$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214753.roa File: AS214753.roa (raw, json) Hash identifier: oADF6QiHvUisDKAHsnjWOcxGcTpKgQqqt4PbmEEuAg0= Subject key identifier: 0A:5A:3F:D3:8A:B7:33:96:FB:28:08:D2:49:AA:72:D6:F2:CC:E8:25 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 3690AB699182E22BD26EE2CE6C5298D7A82ADC62 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214753.roa Signing time: Thu 29 Aug 2024 03:41:16 +0000 ROA not before: Thu 29 Aug 2024 03:36:16 +0000 ROA not after: Thu 28 Aug 2025 03:41:16 +0000 asID: 214753 IP address blocks: 2a0a:6044:aa07::/48 maxlen: 48 2a0a:6044:acb0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:90:ab:69:91:82:e2:2b:d2:6e:e2:ce:6c:52:98:d7:a8:2a:dc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:16 2024 GMT Not After : Aug 28 03:41:16 2025 GMT Subject: CN=0A5A3FD38AB73396FB2808D249AA72D6F2CCE825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:1e:2a:11:93:28:f2:69:40:e9:a4:3d:52: 16:f8:7e:9c:57:34:26:69:11:18:41:bb:c6:35:20: 80:9f:07:ea:ba:f6:7a:d5:fe:d3:13:2b:11:c3:a9: 3a:cb:1c:d6:1f:3b:f8:bb:4d:c6:a3:aa:4a:c0:0d: 22:96:6c:f5:c6:af:dc:7c:95:93:a1:64:31:02:9c: d9:18:bd:c0:de:2f:ac:bd:e0:8f:29:07:d5:a2:9f: 87:b5:f9:0f:ea:ff:a7:37:57:60:4f:65:ca:f7:cd: 61:1f:66:23:10:be:06:85:7c:a3:d4:f6:4f:23:24: 4f:c7:04:63:66:fd:05:d0:29:c9:d4:dc:5b:c1:64: 8f:fa:55:d3:1d:86:c3:33:3d:2f:30:2a:40:1a:73: ae:f6:de:77:54:32:05:36:d4:83:52:73:8c:29:43: f1:80:8f:0f:a7:02:a3:26:36:ad:7a:9f:00:e1:2a: b3:9e:da:97:2f:ef:80:f7:65:29:ea:74:62:d1:18: 28:dd:1b:52:8a:36:6a:c6:7e:31:78:56:09:f3:a6: 29:ad:c0:cc:c2:6a:28:4a:49:92:66:82:5c:e0:e6: 8a:9b:3f:ef:52:88:36:ba:3a:88:17:05:a1:8c:4a: 86:8b:de:01:a5:76:7b:bf:30:57:d4:6a:d7:7e:4a: ed:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:3F:D3:8A:B7:33:96:FB:28:08:D2:49:AA:72:D6:F2:CC:E8:25 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:aa07::/48 2a0a:6044:acb0::/44 Signature Algorithm: sha256WithRSAEncryption 5c:b7:78:ea:f1:ae:5b:ea:f4:0e:14:72:51:dd:62:da:e8:77: 5b:b9:0b:81:e5:e6:56:0c:6f:15:0a:4f:82:75:95:88:7f:67: 79:ee:85:56:85:2b:b0:d8:1f:1c:25:53:e6:0f:ab:c7:b9:76: 2a:12:91:43:63:45:ae:82:1a:dd:9b:91:12:27:45:a9:11:fb: 7e:cc:ee:f3:11:25:cf:ec:1d:94:1f:6c:69:2f:75:34:a4:c0: d7:a5:f8:be:84:e3:9f:9d:c1:b0:5e:9f:0b:69:51:3e:95:53: c9:58:54:7c:76:be:aa:86:1f:24:32:94:11:06:eb:96:86:53: 00:a7:25:ca:76:94:68:21:f7:39:ce:11:04:2e:c8:f9:ca:53: fd:07:55:06:1a:3d:ac:17:bd:9a:c2:5e:cc:28:ef:92:09:b3: f8:d6:d0:96:48:8e:f9:d6:61:1a:6b:72:37:67:11:26:33:5c: 25:b2:3e:e8:7e:fd:f5:bd:24:7b:e1:ea:6c:bd:f9:39:01:d1: 25:93:c6:35:aa:1d:10:4a:90:02:40:1d:eb:90:d7:cc:39:a6: b3:d5:1f:6b:5e:f3:60:11:3c:13:21:24:f3:b6:a3:72:17:67: 8c:09:98:35:78:94:25:b1:6d:7f:3e:a5:d0:fd:f5:b9:2e:0b: e2:4d:8f:c3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUNpCraZGC4ivSbuLObFKY16gq3GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTZaFw0yNTA4MjgwMzQxMTZaMDMxMTAvBgNV BAMTKDBBNUEzRkQzOEFCNzMzOTZGQjI4MDhEMjQ5QUE3MkQ2RjJDQ0U4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rx4qEZMo8mlA6aQ9Uhb4fpxX NCZpERhBu8Y1IICfB+q69nrV/tMTKxHDqTrLHNYfO/i7TcajqkrADSKWbPXGr9x8 lZOhZDECnNkYvcDeL6y94I8pB9Win4e1+Q/q/6c3V2BPZcr3zWEfZiMQvgaFfKPU 9k8jJE/HBGNm/QXQKcnU3FvBZI/6VdMdhsMzPS8wKkAac6723ndUMgU21INSc4wp Q/GAjw+nAqMmNq16nwDhKrOe2pcv74D3ZSnqdGLRGCjdG1KKNmrGfjF4Vgnzpimt wMzCaihKSZJmglzg5oqbP+9SiDa6OogXBaGMSoaL3gGldnu/MFfUatd+Su3rAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUClo/04q3M5b7KAjSSapy1vLM6CUwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0NzUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgpg RKoHAwcEKgpgRKywMA0GCSqGSIb3DQEBCwUAA4IBAQBct3jq8a5b6vQOFHJR3WLa 6HdbuQuB5eZWDG8VCk+CdZWIf2d57oVWhSuw2B8cJVPmD6vHuXYqEpFDY0Wughrd m5ESJ0WpEft+zO7zESXP7B2UH2xpL3U0pMDXpfi+hOOfncGwXp8LaVE+lVPJWFR8 dr6qhh8kMpQRBuuWhlMApyXKdpRoIfc5zhEELsj5ylP9B1UGGj2sF72awl7MKO+S CbP41tCWSI751mEaa3I3ZxEmM1wlsj7ofv31vSR74epsvfk5AdElk8Y1qh0QSpAC QB3rkNfMOaaz1R9rXvNgETwTISTztqNyF2eMCZg1eJQlsW1/PqXQ/fW5LgviTY/D -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org