28 Aug 2025 03:41:17 +0000 asID: 202224 IP address blocks: 2a0a:6044:7000::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:3e:2d:62:cd:c0:86:b2:a7:26:b8:a5:95:ab:3e:31:2c:04:a0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:17 2024 GMT Not After : Aug 28 03:41:17 2025 GMT Subject: CN=2AAAAB7C7DE6B90FDD074B79C76248CB82B315BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:4e:85:5d:9c:40:be:05:1f:17:36:aa:63: 89:c9:6e:93:ba:44:5e:e6:7d:2c:14:85:e4:c0:d6: 86:a4:6c:fd:f9:b8:63:6a:71:8c:8b:2c:c1:81:93: 45:dd:72:d0:88:91:b9:21:ca:91:df:81:2b:83:e1: ab:a1:74:1b:c1:01:2c:4c:1e:76:db:e4:91:7d:88: 5a:22:8b:95:31:de:ee:bc:52:f0:d5:c3:5a:7d:5a: 3f:58:d2:1e:93:a2:3a:31:e9:00:c9:7d:9b:2e:7b: 1e:f6:a8:9f:b5:51:01:46:15:e7:29:15:66:6a:30: 50:bf:7d:fc:79:b9:ea:e8:9e:b1:49:19:92:76:cf: 71:e1:3f:25:d5:e3:cb:25:f2:5d:75:83:d8:93:1a: 08:98:7c:cc:fd:24:ed:f1:81:0c:4d:23:e5:66:d9: d7:46:22:30:02:5c:d7:55:c6:c0:e1:e5:13:10:7c: 99:26:19:f0:59:a6:e0:b3:30:f5:6d:d7:64:5f:b8: ad:d0:5c:80:b2:ba:64:be:80:dc:99:72:20:25:06: cd:3e:6c:a9:a6:3f:1d:24:f3:50:74:f0:e4:ec:80: f4:98:22:69:30:20:fc:3d:20:c1:68:1a:80:ef:02: 78:fc:24:e2:b8:fa:40:09:99:09:c2:6b:b9:84:66: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AA:AB:7C:7D:E6:B9:0F:DD:07:4B:79:C7:62:48:CB:82:B3:15:BF X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS202224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7000::/40 Signature Algorithm: sha256WithRSAEncryption 2b:ae:15:06:36:f5:14:7b:69:cb:1f:d5:6d:e2:6b:b8:97:01: a0:dd:14:00:ff:50:33:68:e4:63:15:0d:9f:99:3d:7d:dc:97: c4:9f:6b:71:56:cd:45:8d:2d:d0:00:dd:12:a4:95:ca:48:76: e1:7f:cb:f3:ed:b6:1d:38:11:04:e9:0c:74:d1:8d:ea:b9:8d: 0e:5c:ab:09:fc:46:38:a3:3a:4c:f7:29:4f:6e:6c:05:9e:5a: 70:bb:79:46:18:0d:fc:53:30:31:8d:8a:f6:48:a1:2a:2a:5f: ae:2b:b2:ed:0d:9d:f1:51:2f:f2:07:84:55:0b:6f:67:98:bc: f8:d4:ef:99:0c:95:69:e7:46:87:4d:49:f8:cf:15:03:fa:a7: 7d:33:bc:57:f5:fe:21:4c:28:7f:cc:d5:7b:b9:c3:d2:70:4e: 1c:cb:49:3a:04:db:7b:8d:0d:b4:b8:5e:22:6e:7a:6f:b7:bb: 2b:ef:e5:f4:24:c8:7a:06:d3:9b:b1:d6:ba:1d:e1:77:b8:bf: 21:09:52:21:c3:b8:50:f0:0f:7c:be:21:0a:4a:6f:43:94:cc: 33:40:44:5f:74:ea:df:ff:cc:71:58:0d:db:84:8f:de:94:11: 15:f9:fa:24:35:06:08:47:72:3f:e7:1f:6d:54:b9:c6:49:a7: 21:a0:20:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFD4tYs3AhrKnJrillas+MSwEoFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTdaFw0yNTA4MjgwMzQxMTdaMDMxMTAvBgNV BAMTKDJBQUFBQjdDN0RFNkI5MEZERDA3NEI3OUM3NjI0OENCODJCMzE1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYhE6FXZxAvgUfFzaqY4nJbpO6 RF7mfSwUheTA1oakbP35uGNqcYyLLMGBk0XdctCIkbkhypHfgSuD4auhdBvBASxM Hnbb5JF9iFoii5Ux3u68UvDVw1p9Wj9Y0h6Tojox6QDJfZsuex72qJ+1UQFGFecp FWZqMFC/ffx5ueronrFJGZJ2z3HhPyXV48sl8l11g9iTGgiYfMz9JO3xgQxNI+Vm 2ddGIjACXNdVxsDh5RMQfJkmGfBZpuCzMPVt12RfuK3QXICyumS+gNyZciAlBs0+ bKmmPx0k81B08OTsgPSYImkwIPw9IMFoGoDvAnj8JOK4+kAJmQnCa7mEZisHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqqrfH3muQ/dB0t5x2JIy4KzFb8wHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjAyMjI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg RHAwDQYJKoZIhvcNAQELBQADggEBACuuFQY29RR7acsf1W3ia7iXAaDdFAD/UDNo 5GMVDZ+ZPX3cl8Sfa3FWzUWNLdAA3RKklcpIduF/y/Ptth04EQTpDHTRjeq5jQ5c qwn8RjijOkz3KU9ubAWeWnC7eUYYDfxTMDGNivZIoSoqX64rsu0NnfFRL/IHhFUL b2eYvPjU75kMlWnnRodNSfjPFQP6p30zvFf1/iFMKH/M1Xu5w9JwThzLSToE23uN DbS4XiJuem+3uyvv5fQkyHoG05ux1rod4Xe4vyEJUiHDuFDwD3y+IQpKb0OUzDNA RF906t//zHFYDduEj96UERX5+iQ1BghHcj/nH21UucZJpyGgIAE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org