$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47509.roa File: AS47509.roa (raw, json) Hash identifier: 2lojyh/YLZvC3RBbGRv8V/3GSW2yuVmp06W/EgSfW/4= Subject key identifier: 07:4D:F1:28:C0:AB:8D:37:8B:11:74:EE:B1:90:19:C6:1F:57:79:74 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 2187A4C7C36F3A73FF9420684ED1CE947AF4BFAA Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47509.roa Signing time: Thu 29 Aug 2024 03:41:14 +0000 ROA not before: Thu 29 Aug 2024 03:36:14 +0000 ROA not after: Thu 28 Aug 2025 03:41:14 +0000 asID: 47509 IP address blocks: 2a0a:6044:b100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:87:a4:c7:c3:6f:3a:73:ff:94:20:68:4e:d1:ce:94:7a:f4:bf:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:14 2024 GMT Not After : Aug 28 03:41:14 2025 GMT Subject: CN=074DF128C0AB8D378B1174EEB19019C61F577974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:a6:bd:8d:71:87:07:c9:23:26:81:30:4c: 85:52:85:0f:45:10:c0:d7:9a:c7:ed:48:41:e7:11: 6c:c9:1f:49:3c:74:30:24:f8:be:c0:dc:cf:c8:0a: 50:69:fe:b4:92:3d:9a:3d:a3:a6:52:9f:4b:85:72: 07:f1:c2:f7:a7:87:44:d3:f9:a5:bb:fc:4e:96:0b: 97:f6:3f:f1:d0:51:92:5c:31:e3:33:05:47:c7:93: 7d:43:60:c7:fb:f8:9d:dd:1a:c7:5c:6c:14:6d:de: bc:10:6a:64:b9:11:c9:57:d2:04:d5:2d:ff:0f:76: 5b:b2:9f:02:02:83:a3:6f:42:95:4f:2a:b0:4c:12: f1:a3:3c:bd:82:78:58:70:51:37:07:db:ea:9d:3b: cc:ae:58:3d:21:74:43:44:23:89:d0:19:e4:28:74: 40:f6:dc:ca:a8:94:b1:46:d0:a8:62:4a:01:7d:ad: f6:55:18:ca:fd:6c:e4:76:ef:a2:76:21:43:65:56: 5b:b5:bc:22:2f:a3:78:23:3e:06:3b:c4:ba:35:26: 4d:e3:bf:94:8f:de:4d:76:be:72:e9:12:c5:6b:d0: f0:ca:5f:54:af:cc:37:e0:24:75:78:cd:4e:4f:15: 1a:41:fa:a3:49:61:09:c8:48:32:39:e8:d8:a7:e1: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:F1:28:C0:AB:8D:37:8B:11:74:EE:B1:90:19:C6:1F:57:79:74 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b100::/40 Signature Algorithm: sha256WithRSAEncryption a7:0f:83:9c:07:95:25:b5:46:6f:b2:26:91:9e:fd:4a:37:1d: cc:0e:be:dc:61:eb:a2:cd:c8:06:88:e9:3d:e0:a4:71:a2:51: 88:bf:e6:e5:c7:5a:b0:14:1f:82:35:15:a6:d3:07:cd:bd:38: 7f:96:93:86:84:cc:11:b0:6d:0c:41:fb:b0:7b:8e:fd:c3:77: 5f:59:84:7d:a2:be:28:18:31:4d:31:15:96:99:28:e8:f5:f6: 72:40:e9:60:00:66:aa:55:b2:74:ba:3b:a5:55:cc:1f:06:9f: 96:f0:41:2b:7d:60:48:4c:cd:b1:86:70:f9:49:91:c0:0e:68: b5:21:14:2e:fc:95:02:e0:35:c8:c9:5f:35:31:81:21:5b:82: 8b:5d:cc:64:26:ba:d1:91:f3:25:3d:91:6f:bc:0d:19:8c:24: 5b:97:2a:ba:9e:71:92:03:c0:23:36:35:6c:ce:09:62:2d:1f: 76:c6:e0:01:25:72:30:95:d5:e8:58:f6:25:d6:d8:cc:52:09: eb:7e:49:26:f6:8a:60:dc:3f:92:69:48:16:ef:20:75:34:9c: 76:f1:7c:06:e9:bf:98:1e:98:86:6b:f1:16:54:73:f8:56:ea: b6:a3:c2:11:e3:da:b7:3a:32:e6:db:1d:6f:9c:3a:21:13:5f: 43:e0:4c:cb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIYekx8NvOnP/lCBoTtHOlHr0v6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTRaFw0yNTA4MjgwMzQxMTRaMDMxMTAvBgNV BAMTKDA3NERGMTI4QzBBQjhEMzc4QjExNzRFRUIxOTAxOUM2MUY1Nzc5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKw6a9jXGHB8kjJoEwTIVShQ9F EMDXmsftSEHnEWzJH0k8dDAk+L7A3M/IClBp/rSSPZo9o6ZSn0uFcgfxwvenh0TT +aW7/E6WC5f2P/HQUZJcMeMzBUfHk31DYMf7+J3dGsdcbBRt3rwQamS5EclX0gTV Lf8PdluynwICg6NvQpVPKrBMEvGjPL2CeFhwUTcH2+qdO8yuWD0hdENEI4nQGeQo dED23MqolLFG0KhiSgF9rfZVGMr9bOR276J2IUNlVlu1vCIvo3gjPgY7xLo1Jk3j v5SP3k12vnLpEsVr0PDKX1SvzDfgJHV4zU5PFRpB+qNJYQnISDI56Nin4RJ7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUB03xKMCrjTeLEXTusZAZxh9XeXQwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTNDc1MDkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqCmBE sTANBgkqhkiG9w0BAQsFAAOCAQEApw+DnAeVJbVGb7ImkZ79SjcdzA6+3GHros3I BojpPeCkcaJRiL/m5cdasBQfgjUVptMHzb04f5aThoTMEbBtDEH7sHuO/cN3X1mE faK+KBgxTTEVlpko6PX2ckDpYABmqlWydLo7pVXMHwaflvBBK31gSEzNsYZw+UmR wA5otSEULvyVAuA1yMlfNTGBIVuCi13MZCa60ZHzJT2Rb7wNGYwkW5cqup5xkgPA IzY1bM4JYi0fdsbgASVyMJXV6Fj2JdbYzFIJ635JJvaKYNw/kmlIFu8gdTScdvF8 Bum/mB6YhmvxFlRz+FbqtqPCEePatzoy5tsdb5w6IRNfQ+BMyw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org