$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS53667.roa File: AS53667.roa (raw, json) Hash identifier: uxt3L+2SU1nkkiIqN9NzULqxcO7pboie5ZBx1pgaSgg= Subject key identifier: 1F:A4:7C:90:4F:BE:C1:75:8B:DF:F9:88:99:6D:F6:26:08:34:DA:D5 Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 4A162DE39EFDE92BBCE2C676FB3251B5ADAF8AA8 Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS53667.roa Signing time: Sun 13 Oct 2024 17:01:23 +0000 ROA not before: Sun 13 Oct 2024 16:56:23 +0000 ROA not after: Sun 12 Oct 2025 17:01:23 +0000 asID: 53667 IP address blocks: 2a09:54c6:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:16:2d:e3:9e:fd:e9:2b:bc:e2:c6:76:fb:32:51:b5:ad:af:8a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Oct 13 16:56:23 2024 GMT Not After : Oct 12 17:01:23 2025 GMT Subject: CN=1FA47C904FBEC1758BDFF988996DF6260834DAD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:4c:c8:fa:db:84:67:31:97:27:8b:01:f6: bc:f2:c5:25:f5:72:2f:15:04:31:da:34:6d:2f:54: 14:c5:97:94:4e:5a:b6:99:b5:3a:67:24:cb:71:78: d5:08:29:2e:5e:a4:cb:f4:a6:94:d2:88:2f:b0:8e: e7:25:60:1a:f5:a9:22:3a:87:ce:d9:80:30:ac:e6: 46:30:1c:f9:bd:bb:5b:b3:a0:9a:0d:3e:1d:4d:99: c6:47:74:81:b8:18:07:5c:16:1e:13:c6:3b:d5:aa: 2c:b9:fd:f2:72:a6:ef:00:ff:97:fe:39:c0:8a:1a: a2:80:7b:2f:d2:3a:0c:60:44:58:39:0a:2f:54:4f: 71:03:7a:5d:90:6c:5b:f3:ce:2d:99:eb:5a:93:54: 77:03:e6:84:10:94:0f:ad:34:1e:ef:c0:db:0a:29: 7c:d0:37:de:89:15:9d:c7:17:54:6b:9f:d5:dd:6a: 40:2d:15:d0:e1:9c:05:ce:18:e4:44:61:18:01:4e: 2b:10:c6:2e:2a:79:1f:62:fe:54:ab:d2:bd:11:5b: 92:6d:9c:d8:ff:53:d0:6c:a0:df:4c:d5:9a:cb:e4: ac:f2:79:fc:0b:50:a2:c2:3e:b4:11:f7:c4:70:8e: 67:81:a2:f4:61:9f:33:87:55:17:58:ed:e3:49:df: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A4:7C:90:4F:BE:C1:75:8B:DF:F9:88:99:6D:F6:26:08:34:DA:D5 X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS53667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c6:9000::/36 Signature Algorithm: sha256WithRSAEncryption 6e:6f:b8:e4:f3:3e:3c:52:c1:b0:1d:7f:29:68:b7:99:99:9c: 2c:fc:f6:4e:d9:35:73:a1:a0:c7:8c:b8:a8:e3:84:70:65:44: 84:c8:b9:42:b0:0e:3b:6b:ab:2e:c6:45:70:ad:13:9f:d8:72: 6d:de:c9:53:e1:ca:83:f0:d6:94:ca:85:7c:f1:5b:f5:33:a4: 68:8e:b0:87:5d:2d:92:ff:c4:04:31:1a:97:49:71:4e:9e:b2: 35:c4:f6:10:7a:fd:a2:c7:86:9d:91:7c:80:67:4a:79:eb:5f: 43:fd:8c:3b:3e:d7:8b:af:7d:0c:75:9b:e3:67:83:c2:74:ca: 81:bb:a6:38:49:b4:5f:a1:5e:c4:4d:28:c7:20:ec:80:a4:67: 61:ab:41:97:3d:f5:33:eb:ee:0a:6b:bc:31:7f:f2:18:93:70: 89:e3:55:d7:71:00:01:01:c1:28:67:4c:8b:cd:4e:9d:fd:ab: 33:31:68:37:07:27:45:3a:d2:fb:48:c3:cc:c7:3a:35:a4:d3: cb:31:8b:c6:c7:40:6a:3c:f6:d7:5b:3b:31:fa:00:57:30:f9: 7c:64:87:aa:4d:7b:03:81:4d:02:d6:99:a1:05:5b:b4:06:d5: 49:d9:dc:26:b0:fd:0c:1a:05:09:16:94:f0:e0:64:54:5a:8f: 42:2a:2d:de -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUShYt45796Su84sZ2+zJRta2viqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDEwMTMxNjU2MjNaFw0yNTEwMTIxNzAxMjNaMDMxMTAvBgNV BAMTKDFGQTQ3QzkwNEZCRUMxNzU4QkRGRjk4ODk5NkRGNjI2MDgzNERBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk0zI+tuEZzGXJ4sB9rzyxSX1 ci8VBDHaNG0vVBTFl5ROWraZtTpnJMtxeNUIKS5epMv0ppTSiC+wjuclYBr1qSI6 h87ZgDCs5kYwHPm9u1uzoJoNPh1NmcZHdIG4GAdcFh4TxjvVqiy5/fJypu8A/5f+ OcCKGqKAey/SOgxgRFg5Ci9UT3EDel2QbFvzzi2Z61qTVHcD5oQQlA+tNB7vwNsK KXzQN96JFZ3HF1Rrn9XdakAtFdDhnAXOGOREYRgBTisQxi4qeR9i/lSr0r0RW5Jt nNj/U9BsoN9M1ZrL5KzyefwLUKLCPrQR98RwjmeBovRhnzOHVRdY7eNJ31mpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUH6R8kE++wXWL3/mImW32Jgg02tUwHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTNTM2Njcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqCVTG kDANBgkqhkiG9w0BAQsFAAOCAQEAbm+45PM+PFLBsB1/KWi3mZmcLPz2Ttk1c6Gg x4y4qOOEcGVEhMi5QrAOO2urLsZFcK0Tn9hybd7JU+HKg/DWlMqFfPFb9TOkaI6w h10tkv/EBDEal0lxTp6yNcT2EHr9oseGnZF8gGdKeetfQ/2MOz7Xi699DHWb42eD wnTKgbumOEm0X6FexE0oxyDsgKRnYatBlz31M+vuCmu8MX/yGJNwieNV13EAAQHB KGdMi81Onf2rMzFoNwcnRTrS+0jDzMc6NaTTyzGLxsdAajz211s7MfoAVzD5fGSH qk17A4FNAtaZoQVbtAbVSdncJrD9DBoFCRaU8OBkVFqPQiot3g== -----END CERTIFICATE-----Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org