$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214501.roa File: AS214501.roa (raw, json) Hash identifier: IYskOqLsq0RTaPMflExsXZFyYN8yx0vx9mj1IiY40ss= Subject key identifier: A7:FC:A0:D9:2C:2A:C6:0C:6C:30:9D:47:54:62:E5:82:0C:FB:4F:D2 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 39AC693C9D6DD8C4E0ADA0F5E0FCDD63E12ECA5A Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214501.roa Signing time: Wed 13 Nov 2024 12:42:31 +0000 ROA not before: Wed 13 Nov 2024 12:37:31 +0000 ROA not after: Wed 12 Nov 2025 12:42:31 +0000 asID: 214501 IP address blocks: 2a0a:6044:6a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ac:69:3c:9d:6d:d8:c4:e0:ad:a0:f5:e0:fc:dd:63:e1:2e:ca:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Nov 13 12:37:31 2024 GMT Not After : Nov 12 12:42:31 2025 GMT Subject: CN=A7FCA0D92C2AC60C6C309D475462E5820CFB4FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c7:e0:c6:01:49:94:84:85:64:49:66:ba:9e: 70:5b:54:05:a0:b0:7d:84:31:69:62:db:a0:f1:dc: 7f:8c:93:b6:67:26:1f:a5:30:3b:67:f0:90:26:3a: e1:e4:27:66:0b:46:c9:54:43:15:38:5e:61:93:e7: d0:74:d0:4e:f4:85:a9:ce:18:54:06:ad:b2:23:10: 5f:1b:b4:81:a8:86:4f:d3:6c:85:1d:ec:09:75:54: d4:44:84:ce:70:f3:c6:57:3a:6a:3b:14:82:ed:8a: e3:37:ca:65:62:0c:57:c6:86:d7:0f:59:8c:da:e6: e0:92:98:f0:46:03:c7:22:df:6c:32:21:cf:45:f1: 04:3d:74:b9:c7:93:6c:75:41:49:2d:9f:df:19:19: 70:31:18:1a:3c:8d:da:10:4b:df:f5:25:88:96:34: 7a:bf:4f:95:2c:61:0f:72:86:cf:8f:f3:3d:70:b8: 38:25:d1:db:dd:93:73:1e:b4:91:e2:bb:9d:4a:5b: 46:fc:ce:77:e5:d5:fd:4d:4f:45:23:d9:d4:cf:b2: 9b:12:06:88:a8:69:85:38:f4:e1:4e:2a:48:88:f3: d8:4b:cc:e2:a8:10:ec:e9:a6:d3:5b:12:90:64:23: 26:13:5d:c5:30:5a:43:e4:2f:3b:12:ce:29:30:37: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:A0:D9:2C:2A:C6:0C:6C:30:9D:47:54:62:E5:82:0C:FB:4F:D2 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6a00::/40 Signature Algorithm: sha256WithRSAEncryption 72:80:2d:f3:13:79:b4:c9:1d:a2:79:ad:fb:dc:ef:a6:62:38: e0:81:95:12:be:73:70:87:19:73:45:8b:b9:31:2a:6b:b0:33: 6b:33:43:5e:50:81:46:a1:6f:8d:38:ea:98:75:0a:b8:27:02: 21:57:6e:3f:c6:2e:58:60:3e:6c:21:af:8b:b1:63:55:9b:e9: 59:cf:e7:70:44:0d:03:f4:3c:a3:e7:05:06:fa:53:5a:0b:3e: 3a:f8:99:15:27:99:39:f0:0a:3f:5d:2e:f2:ad:b1:07:c4:75: 9d:f4:a6:6e:9a:87:d2:5c:ef:23:f4:1a:01:55:c0:28:47:cc: 54:ff:83:39:f7:81:80:c4:38:f2:f8:e0:0f:a4:07:05:ef:fe: 74:e6:7c:11:03:be:f9:20:d0:1e:ae:bd:c5:7c:4b:e6:d3:0f: 7d:69:e2:5e:ab:06:dc:05:18:c9:fd:2f:ff:36:6c:86:5f:b9: 7a:28:89:c9:69:f9:20:b0:8f:e8:3a:0f:93:e4:c6:ff:0a:bd: 67:d9:67:61:8a:22:de:08:18:e1:b5:c4:f8:1a:30:9b:d8:89: b5:9c:07:e3:90:84:fe:66:79:ac:9a:4a:80:39:bd:71:da:f6: 32:e3:d2:a3:bc:5e:c1:3c:e0:5d:21:48:5c:4b:7b:9e:bd:9d: 73:d4:1a:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOaxpPJ1t2MTgraD14PzdY+EuylowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDExMTMxMjM3MzFaFw0yNTExMTIxMjQyMzFaMDMxMTAvBgNV BAMTKEE3RkNBMEQ5MkMyQUM2MEM2QzMwOUQ0NzU0NjJFNTgyMENGQjRGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpx+DGAUmUhIVkSWa6nnBbVAWg sH2EMWli26Dx3H+Mk7ZnJh+lMDtn8JAmOuHkJ2YLRslUQxU4XmGT59B00E70hanO GFQGrbIjEF8btIGohk/TbIUd7Al1VNREhM5w88ZXOmo7FILtiuM3ymViDFfGhtcP WYza5uCSmPBGA8ci32wyIc9F8QQ9dLnHk2x1QUktn98ZGXAxGBo8jdoQS9/1JYiW NHq/T5UsYQ9yhs+P8z1wuDgl0dvdk3MetJHiu51KW0b8znfl1f1NT0Uj2dTPspsS BoioaYU49OFOKkiI89hLzOKoEOzpptNbEpBkIyYTXcUwWkPkLzsSzikwN2PJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp/yg2SwqxgxsMJ1HVGLlggz7T9IwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NTAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpg RGowDQYJKoZIhvcNAQELBQADggEBAHKALfMTebTJHaJ5rfvc76ZiOOCBlRK+c3CH GXNFi7kxKmuwM2szQ15QgUahb4046ph1CrgnAiFXbj/GLlhgPmwhr4uxY1Wb6VnP 53BEDQP0PKPnBQb6U1oLPjr4mRUnmTnwCj9dLvKtsQfEdZ30pm6ah9Jc7yP0GgFV wChHzFT/gzn3gYDEOPL44A+kBwXv/nTmfBEDvvkg0B6uvcV8S+bTD31p4l6rBtwF GMn9L/82bIZfuXooiclp+SCwj+g6D5Pkxv8KvWfZZ2GKIt4IGOG1xPgaMJvYibWc B+OQhP5meayaSoA5vXHa9jLj0qO8XsE84F0hSFxLe569nXPUGmI= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org