$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214543.roa File: AS214543.roa (raw, json) Hash identifier: 9v3A8/Df6IG9gcsMVEc5+hJ/4kypPwbYc0FjeJx4FIM= Subject key identifier: D9:4C:9B:28:CE:BD:12:1F:08:8A:80:F6:6B:40:E9:93:0C:C8:5E:E7 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 64DCBD84611DC481C3D027059B375CEFA68543A9 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214543.roa Signing time: Thu 29 Aug 2024 03:41:16 +0000 ROA not before: Thu 29 Aug 2024 03:36:16 +0000 ROA not after: Thu 28 Aug 2025 03:41:16 +0000 asID: 214543 IP address blocks: 2a0a:6044:bd00::/40 maxlen: 40 2a0a:6044:be00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:dc:bd:84:61:1d:c4:81:c3:d0:27:05:9b:37:5c:ef:a6:85:43:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:16 2024 GMT Not After : Aug 28 03:41:16 2025 GMT Subject: CN=D94C9B28CEBD121F088A80F66B40E9930CC85EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:c4:2b:2c:aa:36:58:15:00:98:17:88:57: 7a:29:e8:cb:f3:0f:f6:b1:87:3b:73:54:a7:68:6c: 57:5e:d6:75:05:95:c5:85:c7:dd:9b:25:13:0c:85: cf:01:dc:c6:19:40:53:aa:13:ec:4a:e0:8c:0b:61: 88:5b:36:bf:22:73:1a:f4:37:b8:dd:71:93:b1:24: a0:aa:f0:02:ea:66:36:90:cb:86:fb:7b:ce:ea:18: 10:95:5a:c1:ff:94:b9:3b:d3:b5:79:64:92:cc:92: 27:79:43:de:10:0c:8f:b4:5f:84:a5:15:9e:4e:af: 37:5e:0c:34:af:c2:50:9a:8d:90:c0:6f:a4:70:d2: 0d:44:ee:83:45:cd:b7:38:12:c2:ae:fc:74:28:e7: 11:b1:e8:18:31:71:7d:cc:e7:e3:dc:92:77:87:b9: f4:e4:a1:3a:d5:4e:63:a0:69:05:d6:88:32:9a:48: eb:48:98:96:97:85:8b:ee:75:c1:3b:bc:14:5f:cc: fc:a0:41:5c:f1:84:fe:e7:b8:8a:49:87:10:fe:40: ce:03:57:a2:b9:0c:f2:5f:51:84:9b:cf:67:cb:df: 5c:41:48:f6:03:ef:99:dc:83:aa:c1:ba:fc:14:cb: 48:99:63:2e:f1:fb:8e:c4:b2:d7:72:d8:2b:5c:bd: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4C:9B:28:CE:BD:12:1F:08:8A:80:F6:6B:40:E9:93:0C:C8:5E:E7 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214543.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:bd00::-2a0a:6044:beff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 54:64:83:e8:d4:d8:30:15:c2:7f:1f:ff:07:76:c4:98:12:1a: 38:35:38:92:da:9b:2f:1e:1d:7b:ff:84:de:86:62:0b:7f:da: 8b:f1:ce:2f:d2:e1:d4:ec:d9:af:c8:61:b3:b1:0f:a8:5e:30: 36:d8:5c:1b:f7:4f:53:a1:c2:d0:5f:48:d9:7d:69:e3:04:e4: 5f:b5:a3:a9:5e:df:1f:97:57:c7:1c:b6:b8:64:97:e2:d0:c7: f5:5d:5f:51:64:a7:0a:23:3e:36:a1:de:d2:46:fe:d7:44:9f: 99:88:dd:a9:59:72:a2:ea:44:23:79:c4:25:0d:1a:47:10:45: 94:c7:d8:d2:9f:84:b6:9c:c3:68:7b:f1:58:8e:80:1d:33:9a: 26:c0:8c:73:35:f2:92:e9:2e:47:5b:b5:f0:72:fc:4b:9c:c2: 57:7e:6b:bc:60:22:78:f1:98:5e:ea:37:7f:24:34:1b:c7:a5: 07:67:ab:eb:d6:27:65:25:ff:56:fd:73:d4:73:ab:b0:cc:9f: c5:1f:52:02:4c:a7:e2:c4:4c:76:f3:4e:a7:37:50:4a:aa:3d: 06:78:0d:86:4e:c2:c6:2e:3d:c5:86:63:a7:16:dd:49:f2:89: bd:1a:d4:89:95:f7:ee:2d:a2:15:cf:f9:1a:01:f2:23:08:46: 21:19:58:64 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUZNy9hGEdxIHD0CcFmzdc76aFQ6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTZaFw0yNTA4MjgwMzQxMTZaMDMxMTAvBgNV BAMTKEQ5NEM5QjI4Q0VCRDEyMUYwODhBODBGNjZCNDBFOTkzMENDODVFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyn8QrLKo2WBUAmBeIV3op6Mvz D/axhztzVKdobFde1nUFlcWFx92bJRMMhc8B3MYZQFOqE+xK4IwLYYhbNr8icxr0 N7jdcZOxJKCq8ALqZjaQy4b7e87qGBCVWsH/lLk707V5ZJLMkid5Q94QDI+0X4Sl FZ5OrzdeDDSvwlCajZDAb6Rw0g1E7oNFzbc4EsKu/HQo5xGx6BgxcX3M5+PckneH ufTkoTrVTmOgaQXWiDKaSOtImJaXhYvudcE7vBRfzPygQVzxhP7nuIpJhxD+QM4D V6K5DPJfUYSbz2fL31xBSPYD75ncg6rBuvwUy0iZYy7x+47Estdy2CtcvZi/AgMB AAGjggJGMIICQjAdBgNVHQ4EFgQU2UybKM69Eh8IioD2a0DpkwzIXucwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NTQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgAq CmBEvQMGACoKYES+MA0GCSqGSIb3DQEBCwUAA4IBAQBUZIPo1NgwFcJ/H/8HdsSY Eho4NTiS2psvHh17/4TehmILf9qL8c4v0uHU7NmvyGGzsQ+oXjA22Fwb909TocLQ X0jZfWnjBORftaOpXt8fl1fHHLa4ZJfi0Mf1XV9RZKcKIz42od7SRv7XRJ+ZiN2p WXKi6kQjecQlDRpHEEWUx9jSn4S2nMNoe/FYjoAdM5omwIxzNfKS6S5HW7XwcvxL nMJXfmu8YCJ48Zhe6jd/JDQbx6UHZ6vr1idlJf9W/XPUc6uwzJ/FH1ICTKfixEx2 806nN1BKqj0GeA2GTsLGLj3FhmOnFt1J8om9GtSJlffuLaIVz/kaAfIjCEYhGVhk -----END CERTIFICATE-----Generated at Thu Sep 19 21:35:24 2024 by rpki-client on console-fra.rpki-client.org