$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS216052.roa File: AS216052.roa (raw, json) Hash identifier: HrIv491SLjRNdKuA1/V5Fq2wvWHDSV2VybIJPaQ76BA= Subject key identifier: FF:45:78:FC:13:0A:3D:D2:1A:05:B2:0D:B6:9E:DE:C6:B8:FA:77:E3 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 023DCD237F6CBA3CAD64D7574ED024513F2FABE1 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS216052.roa Signing time: Thu 29 Aug 2024 03:41:15 +0000 ROA not before: Thu 29 Aug 2024 03:36:15 +0000 ROA not after: Thu 28 Aug 2025 03:41:15 +0000 asID: 216052 IP address blocks: 2a0a:6044:a900::/40 maxlen: 40 2a0a:6044:a900::/40 maxlen: 48 2a0a:6044:ac00::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3d:cd:23:7f:6c:ba:3c:ad:64:d7:57:4e:d0:24:51:3f:2f:ab:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:15 2024 GMT Not After : Aug 28 03:41:15 2025 GMT Subject: CN=FF4578FC130A3DD21A05B20DB69EDEC6B8FA77E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:d4:fc:b6:5b:42:61:4b:db:dd:eb:e1:fd: 56:42:2c:6d:fd:ba:9d:bc:06:16:80:80:b9:42:79: 5b:99:a1:82:cc:54:c4:92:01:ae:7a:83:dd:8e:e0: c5:5f:fe:88:36:ba:4b:bf:74:84:a5:6c:de:03:0b: 18:41:e7:3d:bf:3d:10:49:44:57:fe:ce:32:0a:6f: cc:a4:ce:81:56:57:1f:c9:88:6b:e2:b9:d3:25:c1: f5:2c:e5:f5:14:aa:80:9c:c4:0d:84:84:51:88:af: 2d:84:04:c4:cc:b4:6a:63:0e:b5:94:0b:12:95:cf: b7:bc:23:95:f3:72:3e:bb:ca:60:f8:1a:0e:bd:d9: f5:cf:0d:2d:68:32:33:41:01:36:c5:25:4f:b0:6b: 5b:5b:bf:35:78:3e:33:b1:5f:8c:4f:a4:97:b4:1b: 44:ad:ab:bf:4f:3c:fb:da:0c:ba:5e:f1:9c:d8:b2: 43:f7:17:b3:da:db:79:16:c6:cd:d7:b3:b1:4d:50: 31:e2:d0:22:52:03:76:96:7f:fd:d5:5a:dc:f5:8d: 78:8d:31:0f:c7:1c:f9:98:e0:c2:29:88:82:a8:0c: 15:71:f9:b1:1a:c8:5f:e0:00:2d:37:ee:39:5b:7c: 0d:a3:62:f1:40:c3:44:30:f0:01:e3:7f:6c:1c:46: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:45:78:FC:13:0A:3D:D2:1A:05:B2:0D:B6:9E:DE:C6:B8:FA:77:E3 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS216052.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:a900::/40 2a0a:6044:ac00::/44 Signature Algorithm: sha256WithRSAEncryption 31:1b:5a:74:77:ef:ad:85:9a:b7:4f:b6:c5:28:52:72:8a:a2: ae:28:21:61:de:56:24:f3:7a:89:76:bb:81:fc:65:9a:2c:52: 75:48:e7:5e:6b:52:f1:f6:79:3e:5d:a5:83:7c:03:1a:a7:d2: 86:41:cb:f6:b2:cd:c3:2b:c0:24:c6:16:6f:84:3e:dd:de:61: 09:72:13:6e:e9:4b:0c:db:cc:d1:66:52:c9:ee:74:ce:c4:0f: 6e:b2:99:1c:94:9c:dd:4f:ce:e0:f3:8a:dd:76:52:f1:20:47: 23:47:9e:d9:13:83:ba:97:cd:01:55:dd:83:2a:88:5e:6f:08: 64:8f:ca:3e:59:b9:0a:46:c4:ba:b5:f9:83:5e:fb:d9:76:d5: 07:13:b2:5e:2b:24:c9:db:22:2e:8a:7a:9b:c8:85:17:dc:eb: 71:92:65:9c:5c:99:7b:b8:2a:18:91:b0:4a:c4:d9:5f:56:17: 02:d7:37:65:b1:5a:1f:99:10:19:6f:92:f0:0d:66:59:32:6a: c6:a0:19:25:f6:b4:20:91:3f:63:ee:2b:73:01:96:b5:a2:43: 36:3f:87:27:18:36:5e:d4:ce:9c:24:c0:cd:db:49:07:9e:c4: 4c:bf:04:03:58:fa:22:eb:6d:07:a2:61:ae:ab:9b:16:ac:6b: a7:64:63:ed -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUAj3NI39sujytZNdXTtAkUT8vq+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTVaFw0yNTA4MjgwMzQxMTVaMDMxMTAvBgNV BAMTKEZGNDU3OEZDMTMwQTNERDIxQTA1QjIwREI2OUVERUM2QjhGQTc3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC509T8tltCYUvb3evh/VZCLG39 up28BhaAgLlCeVuZoYLMVMSSAa56g92O4MVf/og2uku/dISlbN4DCxhB5z2/PRBJ RFf+zjIKb8ykzoFWVx/JiGviudMlwfUs5fUUqoCcxA2EhFGIry2EBMTMtGpjDrWU CxKVz7e8I5Xzcj67ymD4Gg692fXPDS1oMjNBATbFJU+wa1tbvzV4PjOxX4xPpJe0 G0Stq79PPPvaDLpe8ZzYskP3F7Pa23kWxs3Xs7FNUDHi0CJSA3aWf/3VWtz1jXiN MQ/HHPmY4MIpiIKoDBVx+bEayF/gAC037jlbfA2jYvFAw0Qw8AHjf2wcRrClAgMB AAGjggJFMIICQTAdBgNVHQ4EFgQU/0V4/BMKPdIaBbINtp7exrj6d+MwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTMjE2MDUyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKgpg RKkDBwQqCmBErAAwDQYJKoZIhvcNAQELBQADggEBADEbWnR3762FmrdPtsUoUnKK oq4oIWHeViTzeol2u4H8ZZosUnVI515rUvH2eT5dpYN8Axqn0oZBy/ayzcMrwCTG Fm+EPt3eYQlyE27pSwzbzNFmUsnudM7ED26ymRyUnN1PzuDzit12UvEgRyNHntkT g7qXzQFV3YMqiF5vCGSPyj5ZuQpGxLq1+YNe+9l21QcTsl4rJMnbIi6KepvIhRfc 63GSZZxcmXu4KhiRsErE2V9WFwLXN2WxWh+ZEBlvkvANZlkyasagGSX2tCCRP2Pu K3MBlrWiQzY/hycYNl7UzpwkwM3bSQeexEy/BANY+iLrbQeiYa6rmxasa6dkY+0= -----END CERTIFICATE-----Generated at Thu Nov 21 19:35:16 2024 by rpki-client on console-ams.rpki-client.org