$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS63150.roa File: AS63150.roa (raw, json) Hash identifier: l2TEdQiOjT8JYyjzNxOe1Kr3FhN2JzgW7wFxq2tNwDo= Subject key identifier: 1E:F0:EF:1B:AB:F3:76:45:AD:55:A4:7D:DF:A6:66:D2:0D:53:D9:2D Certificate issuer: /CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Certificate serial: 6DA5D1F83AB384E76D0044FBA05B19E9E2A88F4B Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS63150.roa Signing time: Thu 29 Aug 2024 03:41:14 +0000 ROA not before: Thu 29 Aug 2024 03:36:14 +0000 ROA not after: Thu 28 Aug 2025 03:41:14 +0000 asID: 63150 IP address blocks: 2a06:1281:2000::/36 maxlen: 48 2a0a:6044:af00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a5:d1:f8:3a:b3:84:e7:6d:00:44:fb:a0:5b:19:e9:e2:a8:8f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503 Validity Not Before: Aug 29 03:36:14 2024 GMT Not After : Aug 28 03:41:14 2025 GMT Subject: CN=1EF0EF1BABF37645AD55A47DDFA666D20D53D92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:63:20:24:33:26:cd:22:b7:e5:b6:52:eb: 8f:30:16:11:32:5c:f0:38:37:8c:98:c9:27:9a:72: 16:14:51:a9:47:54:b4:cc:38:30:6a:5b:a3:ee:6d: fa:77:4a:67:1f:58:6f:ba:ed:2d:43:be:84:99:92: 1b:49:49:b8:ab:f5:70:5b:ca:83:78:d9:c3:04:db: ac:95:80:a6:14:ee:d9:16:34:83:ba:2e:98:85:9f: 06:7e:da:8d:fe:75:dc:ce:79:b6:87:07:40:fd:9f: b7:a3:67:d9:9c:aa:c3:b5:25:0b:57:d7:50:25:ab: 70:3c:e2:28:ba:5e:d7:fb:0f:22:21:42:db:9c:e6: bb:ee:a2:14:e3:f7:45:74:0d:32:28:a8:04:a7:c9: b0:d1:b0:97:a5:23:4e:16:9d:00:1a:bf:f7:ab:e0: 03:87:a3:d0:30:b8:8b:a7:f4:d8:6d:60:88:9c:26: c1:4d:d1:a6:81:ee:cc:1f:d1:4b:e8:6c:85:71:25: 72:92:c9:8e:f2:aa:c9:c9:ac:41:31:24:f4:ef:8f: 38:5e:47:97:98:4d:e5:84:e1:c4:1e:5b:c6:9f:1e: 01:8f:e2:ae:a4:82:05:53:dc:eb:1c:52:67:60:49: 94:b8:08:9c:23:af:e7:5a:59:41:f5:10:1f:0f:1e: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:EF:1B:AB:F3:76:45:AD:55:A4:7D:DF:A6:66:D2:0D:53:D9:2D X509v3 Authority Key Identifier: keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS63150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1281:2000::/36 2a0a:6044:af00::/40 Signature Algorithm: sha256WithRSAEncryption 8e:ee:f4:29:9e:6c:d9:68:99:71:bc:f5:34:d6:b2:db:56:54: 6e:cb:64:fa:f0:36:bc:80:b7:44:7c:f1:9a:04:f1:6e:29:c2: 0e:e3:8e:24:9f:84:a0:d9:f7:cf:8a:6a:d5:db:de:ba:c1:2b: b2:52:a6:0b:0f:78:f5:fa:90:bf:c0:d6:53:97:22:ae:bd:53: ea:5b:53:82:5f:ec:bf:9a:72:c5:b8:90:07:0d:b6:45:f9:1f: d9:97:97:fc:2e:91:b6:a1:f4:86:19:24:b0:ec:27:c6:0b:36: 36:e8:9c:47:be:08:08:b0:cd:ba:3d:24:69:37:9d:c7:a0:39: 26:94:80:38:81:03:61:0e:9e:aa:32:ab:ef:35:75:56:ac:b9: de:6e:c3:3e:8e:50:fd:0a:95:30:34:ae:85:e0:8f:c0:56:0d: f3:55:d7:45:cd:cf:ff:cd:a5:80:76:53:89:fa:9c:9c:3a:52: 93:72:51:4c:c1:52:f3:9e:fc:d2:42:63:d6:72:0c:62:92:b5: 18:fc:b4:fe:03:19:f4:fa:f9:ab:74:dd:2e:1a:1e:41:19:be: f6:8f:12:b5:b9:f9:4e:f0:1b:04:d9:21:ee:8c:c0:31:a7:1a: af:5e:67:ce:92:7e:fa:c6:7a:53:48:70:15:82:ea:ec:c4:62: 9c:36:9d:5d -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgIUbaXR+DqzhOdtAET7oFsZ6eKoj0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZD ODhGODUwMzAeFw0yNDA4MjkwMzM2MTRaFw0yNTA4MjgwMzQxMTRaMDMxMTAvBgNV BAMTKDFFRjBFRjFCQUJGMzc2NDVBRDU1QTQ3RERGQTY2NkQyMEQ1M0Q5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5WMgJDMmzSK35bZS648wFhEy XPA4N4yYySeachYUUalHVLTMODBqW6Pubfp3SmcfWG+67S1DvoSZkhtJSbir9XBb yoN42cME26yVgKYU7tkWNIO6LpiFnwZ+2o3+ddzOebaHB0D9n7ejZ9mcqsO1JQtX 11Alq3A84ii6Xtf7DyIhQtuc5rvuohTj90V0DTIoqASnybDRsJelI04WnQAav/er 4AOHo9AwuIun9NhtYIicJsFN0aaB7swf0UvobIVxJXKSyY7yqsnJrEExJPTvjzhe R5eYTeWE4cQeW8afHgGP4q6kggVT3OscUmdgSZS4CJwjr+daWUH1EB8PHr1fAgMB AAGjggJDMIICPzAdBgNVHQ4EFgQUHvDvG6vzdkWtVaR936Zm0g1T2S0wHwYDVR0j BBgwFoAUV6l0b+VD6z6g1ElTQkTJP8iPhQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzAvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhGODUwMy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNTdBOTc0NkZFNTQzRUIzRUEwRDQ0OTUzNDI0NEM5M0ZDODhG ODUwMy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYt NDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8wL0FTNjMxNTAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgQqBhKB IAMGACoKYESvMA0GCSqGSIb3DQEBCwUAA4IBAQCO7vQpnmzZaJlxvPU01rLbVlRu y2T68Da8gLdEfPGaBPFuKcIO444kn4Sg2ffPimrV2966wSuyUqYLD3j1+pC/wNZT lyKuvVPqW1OCX+y/mnLFuJAHDbZF+R/Zl5f8LpG2ofSGGSSw7CfGCzY26JxHvggI sM26PSRpN53HoDkmlIA4gQNhDp6qMqvvNXVWrLnebsM+jlD9CpUwNK6F4I/AVg3z VddFzc//zaWAdlOJ+pycOlKTclFMwVLznvzSQmPWcgxikrUY/LT+Axn0+vmrdN0u Gh5BGb72jxK1uflO8BsE2SHujMAxpxqvXmfOkn76xnpTSHAVgursxGKcNp1d -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org