$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa File: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (raw, json) Hash identifier: EXuK08+oqHk8pQl69db4apbuttuLFsyV61jf2S7CeW0= Subject key identifier: D6:89:69:3C:B6:00:4A:77:F9:72:91:49:27:FB:C6:70:0D:FC:A7:C3 Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Certificate serial: 732FA11BEF046A2C8EC3E3CADF8651534383A3FD Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa Signing time: Wed 21 Aug 2024 13:31:52 +0000 ROA not before: Wed 21 Aug 2024 13:26:52 +0000 ROA not after: Wed 20 Aug 2025 13:31:52 +0000 asID: 8075 IP address blocks: 2a0a:6044:8ffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 17:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2f:a1:1b:ef:04:6a:2c:8e:c3:e3:ca:df:86:51:53:43:83:a3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Validity Not Before: Aug 21 13:26:52 2024 GMT Not After : Aug 20 13:31:52 2025 GMT Subject: CN=D689693CB6004A77F972914927FBC6700DFCA7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:12:a8:53:7a:17:3d:83:90:48:03:c3:0f:90: ad:86:84:57:15:19:81:1f:ca:c2:b0:ba:6c:dc:0c: d3:61:30:a3:1d:d3:90:72:b3:1a:21:a9:5e:1a:42: 5e:37:58:e8:04:6c:f5:07:9e:b3:90:e9:b0:7f:2a: d9:33:f5:15:40:52:58:a9:8d:4c:83:a3:ad:50:14: 06:b1:a2:c9:f9:b5:dc:21:f3:11:10:4f:3a:7a:40: 3a:c0:7f:b8:a6:d6:4c:2c:fb:92:28:46:06:92:7e: a3:ba:c4:b7:20:01:81:87:7a:01:4d:31:ea:38:3f: 80:3c:5e:e6:e2:62:b1:a5:3d:27:73:76:82:86:0c: cd:de:2c:79:01:46:7e:71:ad:d9:da:f0:00:1e:2e: b3:cf:8a:4a:9f:92:0c:74:86:c1:da:9e:6a:ae:a0: d9:43:54:c1:11:d2:f9:e9:7e:ca:73:f4:b8:dc:03: 82:8c:28:0c:bc:0f:50:d5:17:e5:f8:01:88:6e:c9: 7b:17:5a:c8:21:a8:c2:13:ac:cf:06:34:15:d5:e1: 7c:77:d5:16:7f:ec:42:8c:48:75:a0:ad:64:4c:a9: 63:60:c6:e5:18:ba:63:3e:d5:e0:7a:45:95:2b:11: d9:c6:00:de:4e:6f:51:0b:70:a8:70:6a:81:74:eb: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:89:69:3C:B6:00:4A:77:F9:72:91:49:27:FB:C6:70:0D:FC:A7:C3 X509v3 Authority Key Identifier: keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8ffe::/48 Signature Algorithm: sha256WithRSAEncryption 64:1f:26:c5:94:e5:05:cc:8c:27:d8:d9:55:f8:9b:98:5f:7d: d6:b5:15:ca:62:90:23:02:6c:de:18:8f:0a:28:25:85:a6:68: 03:e5:54:93:7f:38:9a:fe:27:ec:6f:f3:46:b6:a0:0b:f1:4e: 54:3b:d2:6b:df:e0:04:07:55:d2:de:6e:7d:71:2e:e8:4c:f6: 42:99:54:83:58:e3:ef:e0:e5:3a:29:31:e4:4f:b0:a0:44:7d: 53:5a:f2:1a:0f:b3:6d:1f:3f:54:41:8f:c9:74:c3:07:12:d9: 28:dc:06:5b:ed:c4:aa:3d:33:b8:dd:85:d8:74:35:4b:b0:8b: 14:34:e0:05:aa:ca:53:81:4d:2c:e4:74:34:ed:95:8b:90:ca: 18:a3:13:c3:43:ed:24:1a:1e:c8:61:66:02:56:80:a8:58:95: e4:79:f3:a4:84:71:dd:3b:4e:9d:f8:29:76:ba:06:e1:67:fb: f5:5a:69:4f:27:ae:60:dc:a3:74:cc:ab:94:f6:2e:33:f0:8d: f1:85:af:e4:f8:c1:c2:e3:19:c9:38:3c:45:69:19:f8:82:6c: cf:7c:af:22:c0:8e:7e:e5:39:2c:58:e4:07:b7:92:39:1c:0d: 58:3f:a8:64:aa:75:9c:2d:00:07:82:fa:95:f6:61:51:2b:77: 7f:2f:b4:a3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIUcy+hG+8EaiyOw+PK34ZRU0ODo/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy RkM5MEQwOTAeFw0yNDA4MjExMzI2NTJaFw0yNTA4MjAxMzMxNTJaMDMxMTAvBgNV BAMTKEQ2ODk2OTNDQjYwMDRBNzdGOTcyOTE0OTI3RkJDNjcwMERGQ0E3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEqhTehc9g5BIA8MPkK2GhFcV GYEfysKwumzcDNNhMKMd05BysxohqV4aQl43WOgEbPUHnrOQ6bB/Ktkz9RVAUlip jUyDo61QFAaxosn5tdwh8xEQTzp6QDrAf7im1kws+5IoRgaSfqO6xLcgAYGHegFN Meo4P4A8XubiYrGlPSdzdoKGDM3eLHkBRn5xrdna8AAeLrPPikqfkgx0hsHanmqu oNlDVMER0vnpfspz9LjcA4KMKAy8D1DVF+X4AYhuyXsXWsghqMITrM8GNBXV4Xx3 1RZ/7EKMSHWgrWRMqWNgxuUYumM+1eB6RZUrEdnGAN5Ob1ELcKhwaoF067uFAgMB AAGjggKBMIICfTAdBgNVHQ4EFgQU1olpPLYASnf5cpFJJ/vGcA38p8MwHwYDVR0j BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC OTYwRkVBMjJGQzkwRDA5LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUF BzALhoGTcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4NjY2NjY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzgz MDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAqCmBEj/4wDQYJKoZIhvcNAQELBQADggEBAGQfJsWU 5QXMjCfY2VX4m5hffda1FcpikCMCbN4YjwooJYWmaAPlVJN/OJr+J+xv80a2oAvx TlQ70mvf4AQHVdLebn1xLuhM9kKZVINY4+/g5TopMeRPsKBEfVNa8hoPs20fP1RB j8l0wwcS2SjcBlvtxKo9M7jdhdh0NUuwixQ04AWqylOBTSzkdDTtlYuQyhijE8ND 7SQaHshhZgJWgKhYleR586SEcd07Tp34KXa6BuFn+/VaaU8nrmDco3TMq5T2LjPw jfGFr+T4wcLjGck4PEVpGfiCbM98ryLAjn7lOSxY5Ae3kjkcDVg/qGSqdZwtAAeC +pX2YVErd38vtKM= -----END CERTIFICATE-----Generated at Thu Nov 21 09:56:30 2024 by rpki-client on console-fra.rpki-client.org