$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS207947.roa File: AS207947.roa (raw, json) Hash identifier: tnrCpcIqpah/flT3FTETInkCTVySZMYBPBXFAARlw+M= Subject key identifier: A8:57:B7:E5:B2:22:9C:1C:47:FB:6F:8C:A1:0C:EF:1F:04:88:45:C1 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 2AB58F5192AEDBACE4A009383BC12D947490EC8F Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS207947.roa Signing time: Tue 12 Nov 2024 20:58:58 +0000 ROA not before: Tue 12 Nov 2024 20:53:58 +0000 ROA not after: Tue 11 Nov 2025 20:58:58 +0000 asID: 207947 IP address blocks: 2a0a:6044:6900::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b5:8f:51:92:ae:db:ac:e4:a0:09:38:3b:c1:2d:94:74:90:ec:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Nov 12 20:53:58 2024 GMT Not After : Nov 11 20:58:58 2025 GMT Subject: CN=A857B7E5B2229C1C47FB6F8CA10CEF1F048845C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:7b:18:fa:22:48:af:0e:0e:b4:57:74:b1: 57:ca:29:a9:b7:8a:86:5e:89:f2:2c:dd:b6:2d:06: 0b:1f:32:fd:eb:1c:04:43:eb:e5:57:fa:dc:b8:f3: c9:38:bc:29:e6:18:bb:2e:cc:8a:02:ac:f8:6a:8c: fc:b7:70:b8:7c:9b:8a:09:7c:1b:33:5a:59:d6:a1: c8:19:95:5e:0b:bf:39:1e:63:35:53:0b:a3:ad:b7: 4c:47:6f:29:ae:f0:78:e2:ce:75:cf:d5:8d:80:4c: c1:f1:87:3f:5f:7a:a5:7d:3f:e8:74:dc:2b:cb:bb: 46:c7:cb:ab:dc:ba:5c:49:89:71:fc:82:62:a0:0c: 50:b3:e8:79:e6:98:23:63:20:62:99:38:84:4f:6e: 7a:20:f4:8c:16:57:2d:07:41:7c:d1:66:17:ae:d5: c2:39:17:e9:c3:80:de:8e:22:97:00:8a:4e:54:fb: 0f:98:fc:ec:4c:8d:33:6a:33:f1:26:ea:89:2f:2c: 7e:5a:f4:13:59:b7:c3:c8:24:b8:e4:a2:78:6c:fb: db:c9:e0:ca:35:47:d7:49:2f:25:23:51:31:6e:8c: a1:85:e7:0d:04:7b:16:1b:57:0b:75:9b:eb:29:85: 2c:02:9c:d4:8e:f6:92:8a:00:3b:66:45:b5:d2:f4: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:57:B7:E5:B2:22:9C:1C:47:FB:6F:8C:A1:0C:EF:1F:04:88:45:C1 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS207947.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6900::/40 Signature Algorithm: sha256WithRSAEncryption 52:fd:72:a6:bf:f5:0a:42:f7:0e:c8:3f:28:e1:68:95:c7:d7: f3:3a:2a:cd:ce:78:46:ee:2f:a1:2a:7b:6a:1c:f7:cc:6b:9d: 45:23:04:51:ee:92:33:95:ae:4d:06:29:80:7b:1f:2e:2f:70: d9:31:db:63:34:df:cb:28:63:f6:56:e8:4e:32:0e:94:33:1a: c5:e3:70:41:59:c4:de:6e:25:f8:3b:cc:5e:ea:91:cb:44:a7: 4b:13:ab:6f:83:e4:19:46:cf:29:ae:b7:f1:9c:6e:88:10:92: 66:51:e7:cb:31:a5:b3:f9:b4:05:67:93:ae:dc:77:37:10:ba: ac:e7:76:9c:b6:43:b5:09:4d:65:ec:f3:f6:26:bd:f3:6f:40: 5d:10:90:fe:d2:0d:f7:a9:99:36:57:a7:d5:90:a4:a2:41:29: 0d:6a:1f:f7:6b:3a:89:68:ac:87:61:3c:f9:16:13:e6:88:0d: 87:e4:7d:a4:9b:a1:4e:05:a9:79:66:5b:3f:6c:ee:08:27:90: fe:7d:8d:03:73:c6:d6:81:7f:11:20:7f:ca:6a:d2:d2:2d:66: e8:95:29:29:65:03:bb:f0:14:95:15:cb:d3:06:58:f4:ce:ab: 10:86:c6:e0:a1:c6:ef:97:61:ad:8d:f5:96:81:2d:3a:2c:ce: 72:6a:66:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrWPUZKu26zkoAk4O8EtlHSQ7I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDExMTIyMDUzNThaFw0yNTExMTEyMDU4NThaMDMxMTAvBgNV BAMTKEE4NTdCN0U1QjIyMjlDMUM0N0ZCNkY4Q0ExMENFRjFGMDQ4ODQ1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfM3sY+iJIrw4OtFd0sVfKKam3 ioZeifIs3bYtBgsfMv3rHARD6+VX+ty488k4vCnmGLsuzIoCrPhqjPy3cLh8m4oJ fBszWlnWocgZlV4LvzkeYzVTC6Ott0xHbymu8HjiznXP1Y2ATMHxhz9feqV9P+h0 3CvLu0bHy6vculxJiXH8gmKgDFCz6HnmmCNjIGKZOIRPbnog9IwWVy0HQXzRZheu 1cI5F+nDgN6OIpcAik5U+w+Y/OxMjTNqM/Em6okvLH5a9BNZt8PIJLjkonhs+9vJ 4Mo1R9dJLyUjUTFujKGF5w0EexYbVwt1m+sphSwCnNSO9pKKADtmRbXS9FkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFe35bIinBxH+2+MoQzvHwSIRcEwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjA3OTQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg RGkwDQYJKoZIhvcNAQELBQADggEBAFL9cqa/9QpC9w7IPyjhaJXH1/M6Ks3OeEbu L6Eqe2oc98xrnUUjBFHukjOVrk0GKYB7Hy4vcNkx22M038soY/ZW6E4yDpQzGsXj cEFZxN5uJfg7zF7qkctEp0sTq2+D5BlGzymut/GcbogQkmZR58sxpbP5tAVnk67c dzcQuqzndpy2Q7UJTWXs8/YmvfNvQF0QkP7SDfepmTZXp9WQpKJBKQ1qH/drOolo rIdhPPkWE+aIDYfkfaSboU4FqXlmWz9s7ggnkP59jQNzxtaBfxEgf8pq0tItZuiV KSllA7vwFJUVy9MGWPTOqxCGxuChxu+XYa2N9ZaBLTosznJqZjM= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org