$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa File: 326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa (raw, json) Hash identifier: durebI5Pp24BTslHTPoD0kddG2DjSFWyQwuhAMMhyhI= Subject key identifier: 5E:4D:37:B6:74:CF:EF:52:EC:EB:A3:D6:1C:C5:86:5B:5F:71:03:8A Certificate issuer: /CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538 Certificate serial: 0C25F333F62B603F5E5C4CD78C4363DD0E3DB183 Authority key identifier: A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa Signing time: Mon 19 Feb 2024 13:26:16 +0000 ROA not before: Mon 19 Feb 2024 13:21:16 +0000 ROA not after: Mon 17 Feb 2025 13:26:16 +0000 asID: 197919 IP address blocks: 2a07:54c0:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Jun 2024 03:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:25:f3:33:f6:2b:60:3f:5e:5c:4c:d7:8c:43:63:dd:0e:3d:b1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EAAC4901429B15740ABF1D9A54BFB181C6F538 Validity Not Before: Feb 19 13:21:16 2024 GMT Not After : Feb 17 13:26:16 2025 GMT Subject: CN=5E4D37B674CFEF52ECEBA3D61CC5865B5F71038A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:42:e2:81:bf:c4:87:15:b3:f7:52:8a:16: 92:3e:d0:09:6f:a1:52:45:2c:d9:72:b4:bc:19:f4: 91:42:cc:38:78:ae:27:6e:84:d0:7c:6a:52:03:d4: 5c:98:0b:d7:7d:51:b8:72:41:ec:ed:cc:47:6a:f1: f3:42:10:57:7c:67:c4:57:7a:66:e3:20:93:94:ce: 01:c5:6b:5e:e9:49:32:f9:e2:2d:32:1b:69:04:6a: ae:a4:57:50:ca:f4:7c:55:cd:5e:05:c3:5a:8a:b1: 4a:af:d2:c9:3b:55:bf:be:94:9b:b3:59:8a:09:d2: 0d:c8:86:a1:4a:83:ca:0f:be:41:a4:47:0c:54:b6: 24:fe:27:ec:8d:d3:dc:a6:d2:fc:e8:8d:9b:a2:03: f7:9b:11:0e:1b:10:5e:75:ef:a2:63:80:d3:d9:cf: 5c:b3:1e:de:ac:87:ab:69:40:d3:8a:95:fb:27:ff: cb:79:21:a4:40:f8:76:62:fa:a5:d9:1e:2c:b4:48: 5a:6f:3e:be:ed:27:04:fa:c8:04:64:ac:91:bd:39: 95:ae:bc:df:bb:9c:be:c3:b8:a4:ba:f8:55:ee:c1: 57:c2:b3:f3:7d:62:6e:63:b0:21:0e:5e:43:6a:24: ea:5b:5d:ae:6b:e6:ad:fc:52:9a:a6:55:d1:7c:a3: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4D:37:B6:74:CF:EF:52:EC:EB:A3:D6:1C:C5:86:5B:5F:71:03:8A X509v3 Authority Key Identifier: keyid:A6:EA:AC:49:01:42:9B:15:74:0A:BF:1D:9A:54:BF:B1:81:C6:F5:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A6EAAC4901429B15740ABF1D9A54BFB181C6F538.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/2/326130373a353463303a623030623a3a2f34382d3438203d3e20313937393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c0:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 0c:2d:fb:18:51:25:27:d0:2a:88:ac:f6:41:a4:c4:22:6d:98: 24:2f:db:4a:4d:da:67:26:ac:73:c6:d6:d4:0f:8c:02:89:13: 70:53:73:b5:f5:77:89:cd:55:3c:c8:32:e0:de:bc:03:a5:04: 15:85:99:1d:fc:ae:61:a0:34:f7:05:92:e5:27:05:92:0a:56: 70:52:13:f0:34:fc:ea:ea:ca:c4:23:e6:97:22:91:fe:45:47: 91:e5:20:63:44:eb:1f:89:fb:4a:3c:fd:e5:d2:58:ae:d9:a1: 9e:9e:41:b5:a7:1d:09:60:db:b0:52:55:33:5c:cf:fb:51:30: 3d:97:7f:1a:01:fd:5b:cd:5f:f0:c8:e4:ba:10:a3:d5:a8:22: 64:65:a6:16:88:63:dc:63:13:0d:41:cf:b3:67:52:34:9b:b9: f1:ec:f3:fd:5a:f5:d2:5a:36:f3:80:ad:d0:e2:84:fe:3c:70: fe:b2:cb:0c:9e:46:29:9f:d3:45:87:23:10:75:f1:f5:3f:53: 4a:49:a3:c4:df:1a:27:c9:56:b4:13:88:47:09:bc:69:05:76: 70:0a:4d:7e:e3:90:1c:20:3b:36:ed:72:4e:42:c0:23:5a:b2: 14:cd:b6:d9:2c:dc:05:ad:a2:96:00:a9:2c:0c:06:ac:e6:d6: 75:7d:e7:87 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDCXzM/YrYD9eXEzXjENj3Q49sYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFQUFDNDkwMTQyOUIxNTc0MEFCRjFEOUE1NEJGQjE4 MUM2RjUzODAeFw0yNDAyMTkxMzIxMTZaFw0yNTAyMTcxMzI2MTZaMDMxMTAvBgNV BAMTKDVFNEQzN0I2NzRDRkVGNTJFQ0VCQTNENjFDQzU4NjVCNUY3MTAzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvD0Ligb/EhxWz91KKFpI+0Alv oVJFLNlytLwZ9JFCzDh4riduhNB8alID1FyYC9d9UbhyQeztzEdq8fNCEFd8Z8RX embjIJOUzgHFa17pSTL54i0yG2kEaq6kV1DK9HxVzV4Fw1qKsUqv0sk7Vb++lJuz WYoJ0g3IhqFKg8oPvkGkRwxUtiT+J+yN09ym0vzojZuiA/ebEQ4bEF5176JjgNPZ z1yzHt6sh6tpQNOKlfsn/8t5IaRA+HZi+qXZHiy0SFpvPr7tJwT6yARkrJG9OZWu vN+7nL7DuKS6+FXuwVfCs/N9Ym5jsCEOXkNqJOpbXa5r5q38UpqmVdF8oyN7AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUXk03tnTP71Ls66PWHMWGW19xA4owHwYDVR0j BBgwFoAUpuqsSQFCmxV0Cr8dmlS/sYHG9TgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDM0NGZmMjktNzE4NC00N2JkLTkxNzItMzYwOWY1OWNl NmRmLzIvQTZFQUFDNDkwMTQyOUIxNTc0MEFCRjFEOUE1NEJGQjE4MUM2RjUzOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BNkVBQUM0OTAxNDI5QjE1NzQwQUJGMUQ5 QTU0QkZCMTgxQzZGNTM4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80MzQ0ZmYyOS03MTg0LTQ3YmQtOTE3Mi0zNjA5ZjU5Y2U2ZGYvMi8zMjYxMzAz NzNhMzUzNDYzMzAzYTYyMzAzMDYyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz OTM3MzkzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwLALMA0GCSqGSIb3DQEBCwUAA4IBAQAM LfsYUSUn0CqIrPZBpMQibZgkL9tKTdpnJqxzxtbUD4wCiRNwU3O19XeJzVU8yDLg 3rwDpQQVhZkd/K5hoDT3BZLlJwWSClZwUhPwNPzq6srEI+aXIpH+RUeR5SBjROsf iftKPP3l0liu2aGenkG1px0JYNuwUlUzXM/7UTA9l38aAf1bzV/wyOS6EKPVqCJk ZaYWiGPcYxMNQc+zZ1I0m7nx7PP9WvXSWjbzgK3Q4oT+PHD+sssMnkYpn9NFhyMQ dfH1P1NKSaPE3xonyVa0E4hHCbxpBXZwCk1+45AcIDs27XJOQsAjWrIUzbbZLNwF raKWAKksDAas5tZ1feeH -----END CERTIFICATE-----Generated at Sat Jun 1 12:58:20 2024 by rpki-client on console-fra.rpki-client.org