$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa File: AS198342.roa (raw, json) Hash identifier: RBz/5MVBw+RIqf3cWJYfRc+NU8xEr+6e3/NesCIupDs= Subject key identifier: CD:38:47:76:33:95:14:B2:4E:4F:67:6B:11:18:84:FF:96:2F:94:50 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 65969A63DB11BC990AE6E6E85FA3B377A92112A8 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa Signing time: Thu 01 Feb 2024 00:35:47 +0000 ROA not before: Thu 01 Feb 2024 00:30:47 +0000 ROA not after: Thu 30 Jan 2025 00:35:47 +0000 asID: 198342 IP address blocks: 2a07:54c1:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:96:9a:63:db:11:bc:99:0a:e6:e6:e8:5f:a3:b3:77:a9:21:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Feb 1 00:30:47 2024 GMT Not After : Jan 30 00:35:47 2025 GMT Subject: CN=CD384776339514B24E4F676B111884FF962F9450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:bd:7c:c7:82:ce:5a:31:f9:0d:b9:64:f5: 99:14:a4:19:07:fe:03:b8:bc:34:9f:6b:67:7f:e6: 5a:15:cb:2c:c7:ef:32:86:c8:fe:27:42:9d:de:37: 7d:fe:d6:5f:ad:22:94:af:9f:01:c5:b9:a8:88:88: 30:79:8a:7a:19:b2:9f:6e:86:3a:a6:aa:8e:cb:b8: c0:a7:0c:22:90:39:7a:2e:a2:77:cf:b9:32:b8:f1: 1d:93:e4:93:12:03:9a:b3:4b:35:77:b6:ba:26:24: c5:38:c9:62:cf:f5:32:b2:68:79:5e:18:f7:56:7c: ad:ca:f0:a5:f7:72:c0:44:27:e3:0a:8b:85:13:6c: 2e:48:91:12:d8:7a:4f:97:63:11:ad:6c:45:ba:60: ce:6a:2b:13:02:1b:4b:89:50:37:c7:d2:e4:c4:02: 8d:fe:4f:59:ea:f9:1d:ad:fd:41:61:90:ea:8e:c5: 9a:89:7d:08:64:ae:bd:2c:b8:1b:94:55:af:52:7d: d3:75:ab:59:29:bd:7f:ed:36:d8:83:fe:0f:af:72: 83:09:08:f0:cc:c1:83:ed:63:61:ef:3a:77:51:e3: 1a:8f:64:6f:f1:6d:35:aa:f1:4e:11:d4:67:bd:ef: bb:d5:7d:fe:56:35:b2:29:7c:50:be:d4:db:83:18: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:47:76:33:95:14:B2:4E:4F:67:6B:11:18:84:FF:96:2F:94:50 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 6a:6e:ef:90:1d:a5:99:83:30:71:8c:16:ab:00:ba:58:af:fa: 50:b9:c1:69:de:b0:19:3c:2b:34:d2:d5:96:b2:d7:ba:36:48: e3:ca:53:4e:f7:c5:8e:7c:15:e5:f9:0a:9a:c9:9e:92:28:13: 47:f1:c4:82:85:cc:5a:2a:82:a4:cd:98:48:3c:8f:45:d9:f9: 6c:f0:73:6c:77:6b:89:04:00:c9:e6:c2:0a:05:f5:80:09:50: 29:9b:3b:33:bd:8f:0b:66:72:85:22:0f:bb:0d:58:25:0f:52: f7:d5:6d:6e:cf:83:54:54:8d:3c:c5:7d:da:9c:4a:9b:f5:17: f1:b1:d7:81:ce:dd:09:8d:8f:37:e5:d9:ef:b3:ea:f7:a0:ab: 25:15:a6:e9:93:cc:2b:84:b9:5f:6e:14:cc:55:a9:98:59:27: 79:61:40:21:3b:bb:22:3f:5c:fc:9e:5e:48:b1:00:17:5a:78: 66:ed:d7:64:cf:f3:54:94:a1:50:c7:be:06:5b:17:c8:50:dd: ff:f5:68:2b:ad:53:a8:81:70:f7:c0:06:32:f9:49:0f:76:49: 9b:fc:1e:cb:8e:c0:ea:60:48:e2:1e:8a:30:29:bf:32:48:97: 17:9e:7a:cc:bb:68:71:c7:c4:0b:a5:8d:1d:d2:9b:c8:c9:1f: 65:86:be:f4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZZaaY9sRvJkK5uboX6Ozd6khEqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDAyMDEwMDMwNDdaFw0yNTAxMzAwMDM1NDdaMDMxMTAvBgNV BAMTKENEMzg0Nzc2MzM5NTE0QjI0RTRGNjc2QjExMTg4NEZGOTYyRjk0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGPL18x4LOWjH5Dblk9ZkUpBkH /gO4vDSfa2d/5loVyyzH7zKGyP4nQp3eN33+1l+tIpSvnwHFuaiIiDB5inoZsp9u hjqmqo7LuMCnDCKQOXouonfPuTK48R2T5JMSA5qzSzV3tromJMU4yWLP9TKyaHle GPdWfK3K8KX3csBEJ+MKi4UTbC5IkRLYek+XYxGtbEW6YM5qKxMCG0uJUDfH0uTE Ao3+T1nq+R2t/UFhkOqOxZqJfQhkrr0suBuUVa9SfdN1q1kpvX/tNtiD/g+vcoMJ CPDMwYPtY2HvOndR4xqPZG/xbTWq8U4R1Ge977vVff5WNbIpfFC+1NuDGAxRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzThHdjOVFLJOT2drERiE/5YvlFAwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMTk4MzQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wbALMA0GCSqGSIb3DQEBCwUAA4IBAQBqbu+QHaWZgzBxjBarALpYr/pQucFp3rAZ PCs00tWWste6NkjjylNO98WOfBXl+QqayZ6SKBNH8cSChcxaKoKkzZhIPI9F2fls 8HNsd2uJBADJ5sIKBfWACVApmzszvY8LZnKFIg+7DVglD1L31W1uz4NUVI08xX3a nEqb9RfxsdeBzt0JjY835dnvs+r3oKslFabpk8wrhLlfbhTMVamYWSd5YUAhO7si P1z8nl5IsQAXWnhm7ddkz/NUlKFQx74GWxfIUN3/9WgrrVOogXD3wAYy+UkPdkmb /B7LjsDqYEjiHoowKb8ySJcXnnrMu2hxx8QLpY0d0pvIyR9lhr70 -----END CERTIFICATE-----Generated at Sat Jun 1 06:15:08 2024 by rpki-client on console-ams.rpki-client.org