$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215522.roa File: AS215522.roa (raw, json) Hash identifier: MVIDcNFJGhl3N+ZStJRq34uCDMT8P3EBmU4pp2z/qYQ= Subject key identifier: C0:8E:4F:FD:B1:4D:B1:36:45:F5:8C:25:99:77:4E:DC:20:F1:E7:7A Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 761B2206B43585A535CA14FE3EF6DA5376CAAAE1 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215522.roa Signing time: Fri 30 Aug 2024 11:45:50 +0000 ROA not before: Fri 30 Aug 2024 11:40:50 +0000 ROA not after: Fri 29 Aug 2025 11:45:50 +0000 asID: 215522 IP address blocks: 2a06:1281:3000::/36 maxlen: 36 2a0a:6044:aa0e::/48 maxlen: 48 2a0a:6044:c120::/44 maxlen: 44 2a0a:6044:c130::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1b:22:06:b4:35:85:a5:35:ca:14:fe:3e:f6:da:53:76:ca:aa:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 30 11:40:50 2024 GMT Not After : Aug 29 11:45:50 2025 GMT Subject: CN=C08E4FFDB14DB13645F58C2599774EDC20F1E77A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:7a:86:5b:bc:05:f2:c2:66:9d:2f:1d:e2: 3e:49:6e:6b:69:69:b9:1c:a0:f3:e3:63:ed:c8:a5: 38:51:de:66:d3:40:ee:5f:2f:fa:7c:14:62:6d:c1: 54:3d:1e:11:5b:99:e9:02:c7:e2:67:3b:95:5c:a1: 6b:a2:2a:38:c7:c4:74:1e:6e:ba:79:07:83:56:e1: f7:86:d7:df:b6:d7:da:7c:19:db:8f:f8:ce:18:5a: 30:92:16:fa:d0:8a:22:de:ae:02:98:7a:2f:93:20: 59:16:29:f7:96:e2:f2:a2:59:ae:8e:02:9b:3d:f1: 40:86:18:ac:0d:99:b3:e7:26:a3:17:58:e5:3e:a7: 5c:26:72:62:a7:17:87:70:8d:78:ac:f7:95:89:e1: 9c:74:ab:db:da:a7:dc:b4:9c:f1:82:98:70:58:12: a3:78:ee:90:0d:09:e0:a2:c1:9a:13:4c:e0:1c:66: ac:21:84:0e:40:bd:a2:75:98:f1:85:29:d1:17:9c: 8b:13:a1:bd:a6:3b:e5:1f:ea:8f:90:02:ca:1c:82: 28:48:1d:f0:46:7c:b9:46:ed:7f:e9:91:d3:f3:c9: 00:9c:9f:87:e9:82:bd:8a:cd:5f:c7:61:85:9a:5e: 0c:ad:fd:50:25:c3:e6:f8:ff:67:48:02:eb:a6:19: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8E:4F:FD:B1:4D:B1:36:45:F5:8C:25:99:77:4E:DC:20:F1:E7:7A X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215522.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:3000::/36 2a0a:6044:aa0e::/48 2a0a:6044:c120::/43 Signature Algorithm: sha256WithRSAEncryption 31:d7:fd:98:b2:e6:1b:67:dc:11:5a:26:f6:af:0f:58:e9:07: bb:9d:ab:5b:c4:d8:d4:d8:9b:3d:fa:b8:99:4c:f0:ae:2d:e6: c8:4c:14:7f:e5:3e:1b:91:ec:b2:e1:00:f1:f9:df:d8:5f:cc: 95:18:f9:32:39:da:c3:66:70:3e:7e:66:1d:54:f6:d5:c0:57: e9:ae:fc:c7:7c:ec:44:84:9a:37:de:8b:d5:b2:d9:0b:e2:8e: 07:fb:01:d5:17:25:db:4c:c6:a1:01:a8:3b:97:27:0d:80:ba: ab:6d:d0:e1:b2:42:59:2a:54:ad:fa:b7:5d:f1:c1:c8:a7:d7: a6:93:90:04:e0:a5:d3:ab:29:07:f1:b3:d0:6c:f9:81:d5:75: 55:0a:64:46:21:c5:2c:70:2d:87:02:37:2c:e1:53:0e:41:c7: 60:7b:3e:af:f6:44:5d:2a:64:51:81:c6:4a:ff:d0:2b:66:b5: 8c:30:48:4d:4e:c0:2a:fb:d4:db:e7:3d:14:43:f4:f0:65:b6: 78:6c:c8:2c:e9:8c:cb:fc:34:c7:9c:c4:65:ab:e2:1f:83:8e: a9:fa:6f:54:6f:53:80:e3:c7:eb:dd:66:e5:40:ca:88:48:27: 3d:28:7a:ac:4b:91:41:dd:a9:07:0f:24:6b:ee:75:9f:60:76: b1:12:d5:2b -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUdhsiBrQ1haU1yhT+PvbaU3bKquEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MzAxMTQwNTBaFw0yNTA4MjkxMTQ1NTBaMDMxMTAvBgNV BAMTKEMwOEU0RkZEQjE0REIxMzY0NUY1OEMyNTk5Nzc0RURDMjBGMUU3N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLXqGW7wF8sJmnS8d4j5Jbmtp abkcoPPjY+3IpThR3mbTQO5fL/p8FGJtwVQ9HhFbmekCx+JnO5VcoWuiKjjHxHQe brp5B4NW4feG19+219p8GduP+M4YWjCSFvrQiiLergKYei+TIFkWKfeW4vKiWa6O Aps98UCGGKwNmbPnJqMXWOU+p1wmcmKnF4dwjXis95WJ4Zx0q9vap9y0nPGCmHBY EqN47pANCeCiwZoTTOAcZqwhhA5AvaJ1mPGFKdEXnIsTob2mO+Uf6o+QAsocgihI HfBGfLlG7X/pkdPzyQCcn4fpgr2KzV/HYYWaXgyt/VAlw+b4/2dIAuumGcVnAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQUwI5P/bFNsTZF9YwlmXdO3CDx53owHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE1NTIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwYEKgYS gTADBwAqCmBEqg4DBwUqCmBEwSAwDQYJKoZIhvcNAQELBQADggEBADHX/Ziy5htn 3BFaJvavD1jpB7udq1vE2NTYmz36uJlM8K4t5shMFH/lPhuR7LLhAPH539hfzJUY +TI52sNmcD5+Zh1U9tXAV+mu/Md87ESEmjfei9Wy2Qvijgf7AdUXJdtMxqEBqDuX Jw2Auqtt0OGyQlkqVK36t13xwcin16aTkATgpdOrKQfxs9Bs+YHVdVUKZEYhxSxw LYcCNyzhUw5Bx2B7Pq/2RF0qZFGBxkr/0CtmtYwwSE1OwCr71NvnPRRD9PBltnhs yCzpjMv8NMecxGWr4h+Djqn6b1RvU4Djx+vdZuVAyohIJz0oeqxLkUHdqQcPJGvu dZ9gdrES1Ss= -----END CERTIFICATE-----Generated at Thu Nov 21 18:06:09 2024 by rpki-client on console-fra.rpki-client.org