$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214242.roa File: AS214242.roa (raw, json) Hash identifier: EvjeaLaaQVSl6PWqYDlABClCHnfrVitOHlGjNM0mNa8= Subject key identifier: 1E:89:46:B5:6B:78:9B:87:C3:45:D3:75:A7:E7:6B:57:C6:FE:BF:FB Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 4A3EFD5CBF31F49D10E0B521192D6CE0A434685A Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214242.roa Signing time: Mon 16 Sep 2024 12:42:59 +0000 ROA not before: Mon 16 Sep 2024 12:37:59 +0000 ROA not after: Mon 15 Sep 2025 12:42:59 +0000 asID: 214242 IP address blocks: 2a0a:6044:7700::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3e:fd:5c:bf:31:f4:9d:10:e0:b5:21:19:2d:6c:e0:a4:34:68:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Sep 16 12:37:59 2024 GMT Not After : Sep 15 12:42:59 2025 GMT Subject: CN=1E8946B56B789B87C345D375A7E76B57C6FEBFFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:34:8e:c0:4f:38:b2:00:b4:f9:f9:46:94: 7a:f6:1b:46:d6:4b:da:94:41:e0:48:e4:15:b8:83: 02:d2:ec:f4:30:06:b7:c4:95:85:86:53:d2:27:e2: b2:63:21:91:3b:0b:0c:7e:70:a4:81:33:55:df:84: 12:28:c0:5d:ba:7a:03:06:15:b1:61:b2:7e:a1:35: b4:1f:86:e4:47:89:0f:cc:f5:87:91:ed:7d:2e:78: c7:0a:54:17:ae:c1:52:64:36:9d:f5:83:e6:d9:79: 9b:39:dd:7e:12:85:e2:36:03:66:b7:7a:69:02:41: ce:6a:be:8e:80:eb:a9:a7:2f:05:6f:b5:fc:56:7d: 9b:25:40:e7:ca:8a:f7:eb:41:22:2a:fe:15:48:7d: 2e:ee:61:da:26:5d:82:7b:52:35:d9:83:46:51:d1: bf:91:0b:68:27:5d:84:8e:e8:41:6a:bf:72:f0:75: 2e:27:cc:a0:3b:6e:eb:8b:b4:09:11:71:7d:fc:f8: 5f:58:60:f7:d1:33:0a:f7:c0:e7:6a:9e:2a:d7:71: e8:34:4d:d5:a5:2e:1a:6c:d9:3d:58:37:46:32:64: d3:60:86:3b:57:41:f9:76:f1:38:05:cd:b9:bc:75: 6b:c0:34:76:2f:25:d6:cd:70:7b:15:59:b1:b0:19: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:89:46:B5:6B:78:9B:87:C3:45:D3:75:A7:E7:6B:57:C6:FE:BF:FB X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7700::/40 Signature Algorithm: sha256WithRSAEncryption 85:d5:ec:04:e9:54:73:d5:1d:3a:aa:df:d1:26:5f:1e:39:5b: f1:11:4c:37:af:70:05:87:6f:8c:00:ec:b4:c4:a2:62:1c:a1: bd:44:0e:9a:38:e9:9a:67:82:d5:b6:ab:4c:d6:c4:af:38:d7: 42:80:56:43:41:14:ad:9e:91:fe:11:68:e5:2e:19:b0:c0:de: 97:d9:ea:2c:e5:7e:b5:e0:a5:b8:06:80:69:81:d8:73:75:c9: 24:55:77:08:88:23:7e:6e:6e:c5:2b:0b:b4:cd:8d:5b:6b:c3: 79:6a:24:64:dc:27:0c:fa:44:ae:d6:c1:e1:73:84:bd:12:7e: 06:70:ca:5d:4c:29:46:ba:28:f3:f5:d3:d0:1f:97:11:8d:da: 1f:3b:3c:26:55:b3:1c:26:1d:b4:41:d2:3e:87:07:58:65:cf: 7d:05:2e:33:46:05:a1:2d:be:e8:15:51:2b:1f:91:ed:7a:35: 0c:0f:8b:ff:d2:c9:0f:b8:60:d6:dd:5d:89:dc:50:2e:bf:20: 8f:62:11:ae:99:9c:0a:34:34:23:d9:ce:9b:ba:6b:20:1a:98: 6a:eb:4a:48:39:da:ef:86:6b:7f:82:25:38:77:fa:d4:68:a1: bd:16:1d:47:63:c9:f1:f9:2f:11:5a:58:f0:e2:cd:e1:f1:56: 0e:33:a5:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSj79XL8x9J0Q4LUhGS1s4KQ0aFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA5MTYxMjM3NTlaFw0yNTA5MTUxMjQyNTlaMDMxMTAvBgNV BAMTKDFFODk0NkI1NkI3ODlCODdDMzQ1RDM3NUE3RTc2QjU3QzZGRUJGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPzSOwE84sgC0+flGlHr2G0bW S9qUQeBI5BW4gwLS7PQwBrfElYWGU9In4rJjIZE7Cwx+cKSBM1XfhBIowF26egMG FbFhsn6hNbQfhuRHiQ/M9YeR7X0ueMcKVBeuwVJkNp31g+bZeZs53X4SheI2A2a3 emkCQc5qvo6A66mnLwVvtfxWfZslQOfKivfrQSIq/hVIfS7uYdomXYJ7UjXZg0ZR 0b+RC2gnXYSO6EFqv3LwdS4nzKA7buuLtAkRcX38+F9YYPfRMwr3wOdqnirXceg0 TdWlLhps2T1YN0YyZNNghjtXQfl28TgFzbm8dWvANHYvJdbNcHsVWbGwGagvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHolGtWt4m4fDRdN1p+drV8b+v/swHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0MjQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg RHcwDQYJKoZIhvcNAQELBQADggEBAIXV7ATpVHPVHTqq39EmXx45W/ERTDevcAWH b4wA7LTEomIcob1EDpo46ZpngtW2q0zWxK8410KAVkNBFK2ekf4RaOUuGbDA3pfZ 6izlfrXgpbgGgGmB2HN1ySRVdwiII35ubsUrC7TNjVtrw3lqJGTcJwz6RK7WweFz hL0SfgZwyl1MKUa6KPP109AflxGN2h87PCZVsxwmHbRB0j6HB1hlz30FLjNGBaEt vugVUSsfke16NQwPi//SyQ+4YNbdXYncUC6/II9iEa6ZnAo0NCPZzpu6ayAamGrr Skg52u+Ga3+CJTh3+tRoob0WHUdjyfH5LxFaWPDizeHxVg4zpTE= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org