$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214980.roa File: AS214980.roa (raw, json) Hash identifier: j3bmuuBPWbTLgOeefwecP+ENsgWZxeVYwGfxSqarAGY= Subject key identifier: 45:8D:8F:73:EA:3C:3A:78:F0:92:AB:7B:D1:45:6A:3B:A6:0A:14:C0 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 4B917A0AAFCF3CE94EB3E6CA68CCCE190980B1A5 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214980.roa Signing time: Thu 29 Aug 2024 03:41:14 +0000 ROA not before: Thu 29 Aug 2024 03:36:14 +0000 ROA not after: Thu 28 Aug 2025 03:41:14 +0000 asID: 214980 IP address blocks: 2a0a:6044:c100::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:91:7a:0a:af:cf:3c:e9:4e:b3:e6:ca:68:cc:ce:19:09:80:b1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:14 2024 GMT Not After : Aug 28 03:41:14 2025 GMT Subject: CN=458D8F73EA3C3A78F092AB7BD1456A3BA60A14C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:3d:aa:66:38:a3:3d:0d:d1:ad:cb:35:ae: 20:b4:ae:6f:b0:82:1e:fd:eb:57:44:9c:53:bd:fd: 6c:7b:6a:b7:db:84:0e:1c:09:9a:15:f4:e8:8d:cc: 6d:ae:33:b7:b8:95:80:bd:e9:ec:5f:ca:e8:d4:fd: 9c:c8:79:83:93:a8:e3:7c:a5:e7:fc:e6:f4:f7:d3: bc:47:e4:7c:f7:ba:53:bf:5b:c9:6b:f1:72:ae:64: a3:0a:c7:9d:9b:05:bc:41:e7:5e:06:ce:3b:57:ec: 97:6a:60:28:2f:91:4a:8e:39:bb:99:60:20:ed:42: 69:ab:fd:af:88:d6:18:e3:ea:36:aa:54:5e:1c:5d: 3e:34:9a:31:77:e5:55:ec:33:23:fb:c5:07:7c:74: 63:2a:e9:bf:b5:08:4e:ce:bb:ea:82:11:64:22:b4: 16:0b:a8:af:92:e5:45:27:e6:fe:f2:96:17:4d:72: 78:be:84:9b:00:47:9c:8c:d7:73:df:9e:99:e9:dd: 36:1a:1c:ff:2c:f2:97:85:60:d0:36:e7:3b:10:1a: a8:95:39:d7:24:df:75:ff:a7:51:fb:2a:b3:a3:90: 7b:b0:c3:02:9e:ac:32:4b:9f:b6:b4:42:8c:e1:0a: 85:4c:9d:af:95:d5:76:11:79:49:c0:9a:e5:c1:de: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8D:8F:73:EA:3C:3A:78:F0:92:AB:7B:D1:45:6A:3B:A6:0A:14:C0 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214980.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:c100::/44 Signature Algorithm: sha256WithRSAEncryption 4b:13:b8:bc:d5:be:04:08:80:d1:9a:3a:8f:db:27:5f:35:04: 46:a6:7b:f7:13:c4:f4:c9:1a:ad:1c:dc:df:84:83:ba:24:cd: 6e:a5:9f:c3:ca:86:f4:b9:92:67:51:99:3e:9d:d9:4c:c8:3c: 53:1f:06:ff:86:dc:21:af:1b:5a:d1:0e:75:7c:bb:ee:f5:d3: 2f:f8:0f:c2:e2:2d:a8:a9:97:05:e2:51:f7:bf:99:27:65:61: 9f:af:1f:53:bf:49:75:44:3b:fa:05:a1:3c:14:7d:5e:a0:d8: e8:ee:ff:69:2e:25:14:97:08:f0:6a:80:77:25:93:c3:16:85: d1:6b:b5:ce:aa:3a:55:51:f5:ad:e2:69:7e:18:e6:10:94:05: dc:3f:c6:69:4a:ea:e3:40:16:32:bc:69:6e:c2:dd:80:0b:e9: a8:cd:42:36:8b:b9:fc:ea:3b:e8:a7:aa:f9:8a:eb:37:0a:ca: fd:16:02:4d:16:e0:37:49:1b:91:b9:53:25:42:a5:a6:ff:a7: 72:ab:c0:3e:8a:1d:5a:7d:09:f3:6c:47:68:0d:a3:dc:aa:7b: 06:72:1b:c1:5c:b2:88:f8:97:d6:d0:2a:da:8d:c7:00:0e:4c: 79:25:6e:ae:e1:22:74:3c:83:7b:31:11:ed:1e:64:35:db:12: 43:1c:20:08 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUS5F6Cq/PPOlOs+bKaMzOGQmAsaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTRaFw0yNTA4MjgwMzQxMTRaMDMxMTAvBgNV BAMTKDQ1OEQ4RjczRUEzQzNBNzhGMDkyQUI3QkQxNDU2QTNCQTYwQTE0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpD2qZjijPQ3Rrcs1riC0rm+w gh7961dEnFO9/Wx7arfbhA4cCZoV9OiNzG2uM7e4lYC96exfyujU/ZzIeYOTqON8 pef85vT307xH5Hz3ulO/W8lr8XKuZKMKx52bBbxB514GzjtX7JdqYCgvkUqOObuZ YCDtQmmr/a+I1hjj6jaqVF4cXT40mjF35VXsMyP7xQd8dGMq6b+1CE7Ou+qCEWQi tBYLqK+S5UUn5v7ylhdNcni+hJsAR5yM13Pfnpnp3TYaHP8s8peFYNA25zsQGqiV Odck33X/p1H7KrOjkHuwwwKerDJLn7a0QozhCoVMna+V1XYReUnAmuXB3iIlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURY2Pc+o8Onjwkqt70UVqO6YKFMAwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE0OTgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgpg RMEAMA0GCSqGSIb3DQEBCwUAA4IBAQBLE7i81b4ECIDRmjqP2ydfNQRGpnv3E8T0 yRqtHNzfhIO6JM1upZ/Dyob0uZJnUZk+ndlMyDxTHwb/htwhrxta0Q51fLvu9dMv +A/C4i2oqZcF4lH3v5knZWGfrx9Tv0l1RDv6BaE8FH1eoNjo7v9pLiUUlwjwaoB3 JZPDFoXRa7XOqjpVUfWt4ml+GOYQlAXcP8ZpSurjQBYyvGluwt2AC+mozUI2i7n8 6jvop6r5ius3Csr9FgJNFuA3SRuRuVMlQqWm/6dyq8A+ih1afQnzbEdoDaPcqnsG chvBXLKI+JfW0CrajccADkx5JW6u4SJ0PIN7MRHtHmQ12xJDHCAI -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:42 2024 by rpki-client on console-ams.rpki-client.org