$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa File: 326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa (raw, json) Hash identifier: c4pcfZMLTl4R4EnjcfGUgS5ogirjfvs/y9Dcs7QHo8E= Subject key identifier: 94:07:B5:77:81:48:99:B1:F5:A1:1A:3E:B1:AC:09:BA:4D:0A:48:57 Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730 Certificate serial: 323E324E83C592865FD7CF47D20C1CA73BC93649 Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa Signing time: Wed 20 Nov 2024 15:57:22 +0000 ROA not before: Wed 20 Nov 2024 15:52:22 +0000 ROA not after: Wed 19 Nov 2025 15:57:22 +0000 asID: 214757 IP address blocks: 2a0a:6044:ac70::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3e:32:4e:83:c5:92:86:5f:d7:cf:47:d2:0c:1c:a7:3b:c9:36:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730 Validity Not Before: Nov 20 15:52:22 2024 GMT Not After : Nov 19 15:57:22 2025 GMT Subject: CN=9407B577814899B1F5A11A3EB1AC09BA4D0A4857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:14:9b:ef:56:67:2d:ec:f5:c7:d7:4d:e5: 50:35:ab:af:12:2a:c5:5f:c1:3f:ae:ed:08:7f:f2: ec:f6:d4:32:10:c9:83:03:a4:65:bf:b8:32:99:af: 0f:46:f1:9f:17:6a:53:78:d1:42:ca:f4:49:80:0c: 0c:6f:e3:0c:73:59:de:a5:1e:b6:09:64:76:52:be: 68:bf:bd:35:f0:a4:43:26:47:b3:5d:db:41:00:d2: b3:64:31:d5:20:6b:71:2e:38:c5:05:bf:80:df:a1: 92:5a:05:2f:bd:51:0c:ad:d6:d2:8b:8c:1f:ce:2e: 91:39:e9:e3:2f:c1:c2:44:7b:7e:41:c2:f3:14:3e: 41:33:23:19:13:97:74:66:c8:1f:ae:9b:01:63:04: 83:d2:57:53:66:42:f4:b3:38:dd:09:4b:ee:d8:fb: 6e:69:e6:3c:83:a0:11:2b:cf:43:bc:8b:54:92:1a: c8:5e:d0:42:18:27:14:5a:a0:78:6c:db:d1:df:74: 0f:d6:b5:16:4a:2d:53:e7:ab:c1:ac:5b:1e:72:a0: f5:44:11:45:20:1e:88:70:0e:72:0c:ab:95:3e:97: c7:07:d7:99:62:02:72:7d:52:8d:f1:e9:f1:d5:01: 70:09:e7:d7:14:01:e2:88:49:7c:0f:06:3e:9f:a1: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:07:B5:77:81:48:99:B1:F5:A1:1A:3E:B1:AC:09:BA:4D:0A:48:57 X509v3 Authority Key Identifier: keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:ac70::/44 Signature Algorithm: sha256WithRSAEncryption 7e:81:81:e5:c0:ad:ba:6f:fc:b0:af:e5:41:2f:16:6d:97:f0: 40:22:c1:6f:21:50:38:3e:90:19:a2:4c:e5:40:45:2b:2c:21: 1a:fb:01:11:c3:91:26:5a:9f:ee:42:25:9c:38:74:b5:0d:c7: a9:a8:41:5b:2e:48:96:05:e6:cf:a1:c3:17:1a:44:86:89:a8: 77:0b:60:00:e3:de:92:d9:24:d2:90:96:6a:76:bd:44:fd:6a: b1:4e:f8:45:e1:82:cc:6a:b5:8c:69:2f:73:72:2c:c9:93:34: 6d:5b:f3:8f:aa:f6:be:3a:cb:40:80:6a:9f:57:97:b6:99:b1: d8:e6:23:52:ff:d0:39:8e:1e:96:13:59:1b:44:ea:2a:2d:3a: e1:58:32:b8:75:d1:d2:53:03:e3:be:29:9c:99:a4:0b:fc:3c: 5e:3b:d3:fe:a1:c0:c1:f8:f5:a5:64:0d:59:7a:43:33:e9:53: 74:17:14:ab:19:9a:93:4b:16:40:ef:5e:5d:7b:8b:38:69:07: 8b:08:00:28:0b:fe:f0:7d:01:b3:ba:a1:1a:5d:06:1f:6a:d0: 7c:0d:e8:20:48:83:4c:6b:70:e5:eb:ca:da:53:20:56:77:e0: 26:1a:8d:10:c4:ff:a8:31:f0:7f:20:6c:af:dc:1b:76:74:82: d4:7e:20:3b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMj4yToPFkoZf189H0gwcpzvJNkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5 REJCRTczMDAeFw0yNDExMjAxNTUyMjJaFw0yNTExMTkxNTU3MjJaMDMxMTAvBgNV BAMTKDk0MDdCNTc3ODE0ODk5QjFGNUExMUEzRUIxQUMwOUJBNEQwQTQ4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyxSb71ZnLez1x9dN5VA1q68S KsVfwT+u7Qh/8uz21DIQyYMDpGW/uDKZrw9G8Z8XalN40ULK9EmADAxv4wxzWd6l HrYJZHZSvmi/vTXwpEMmR7Nd20EA0rNkMdUga3EuOMUFv4DfoZJaBS+9UQyt1tKL jB/OLpE56eMvwcJEe35BwvMUPkEzIxkTl3RmyB+umwFjBIPSV1NmQvSzON0JS+7Y +25p5jyDoBErz0O8i1SSGshe0EIYJxRaoHhs29HfdA/WtRZKLVPnq8GsWx5yoPVE EUUgHohwDnIMq5U+l8cH15liAnJ9Uo3x6fHVAXAJ59cUAeKISXwPBj6foUgDAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUlAe1d4FImbH1oRo+sawJuk0KSFcwHwYDVR0j BBgwFoAU8WPh7nQ4RDD3p150SKN22J275zAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj ZjE0LzEvRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5REJCRTczMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GMTYzRTFFRTc0Mzg0NDMwRjdBNzVFNzQ0 OEEzNzZEODlEQkJFNzMwLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82YmU0M2Q5ZS1lNDQwLTQ3YWUtYTdiYy0xOWI3OTkzY2NmMTQvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYxNjMzNzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzIz MTM0MzczNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcEKgpgRKxwMA0GCSqGSIb3DQEBCwUAA4IBAQB+ gYHlwK26b/ywr+VBLxZtl/BAIsFvIVA4PpAZokzlQEUrLCEa+wERw5EmWp/uQiWc OHS1DcepqEFbLkiWBebPocMXGkSGiah3C2AA496S2STSkJZqdr1E/WqxTvhF4YLM arWMaS9zcizJkzRtW/OPqva+OstAgGqfV5e2mbHY5iNS/9A5jh6WE1kbROoqLTrh WDK4ddHSUwPjvimcmaQL/DxeO9P+ocDB+PWlZA1ZekMz6VN0FxSrGZqTSxZA715d e4s4aQeLCAAoC/7wfQGzuqEaXQYfatB8DeggSINMa3Dl68raUyBWd+AmGo0QxP+o MfB/IGyv3Bt2dILUfiA7 -----END CERTIFICATE-----Generated at Thu Nov 21 13:55:50 2024 by rpki-client on console-fra.rpki-client.org