$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa File: 326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa (raw, json) Hash identifier: 5PlpPYYlZjLSmilHrnDVMT9seTkK0axkvwKTA6gQyQI= Subject key identifier: 75:0E:F8:29:66:C4:AF:9A:F0:47:56:2C:F0:90:06:6A:76:A4:8B:D8 Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 017D8733A569E60ED7A3BC9568266B4C52300D1F Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa Signing time: Mon 14 Oct 2024 08:59:49 +0000 ROA not before: Mon 14 Oct 2024 08:54:49 +0000 ROA not after: Mon 13 Oct 2025 08:59:49 +0000 asID: 215147 IP address blocks: 2a06:1283:c114::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 08:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7d:87:33:a5:69:e6:0e:d7:a3:bc:95:68:26:6b:4c:52:30:0d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Oct 14 08:54:49 2024 GMT Not After : Oct 13 08:59:49 2025 GMT Subject: CN=750EF82966C4AF9AF047562CF090066A76A48BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:04:a7:bd:be:bf:2a:fd:04:9d:45:8b:75:a6: f0:b6:b8:3f:11:3f:4c:c9:8a:12:f9:7a:87:f4:af: 8e:f7:4b:32:0b:64:6c:97:ea:ed:66:d4:90:48:eb: 1a:3c:ab:e4:da:4d:2f:fb:52:d7:83:d7:ce:a8:21: 31:66:03:f6:6f:04:cc:3c:21:6d:16:ff:3b:64:d1: 5f:8d:6b:91:40:75:e8:61:36:09:7e:4f:bb:50:a5: 16:01:54:43:7e:aa:68:0e:77:f3:04:6f:10:f1:05: 57:e2:55:2e:24:27:9b:2e:d1:dd:37:41:5a:77:8b: 03:9d:66:1d:b6:31:f1:47:a4:78:0d:b9:ac:4e:36: 0d:4c:75:e0:76:1c:51:06:c5:e6:42:02:97:64:59: 92:d9:ca:cf:4a:a0:94:da:43:5e:f5:24:42:3e:4f: 78:d7:08:00:fc:63:7b:08:92:eb:ba:f5:f6:96:71: cb:f5:c8:a1:1d:9a:db:e8:cc:b3:72:4c:b3:fb:05: b6:9b:ca:28:9f:6b:d6:08:16:90:1b:96:ca:17:f3: b2:06:a0:1c:48:a1:92:8a:92:2c:9c:da:77:91:43: 9a:ad:97:04:f9:d9:46:5a:b3:a0:8e:b3:47:f8:05: 6c:29:73:b4:1c:07:f5:da:f5:59:37:3a:fb:63:83: 85:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:F8:29:66:C4:AF:9A:F0:47:56:2C:F0:90:06:6A:76:A4:8B:D8 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1283:c114::/48 Signature Algorithm: sha256WithRSAEncryption 7a:f8:e5:43:54:11:b1:70:ba:a3:e1:f1:c8:bc:ea:cf:22:15: 15:20:88:94:22:57:f2:38:75:9d:15:e9:db:6e:29:67:e4:b2: 98:27:67:e8:c8:a6:25:94:70:50:6e:4f:bd:f3:2f:77:5d:f3: 74:a8:9b:81:08:a6:ed:92:fc:41:66:38:9f:73:95:5a:8a:d0: 79:7a:cf:00:09:91:9b:a9:6f:fa:ff:0b:da:33:bf:9c:cf:0a: c5:5a:67:08:12:d3:b4:58:af:e4:db:a5:41:cb:81:10:a5:5b: bc:ea:a6:2a:3a:5b:06:09:41:18:6a:24:48:85:9a:ce:cb:b2: 55:4a:5d:32:b1:fe:0e:3a:99:9d:40:79:94:f4:9b:b2:f7:92: ad:26:f9:f7:a4:88:10:e2:93:94:e6:5c:28:87:2f:e1:ff:9f: 7a:54:96:fc:f2:71:ee:18:87:9a:63:c8:83:cb:1d:56:bd:2d: 01:a6:60:eb:a8:f6:35:12:49:08:b6:ed:03:99:1a:1f:2e:2e: ab:3c:87:89:a6:a7:7d:4b:93:7e:f6:79:cb:89:e0:a3:f3:de: f4:90:bf:c4:ff:6d:d2:ef:75:3c:6e:f8:fd:49:8f:e5:be:22: 5f:04:0e:fb:0a:fa:44:61:7f:6b:92:ca:e5:08:ab:26:9d:0b: 16:78:98:9d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUAX2HM6Vp5g7Xo7yVaCZrTFIwDR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNDEwMTQwODU0NDlaFw0yNTEwMTMwODU5NDlaMDMxMTAvBgNV BAMTKDc1MEVGODI5NjZDNEFGOUFGMDQ3NTYyQ0YwOTAwNjZBNzZBNDhCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBKe9vr8q/QSdRYt1pvC2uD8R P0zJihL5eof0r473SzILZGyX6u1m1JBI6xo8q+TaTS/7UteD186oITFmA/ZvBMw8 IW0W/ztk0V+Na5FAdehhNgl+T7tQpRYBVEN+qmgOd/MEbxDxBVfiVS4kJ5su0d03 QVp3iwOdZh22MfFHpHgNuaxONg1MdeB2HFEGxeZCApdkWZLZys9KoJTaQ171JEI+ T3jXCAD8Y3sIkuu69faWccv1yKEdmtvozLNyTLP7Bbabyiifa9YIFpAblsoX87IG oBxIoZKKkiyc2neRQ5qtlwT52UZas6COs0f4BWwpc7QcB/Xa9Vk3Ovtjg4VlAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUdQ74KWbEr5rwR1Ys8JAGanaki9gwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82OGFiYWJiYi1mMDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMi8zMjYxMzAz NjNhMzEzMjM4MzMzYTYzMzEzMTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg8EUMA0GCSqGSIb3DQEBCwUAA4IBAQB6 +OVDVBGxcLqj4fHIvOrPIhUVIIiUIlfyOHWdFenbbiln5LKYJ2foyKYllHBQbk+9 8y93XfN0qJuBCKbtkvxBZjifc5VaitB5es8ACZGbqW/6/wvaM7+czwrFWmcIEtO0 WK/k26VBy4EQpVu86qYqOlsGCUEYaiRIhZrOy7JVSl0ysf4OOpmdQHmU9Juy95Kt Jvn3pIgQ4pOU5lwohy/h/596VJb88nHuGIeaY8iDyx1WvS0BpmDrqPY1EkkItu0D mRofLi6rPIeJpqd9S5N+9nnLieCj8970kL/E/23S73U8bvj9SY/lviJfBA77CvpE YX9rksrlCKsmnQsWeJid -----END CERTIFICATE-----Generated at Tue Oct 22 16:10:15 2024 by rpki-client on console-fra.rpki-client.org