$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215692.roa File: AS215692.roa (raw, json) Hash identifier: ABIM2/e0A1DjMVAs+UtTwerrOjB3wxGwZ5XXeYs0eg8= Subject key identifier: 6C:64:53:C4:7A:93:3E:E0:27:7A:EA:84:AD:36:EB:C3:B6:53:CA:22 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 5D2E8772B522B2C65F26756B8DA8EBF0F67A4CDB Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215692.roa Signing time: Thu 29 Aug 2024 03:41:17 +0000 ROA not before: Thu 29 Aug 2024 03:36:17 +0000 ROA not after: Thu 28 Aug 2025 03:41:17 +0000 asID: 215692 IP address blocks: 2a0a:6044:aa06::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2e:87:72:b5:22:b2:c6:5f:26:75:6b:8d:a8:eb:f0:f6:7a:4c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:17 2024 GMT Not After : Aug 28 03:41:17 2025 GMT Subject: CN=6C6453C47A933EE0277AEA84AD36EBC3B653CA22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:3e:45:7e:3a:ff:e3:6c:b2:e5:6b:2b:06: ff:49:2e:4b:c3:e0:74:c3:fa:9d:5a:15:87:cf:f9: 60:17:06:f7:d9:24:fc:58:a7:f9:d2:e1:c4:0f:9c: 21:f7:8f:fd:27:3d:c9:e3:c8:17:ff:f8:51:29:6a: 4a:81:5a:f8:6e:94:96:86:c0:df:19:35:10:22:4c: 41:51:b4:cf:ad:05:a2:41:d3:8d:43:70:74:7d:ac: 84:85:a4:f3:60:70:92:a5:1e:bc:56:9e:94:75:69: 0c:98:3c:e7:9e:ec:bb:af:73:37:30:66:5d:ac:b6: 76:9c:c3:6d:9f:44:bd:d2:d0:54:26:58:a5:a6:27: 9c:45:74:f3:56:6c:c9:12:0d:67:fe:2c:3e:d9:da: 2a:aa:e1:96:29:4b:dc:06:9b:1a:04:65:bc:0d:fc: 4e:ba:c5:f6:4e:37:8d:02:4f:82:c1:80:f8:ee:85: 97:69:78:7d:7f:77:a3:58:78:d9:45:2d:2d:73:db: c7:00:97:b4:f0:5a:8f:81:50:f8:0a:2d:5e:3f:fd: 2a:c4:ed:26:50:c5:64:cd:18:7d:1e:32:c0:b1:70: a5:dd:0f:db:7c:2f:f6:2b:ce:a2:ad:a1:8f:36:3b: ad:c7:bd:7d:de:46:2c:7c:7e:92:34:60:b3:21:b3: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:64:53:C4:7A:93:3E:E0:27:7A:EA:84:AD:36:EB:C3:B6:53:CA:22 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:aa06::/48 Signature Algorithm: sha256WithRSAEncryption a7:e0:64:1a:24:7e:2c:6f:a7:e3:a1:c1:9f:3a:31:1e:77:74: fa:ec:dd:e9:4a:d2:98:e5:b2:2e:21:48:78:48:d5:b9:a5:d7: dc:4c:34:45:87:7c:bb:4c:27:72:8f:9b:16:54:c5:64:e0:55: b3:d4:b3:e8:ad:4a:0d:d4:1f:4a:dd:0d:f3:f8:f7:ad:f2:64: 8c:66:cd:37:2f:96:2a:d2:38:ac:d2:14:97:e9:2a:fd:26:98: b5:68:73:cb:42:3c:59:ac:97:9d:c3:56:ab:0e:df:91:df:12: aa:eb:4e:3b:6b:3a:b7:a8:22:1b:18:92:9a:09:3b:f1:6e:01: 99:1f:92:64:8e:73:2e:16:ae:5c:e6:fd:cb:4b:7f:e8:c5:57: 9d:7b:59:66:28:a8:21:bb:d0:a8:61:c8:1d:8b:1d:9b:36:59: 49:29:43:60:db:bd:be:8e:d1:52:c5:d8:fb:42:db:9f:15:c3: 99:7e:f2:b4:59:30:bd:5c:18:7b:b1:aa:97:1d:b1:0a:f8:48: 39:33:f9:f1:55:de:54:68:d1:57:ca:ef:3f:3b:c2:57:11:c7: fe:67:b4:fa:46:b0:33:d0:06:c2:e0:87:34:f0:73:f2:a0:5c: 75:fd:ad:86:c3:92:d2:8e:df:3d:c4:02:12:d8:ec:46:cc:cb: d0:7e:64:3f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXS6HcrUissZfJnVrjajr8PZ6TNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTdaFw0yNTA4MjgwMzQxMTdaMDMxMTAvBgNV BAMTKDZDNjQ1M0M0N0E5MzNFRTAyNzdBRUE4NEFEMzZFQkMzQjY1M0NBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiD5Ffjr/42yy5WsrBv9JLkvD 4HTD+p1aFYfP+WAXBvfZJPxYp/nS4cQPnCH3j/0nPcnjyBf/+FEpakqBWvhulJaG wN8ZNRAiTEFRtM+tBaJB041DcHR9rISFpPNgcJKlHrxWnpR1aQyYPOee7Luvczcw Zl2stnacw22fRL3S0FQmWKWmJ5xFdPNWbMkSDWf+LD7Z2iqq4ZYpS9wGmxoEZbwN /E66xfZON40CT4LBgPjuhZdpeH1/d6NYeNlFLS1z28cAl7TwWo+BUPgKLV4//SrE 7SZQxWTNGH0eMsCxcKXdD9t8L/YrzqKtoY82O63HvX3eRix8fpI0YLMhs80lAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbGRTxHqTPuAneuqErTbrw7ZTyiIwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE1NjkyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpg RKoGMA0GCSqGSIb3DQEBCwUAA4IBAQCn4GQaJH4sb6fjocGfOjEed3T67N3pStKY 5bIuIUh4SNW5pdfcTDRFh3y7TCdyj5sWVMVk4FWz1LPorUoN1B9K3Q3z+Pet8mSM Zs03L5Yq0jis0hSX6Sr9Jpi1aHPLQjxZrJedw1arDt+R3xKq6047azq3qCIbGJKa CTvxbgGZH5JkjnMuFq5c5v3LS3/oxVede1lmKKghu9CoYcgdix2bNllJKUNg272+ jtFSxdj7QtufFcOZfvK0WTC9XBh7saqXHbEK+Eg5M/nxVd5UaNFXyu8/O8JXEcf+ Z7T6RrAz0AbC4Ic08HPyoFx1/a2Gw5LSjt89xAIS2OxGzMvQfmQ/ -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org