$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/3136302e33302e32352e302f32342d3234203d3e20313533313736.roa File: 3136302e33302e32352e302f32342d3234203d3e20313533313736.roa (raw, json) Hash identifier: dQX8k3kIeqGp3P2icN5/lEkgJizu7NVM5zOKZXx0I5g= Subject key identifier: A4:95:1A:AE:5F:CC:81:D1:9F:EB:48:97:F5:98:FE:4B:A4:00:A3:9D Certificate issuer: /CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Certificate serial: 5EFE8BB422D676575F21ECFAC650B38ADE8D71BD Authority key identifier: C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/3136302e33302e32352e302f32342d3234203d3e20313533313736.roa Signing time: Sat 27 Jul 2024 17:32:24 +0000 ROA not before: Sat 27 Jul 2024 17:27:24 +0000 ROA not after: Sat 26 Jul 2025 17:32:24 +0000 asID: 153176 IP address blocks: 160.30.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Oct 2024 07:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fe:8b:b4:22:d6:76:57:5f:21:ec:fa:c6:50:b3:8a:de:8d:71:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443440000/serialNumber=C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E Validity Not Before: Jul 27 17:27:24 2024 GMT Not After : Jul 26 17:32:24 2025 GMT Subject: CN=A4951AAE5FCC81D19FEB4897F598FE4BA400A39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:c5:82:fa:b8:f0:2e:06:75:8e:a7:f7:a6: 4a:73:32:93:ff:6c:60:e8:34:d3:db:d9:a1:fc:c8: ca:ce:1d:66:37:d3:e1:f6:53:f9:09:dd:3a:0d:84: 30:e3:67:30:16:1c:ad:15:c7:05:92:5f:39:7a:a0: 59:65:9b:15:1a:a1:f8:bf:5a:19:54:2f:f5:02:fc: 68:eb:7d:81:ea:82:ee:62:29:37:13:c1:cd:54:a0: 05:45:29:ce:24:3d:aa:96:a6:f1:24:0c:ea:f4:9c: 11:19:45:82:9f:77:89:09:56:fa:5a:55:3b:28:8d: 85:41:fa:b8:1a:14:b5:26:15:81:e2:89:eb:d6:0c: 3a:ec:5a:48:89:92:08:4f:77:0a:fe:49:c0:6d:49: 8a:e3:bc:75:12:b6:09:0d:1a:90:2d:1f:1c:c4:c4: 2e:1b:3d:6b:f9:c3:56:2a:1e:ba:16:71:26:c5:6e: 30:87:47:b0:10:cc:26:a2:4b:28:f7:89:bd:d8:b8: d2:fb:a0:e2:73:45:76:af:45:2e:47:5a:d7:09:64: 56:ab:a2:00:f6:e8:c1:49:ac:90:2a:3c:4a:35:44: 98:f2:b5:0b:89:20:b3:4e:00:7d:54:be:8e:ac:95: 00:5e:2a:ce:8d:7c:4c:4f:a8:70:ab:f2:61:b6:4b: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:1A:AE:5F:CC:81:D1:9F:EB:48:97:F5:98:FE:4B:A4:00:A3:9D X509v3 Authority Key Identifier: keyid:C4:E6:C3:DA:EB:74:BE:45:20:7E:B8:0D:ED:F1:FF:D5:4B:C0:01:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/C4E6C3DAEB74BE45207EB80DEDF1FFD54BC0019E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xObD2ut0vkUgfrgN7fH_1UvAAZ4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/2/3136302e33302e32352e302f32342d3234203d3e20313533313736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.25.0/24 Signature Algorithm: sha256WithRSAEncryption 31:45:07:58:ee:a2:0f:71:9c:d2:64:94:7f:85:28:e5:b2:00: ea:05:3c:63:17:51:c0:f3:69:8e:1b:7b:2c:3a:de:95:bc:5d: 06:69:ee:f9:69:95:3d:80:d4:72:02:fc:c2:d3:cf:f6:16:61: b1:f3:3d:49:78:85:42:7f:f8:e5:4c:fd:6a:06:51:4e:f1:fd: 39:25:76:b4:ca:c1:92:25:ef:86:a0:d6:24:fa:97:e2:2b:90: 56:6a:dc:73:5b:40:1d:c6:3f:b8:60:b8:f3:dd:82:ef:c4:31: a8:09:c6:ed:2e:e6:7e:0d:fd:25:60:24:fd:6d:0a:a9:24:a1: 55:48:5a:3e:8a:c5:d2:39:28:ec:d9:fc:41:1e:65:ca:1b:4b: 20:31:d8:42:68:42:fc:88:d1:2e:a8:f9:94:01:01:5d:1d:05: 27:67:29:83:08:ba:b3:0c:3c:10:b1:a2:bd:ea:ba:41:d0:5f: c0:95:67:cf:6e:bf:c5:e9:92:21:7a:03:1b:ef:9f:b7:5a:09: a7:db:b4:bc:41:33:4d:37:f7:13:32:9a:b7:7f:3f:69:72:68: b7:9d:b5:02:85:cc:2a:be:f8:54:4b:03:6b:1a:21:9c:79:07: 74:46:ea:a1:b3:07:d1:0a:5f:15:a3:1e:62:46:e3:84:f8:f3: 8c:1e:68:0c -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIUXv6LtCLWdldfIez6xlCzit6Ncb0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDQzNDQwMDAwMTEwLwYDVQQFEyhDNEU2QzNEQUVC NzRCRTQ1MjA3RUI4MERFREYxRkZENTRCQzAwMTlFMB4XDTI0MDcyNzE3MjcyNFoX DTI1MDcyNjE3MzIyNFowMzExMC8GA1UEAxMoQTQ5NTFBQUU1RkNDODFEMTlGRUI0 ODk3RjU5OEZFNEJBNDAwQTM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9NxYL6uPAuBnWOp/emSnMyk/9sYOg009vZofzIys4dZjfT4fZT+QndOg2E MONnMBYcrRXHBZJfOXqgWWWbFRqh+L9aGVQv9QL8aOt9geqC7mIpNxPBzVSgBUUp ziQ9qpam8SQM6vScERlFgp93iQlW+lpVOyiNhUH6uBoUtSYVgeKJ69YMOuxaSImS CE93Cv5JwG1JiuO8dRK2CQ0akC0fHMTELhs9a/nDVioeuhZxJsVuMIdHsBDMJqJL KPeJvdi40vug4nNFdq9FLkda1wlkVquiAPbowUmskCo8SjVEmPK1C4kgs04AfVS+ jqyVAF4qzo18TE+ocKvyYbZLkJcCAwEAAaOCAlcwggJTMB0GA1UdDgQWBBSklRqu X8yB0Z/rSJf1mP5LpACjnTAfBgNVHSMEGDAWgBTE5sPa63S+RSB+uA3t8f/VS8AB njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDVjZDE0ZS01 ZjYzLTRmMWMtOTRlMy0yNzA1MGMyNjY0ODAvMi9DNEU2QzNEQUVCNzRCRTQ1MjA3 RUI4MERFREYxRkZENTRCQzAwMTlFLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYy MDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi94T2JEMnV0MHZrVWdmcmdON2ZIXzFV dkFBWjQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUHMAuGgY1yc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhkNWNkMTRl LTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8yLzMxMzYzMDJlMzMzMDJlMzIz NTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzczNi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AKAeGTANBgkqhkiG9w0BAQsFAAOCAQEAMUUHWO6iD3Gc0mSUf4Uo5bIA6gU8YxdR wPNpjht7LDrelbxdBmnu+WmVPYDUcgL8wtPP9hZhsfM9SXiFQn/45Uz9agZRTvH9 OSV2tMrBkiXvhqDWJPqX4iuQVmrcc1tAHcY/uGC4892C78QxqAnG7S7mfg39JWAk /W0KqSShVUhaPorF0jko7Nn8QR5lyhtLIDHYQmhC/IjRLqj5lAEBXR0FJ2cpgwi6 sww8ELGiveq6QdBfwJVnz26/xemSIXoDG++ft1oJp9u0vEEzTTf3EzKat38/aXJo t521AoXMKr74VEsDaxohnHkHdEbqobMH0QpfFaMeYkbjhPjzjB5oDA== -----END CERTIFICATE-----Generated at Thu Oct 24 07:23:00 2024 by rpki-client on console-fra.rpki-client.org