$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/326130613a363034343a373930303a3a2f34382d3438203d3e20323134333233.roa File: 326130613a363034343a373930303a3a2f34382d3438203d3e20323134333233.roa (raw, json) Hash identifier: k27ZhKvqG1PrTJJkZghQ/9YDXzUgHurmYJ8imxEe8Hs= Subject key identifier: 37:9D:85:3A:0D:AC:87:28:6B:8A:E2:EC:E6:08:4C:8F:C3:D9:FE:16 Certificate issuer: /CN=6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A Certificate serial: 1C04278039D8DED74CA49CFCF4540790DC8A337D Authority key identifier: 6B:70:A7:1E:22:E3:4D:AB:7D:A3:61:F2:FE:D9:F9:1A:48:49:DE:4A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/326130613a363034343a373930303a3a2f34382d3438203d3e20323134333233.roa Signing time: Mon 26 Aug 2024 16:48:22 +0000 ROA not before: Mon 26 Aug 2024 16:43:22 +0000 ROA not after: Mon 25 Aug 2025 16:48:22 +0000 asID: 214323 IP address blocks: 2a0a:6044:7900::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.crl rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 13:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:04:27:80:39:d8:de:d7:4c:a4:9c:fc:f4:54:07:90:dc:8a:33:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A Validity Not Before: Aug 26 16:43:22 2024 GMT Not After : Aug 25 16:48:22 2025 GMT Subject: CN=379D853A0DAC87286B8AE2ECE6084C8FC3D9FE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:41:f2:65:4a:b2:12:03:53:11:9a:e2:ef: 68:5b:03:d7:d2:3b:dd:05:fe:d1:11:e2:33:53:ba: 1f:c3:04:68:1a:8f:60:64:d3:4a:30:44:08:a7:5b: 23:92:71:9a:f0:08:7e:2d:2a:30:fb:a0:cc:3b:0c: 2a:b1:45:62:55:e8:b8:46:75:43:aa:fa:8b:aa:cf: 56:ae:b3:d0:cd:9d:db:bb:38:75:94:50:21:72:2c: 43:98:b9:7b:71:ca:a4:d9:4a:68:62:ed:f6:20:39: 00:f8:01:0e:aa:02:c6:33:6d:62:6c:a8:db:27:03: 93:25:9a:3d:07:24:c7:b4:42:e2:9d:04:e6:69:70: c4:aa:5a:d3:2e:a1:a1:ea:8e:1d:b8:e2:73:a4:86: 69:2d:a7:6e:a2:6e:25:31:12:8b:33:57:7f:c0:a9: 10:77:97:57:22:d6:bf:3c:2e:ee:04:9f:7d:e9:94: 94:9c:27:df:dc:4f:f1:ac:63:ea:55:f9:7d:33:d0: 6d:5b:bd:ed:83:fc:96:c8:2d:41:50:b0:74:03:86: 15:69:08:b3:d0:c5:cb:c5:5b:30:19:c7:16:cf:d1: e6:aa:e6:1f:d2:d9:cb:3a:48:76:19:7b:4a:0a:22: 8a:da:bb:c1:85:4a:31:45:3b:ec:31:78:07:25:47: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:85:3A:0D:AC:87:28:6B:8A:E2:EC:E6:08:4C:8F:C3:D9:FE:16 X509v3 Authority Key Identifier: keyid:6B:70:A7:1E:22:E3:4D:AB:7D:A3:61:F2:FE:D9:F9:1A:48:49:DE:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/6B70A71E22E34DAB7DA361F2FED9F91A4849DE4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/0/326130613a363034343a373930303a3a2f34382d3438203d3e20323134333233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:7900::/48 Signature Algorithm: sha256WithRSAEncryption 0d:26:9d:43:35:8d:ac:e2:3e:03:e8:83:e8:89:f4:9b:57:01: ac:e7:dd:2c:75:ad:3b:c0:cb:92:9d:d8:78:76:9a:a3:4a:97: a0:1a:8d:2e:11:27:bd:d1:89:06:6f:ef:1e:41:1f:2a:df:f4: 76:97:12:ce:60:8e:84:b3:7c:e5:41:62:08:c0:95:42:0f:0d: 09:47:4f:f6:2e:ec:ee:ed:2a:d8:3a:78:bc:5b:09:f9:2c:be: ee:c2:93:9c:9e:ff:ee:89:ec:61:73:3b:39:90:16:5d:9e:ff: 5a:ed:c0:da:d6:f9:65:9b:3c:02:7b:eb:20:9a:8d:5b:cd:7b: ac:3a:83:cd:9c:aa:d9:b5:99:10:0d:74:ca:11:0f:37:55:64: a2:8c:c0:ed:bf:88:f6:e8:4a:cb:f2:f7:ef:33:57:17:b3:19: f3:b2:2c:f1:2f:f6:57:ec:87:1b:92:11:aa:7a:94:fe:c8:d5: 47:bd:cd:41:b1:d9:c9:df:db:3e:a5:28:21:1f:db:72:1c:0a: c7:47:75:de:b7:50:66:80:db:2f:5b:1a:a8:cf:61:7f:26:df: 0e:c2:4c:91:83:79:c0:6e:bc:5e:57:36:6f:d1:cf:26:83:2e: 14:fa:af:4e:80:e4:59:4b:39:01:0d:2b:a8:02:3a:19:1d:54: 95:b9:7a:c6 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUHAQngDnY3tdMpJz89FQHkNyKM30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI3MEE3MUUyMkUzNERBQjdEQTM2MUYyRkVEOUY5MUE0 ODQ5REU0QTAeFw0yNDA4MjYxNjQzMjJaFw0yNTA4MjUxNjQ4MjJaMDMxMTAvBgNV BAMTKDM3OUQ4NTNBMERBQzg3Mjg2QjhBRTJFQ0U2MDg0QzhGQzNEOUZFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1EHyZUqyEgNTEZri72hbA9fS O90F/tER4jNTuh/DBGgaj2Bk00owRAinWyOScZrwCH4tKjD7oMw7DCqxRWJV6LhG dUOq+ouqz1aus9DNndu7OHWUUCFyLEOYuXtxyqTZSmhi7fYgOQD4AQ6qAsYzbWJs qNsnA5Mlmj0HJMe0QuKdBOZpcMSqWtMuoaHqjh244nOkhmktp26ibiUxEoszV3/A qRB3l1ci1r88Lu4En33plJScJ9/cT/GsY+pV+X0z0G1bve2D/JbILUFQsHQDhhVp CLPQxcvFWzAZxxbP0eaq5h/S2cs6SHYZe0oKIorau8GFSjFFO+wxeAclRxx3AgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUN52FOg2shyhriuLs5ghMj8PZ/hYwHwYDVR0j BBgwFoAUa3CnHiLjTat9o2Hy/tn5GkhJ3kowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjU4MzlmYmQtMzI3ZS00ZmNlLThhM2UtNTNmZjhmMGM0 NjBlLzAvNkI3MEE3MUUyMkUzNERBQjdEQTM2MUYyRkVEOUY5MUE0ODQ5REU0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC82QjcwQTcxRTIyRTM0REFCN0RBMzYxRjJG RUQ5RjkxQTQ4NDlERTRBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82NTgzOWZiZC0zMjdlLTRmY2UtOGEzZS01M2ZmOGYwYzQ2MGUvMC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM3MzkzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzMzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRHkAMA0GCSqGSIb3DQEBCwUAA4IBAQAN Jp1DNY2s4j4D6IPoifSbVwGs590sda07wMuSndh4dpqjSpegGo0uESe90YkGb+8e QR8q3/R2lxLOYI6Es3zlQWIIwJVCDw0JR0/2Luzu7SrYOni8Wwn5LL7uwpOcnv/u iexhczs5kBZdnv9a7cDa1vllmzwCe+sgmo1bzXusOoPNnKrZtZkQDXTKEQ83VWSi jMDtv4j26ErL8vfvM1cXsxnzsizxL/ZX7IcbkhGqepT+yNVHvc1BsdnJ39s+pSgh H9tyHArHR3Xet1BmgNsvWxqoz2F/Jt8OwkyRg3nAbrxeVzZv0c8mgy4U+q9OgORZ SzkBDSuoAjoZHVSVuXrG -----END CERTIFICATE-----Generated at Mon Nov 25 19:59:01 2024 by rpki-client on console-ams.rpki-client.org