$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215363.roa File: AS215363.roa (raw, json) Hash identifier: +kCCdf095IndmWmsV2+catNHXJebSEv0XIWQN2pDTYs= Subject key identifier: 4A:38:07:F6:F2:A4:0F:70:EE:97:55:D4:D1:4A:45:C4:13:8A:54:70 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 6BF2849127FB7227E24D031B4C5111EB7E93672D Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215363.roa Signing time: Thu 29 Aug 2024 03:41:16 +0000 ROA not before: Thu 29 Aug 2024 03:36:16 +0000 ROA not after: Thu 28 Aug 2025 03:41:16 +0000 asID: 215363 IP address blocks: 2a0a:6044:aa08::/48 maxlen: 48 2a0a:6044:aa09::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f2:84:91:27:fb:72:27:e2:4d:03:1b:4c:51:11:eb:7e:93:67:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:16 2024 GMT Not After : Aug 28 03:41:16 2025 GMT Subject: CN=4A3807F6F2A40F70EE9755D4D14A45C4138A5470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:59:ed:b5:0e:82:b3:a4:09:73:4f:0d:38:0c: 61:50:5c:56:a9:cc:49:1e:bd:c5:95:b5:fb:47:0d: 1e:e9:2c:44:40:11:fc:d8:c9:d2:d9:5f:c2:cf:95: 75:18:79:22:c2:bf:f2:2b:10:08:4a:d2:6e:4a:be: 1d:e2:6f:36:66:8d:cd:92:80:d7:d3:7f:aa:24:95: 0a:da:00:a7:f9:0c:83:a8:5e:54:b8:13:18:76:ce: 97:14:9e:77:de:cc:9e:21:6f:03:d9:41:1d:f3:be: 25:3a:b3:f2:a6:e0:f9:a7:7d:0e:1f:ae:91:52:31: 96:15:f3:8d:b9:39:86:61:c7:b3:d4:ff:2c:fb:e0: ed:39:a8:17:f4:c0:93:e1:23:6c:b3:72:8e:16:95: f4:60:8e:11:7c:32:46:b8:15:a5:80:fa:8f:f5:2e: f8:40:c5:d3:51:03:17:10:67:8d:95:71:bf:c6:2d: b9:e4:13:fe:1e:09:40:9a:14:6d:d5:ae:22:33:44: 77:50:5f:68:b4:76:af:6c:89:15:99:e4:a0:cd:dc: 13:e2:c5:17:d2:47:ef:d6:f2:28:23:64:94:d8:ab: 51:f4:68:a6:60:c7:2f:a0:9f:2a:8a:13:e2:fa:4e: 60:37:c1:df:a1:75:30:e8:f0:22:ed:90:41:50:1d: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:07:F6:F2:A4:0F:70:EE:97:55:D4:D1:4A:45:C4:13:8A:54:70 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215363.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:aa08::/47 Signature Algorithm: sha256WithRSAEncryption 6c:63:b9:4b:f0:34:39:80:ac:77:8b:da:40:4e:7d:7b:b7:27: d3:c5:bf:bb:ec:24:46:17:f1:ad:bc:8a:e9:97:4d:08:2e:ea: 33:65:8c:d3:81:cf:d4:30:90:58:59:62:cc:a7:ba:b0:d5:fe: 40:4b:1b:ab:f3:bc:dc:03:a0:be:0d:e6:6b:c0:cb:f5:84:e1: 98:50:93:7f:2c:bd:bb:a0:ce:81:ae:a8:b4:32:ea:84:36:eb: 94:e1:d5:3c:ab:21:b6:3f:fb:24:d1:8e:bf:26:78:bc:8d:14: c4:13:be:47:e7:da:f4:7f:68:d3:68:cc:e4:14:a1:75:3c:07: 91:14:91:58:7c:34:b0:d6:48:b9:1e:27:a6:b0:58:f6:2a:0e: 89:48:81:2a:ef:05:2b:2a:6e:34:60:c6:30:3f:f6:12:6d:e7: 21:6d:74:7c:d0:77:e3:8c:12:fa:4e:4a:5f:95:d2:26:67:41: 24:c2:6f:49:a5:e1:60:8f:6a:c6:1a:89:d9:b0:01:d3:bc:a2: 5a:ae:20:32:70:a1:9d:86:29:68:3d:1e:8d:ec:a8:be:c2:f7: ae:4b:4f:3d:9c:cd:0c:e5:ea:26:43:ca:54:7c:7f:ca:0b:b7: 53:d5:c4:8b:65:7c:c2:2d:c2:8d:68:a6:7c:7c:f7:53:5f:ed: bd:54:4e:dc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUa/KEkSf7cifiTQMbTFER636TZy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTZaFw0yNTA4MjgwMzQxMTZaMDMxMTAvBgNV BAMTKDRBMzgwN0Y2RjJBNDBGNzBFRTk3NTVENEQxNEE0NUM0MTM4QTU0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaWe21DoKzpAlzTw04DGFQXFap zEkevcWVtftHDR7pLERAEfzYydLZX8LPlXUYeSLCv/IrEAhK0m5Kvh3ibzZmjc2S gNfTf6oklQraAKf5DIOoXlS4Exh2zpcUnnfezJ4hbwPZQR3zviU6s/Km4PmnfQ4f rpFSMZYV8425OYZhx7PU/yz74O05qBf0wJPhI2yzco4WlfRgjhF8Mka4FaWA+o/1 LvhAxdNRAxcQZ42Vcb/GLbnkE/4eCUCaFG3VriIzRHdQX2i0dq9siRWZ5KDN3BPi xRfSR+/W8igjZJTYq1H0aKZgxy+gnyqKE+L6TmA3wd+hdTDo8CLtkEFQHbOvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSjgH9vKkD3Dul1XU0UpFxBOKVHAwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE1MzYzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgpg RKoIMA0GCSqGSIb3DQEBCwUAA4IBAQBsY7lL8DQ5gKx3i9pATn17tyfTxb+77CRG F/GtvIrpl00ILuozZYzTgc/UMJBYWWLMp7qw1f5ASxur87zcA6C+DeZrwMv1hOGY UJN/LL27oM6Brqi0MuqENuuU4dU8qyG2P/sk0Y6/Jni8jRTEE75H59r0f2jTaMzk FKF1PAeRFJFYfDSw1ki5HiemsFj2Kg6JSIEq7wUrKm40YMYwP/YSbechbXR80Hfj jBL6TkpfldImZ0Ekwm9JpeFgj2rGGonZsAHTvKJariAycKGdhiloPR6N7Ki+wveu S089nM0M5eomQ8pUfH/KC7dT1cSLZXzCLcKNaKZ8fPdTX+29VE7c -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org