$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199177.roa File: AS199177.roa (raw, json) Hash identifier: I+kUi92TmRfneWmdOs/MJljkQCTeg11zTRjbImsPVDk= Subject key identifier: 10:B7:BA:3B:48:59:F2:C9:DA:FE:BC:FB:78:D8:0B:3A:F7:0E:E9:37 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 7AD6F5F35398D9633BE2880F706127C1CAFF0D24 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199177.roa Signing time: Tue 20 Aug 2024 02:31:56 +0000 ROA not before: Tue 20 Aug 2024 02:26:56 +0000 ROA not after: Tue 19 Aug 2025 02:31:56 +0000 asID: 199177 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d6:f5:f3:53:98:d9:63:3b:e2:88:0f:70:61:27:c1:ca:ff:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:56 2024 GMT Not After : Aug 19 02:31:56 2025 GMT Subject: CN=10B7BA3B4859F2C9DAFEBCFB78D80B3AF70EE937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ce:db:c9:d9:0c:c4:c4:01:59:16:46:6a:81: 87:dd:a7:cb:cc:91:c5:ca:cd:a4:b2:d1:44:ed:da: 1f:30:e1:3f:fa:88:0b:3a:36:be:19:d2:0e:0f:e2: 7e:e7:65:ae:94:ad:80:e5:33:44:72:96:bd:91:99: 3c:ec:27:6d:b5:b1:3b:d8:c0:2b:7c:8c:5c:5a:96: fd:9d:9f:90:2f:21:01:e0:d3:52:e0:86:c2:7b:22: 15:e3:16:83:49:94:8f:a8:64:f7:79:8d:8b:a7:0a: ef:d1:d7:6d:36:74:c0:fa:9d:b5:fc:09:50:83:7c: 72:f7:99:d8:57:ab:d4:28:d8:8c:ed:b1:99:f2:e2: b5:26:3f:15:f8:1c:4c:37:3f:63:6a:38:48:c5:35: a7:dc:fe:c1:3a:37:8c:fc:66:d5:0d:ca:55:2b:df: d0:c4:31:fd:12:a7:72:c3:be:d3:ba:c5:b3:ec:04: 03:a2:74:a6:ee:40:88:ae:9a:6a:8c:d7:31:0b:eb: 9f:71:89:b7:9a:72:34:9b:af:45:02:96:d6:72:a0: e2:6d:1b:53:c8:81:e1:48:f1:0e:95:0f:75:c6:ce: 55:05:6d:db:0c:bf:ba:4a:5c:7e:75:fd:87:85:0c: f5:62:48:a7:57:d0:d8:f8:b9:9f:f6:cd:ab:77:a8: 13:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B7:BA:3B:48:59:F2:C9:DA:FE:BC:FB:78:D8:0B:3A:F7:0E:E9:37 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199177.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 75:37:4c:2b:84:6b:8a:95:39:4b:50:d5:7d:83:a5:35:76:ce: 97:9b:11:4b:ad:86:2c:59:9f:2f:0f:e1:1f:58:59:80:16:56: 9e:f0:00:99:55:33:c5:03:8c:96:ec:ce:8b:3b:3f:44:4c:bc: 2c:2e:5a:3f:c6:4b:72:d4:11:98:63:31:e0:30:cd:87:5a:00: 95:df:f5:3e:94:14:a5:0b:df:01:5f:e8:b1:e5:2f:94:92:b5: 3a:e8:62:c9:95:b1:03:8d:e2:b2:9b:f5:d7:b7:d8:1d:be:4d: 24:20:92:1a:d1:31:2f:f4:0c:ce:cd:55:7d:b4:a4:5a:63:f1: 11:01:b8:22:f3:1a:8c:b5:21:e4:01:9c:94:e1:4f:96:01:f8: 30:9f:8d:ca:8b:75:24:dd:12:48:82:5b:14:fa:2f:ad:cf:57: 79:ea:34:8a:aa:83:b2:f8:61:81:fd:a8:88:53:ad:02:20:98: 24:3b:9b:f2:ee:14:ed:ae:ba:02:a4:aa:61:5e:b5:89:65:4c: 0a:fe:00:ef:bb:0f:ee:40:71:18:4a:f8:49:d2:a2:fc:6e:63: 84:aa:59:37:81:84:29:0e:88:26:bf:08:c3:0f:6d:48:20:91: 77:be:72:fe:04:5a:65:70:75:15:1d:8a:0f:71:3c:58:0a:17: 5f:d0:bc:99 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUetb181OY2WM74ogPcGEnwcr/DSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTZaFw0yNTA4MTkwMjMxNTZaMDMxMTAvBgNV BAMTKDEwQjdCQTNCNDg1OUYyQzlEQUZFQkNGQjc4RDgwQjNBRjcwRUU5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYztvJ2QzExAFZFkZqgYfdp8vM kcXKzaSy0UTt2h8w4T/6iAs6Nr4Z0g4P4n7nZa6UrYDlM0Rylr2RmTzsJ221sTvY wCt8jFxalv2dn5AvIQHg01LghsJ7IhXjFoNJlI+oZPd5jYunCu/R1202dMD6nbX8 CVCDfHL3mdhXq9Qo2IztsZny4rUmPxX4HEw3P2NqOEjFNafc/sE6N4z8ZtUNylUr 39DEMf0Sp3LDvtO6xbPsBAOidKbuQIiummqM1zEL659xibeacjSbr0UCltZyoOJt G1PIgeFI8Q6VD3XGzlUFbdsMv7pKXH51/YeFDPViSKdX0Nj4uZ/2zat3qBNpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUELe6O0hZ8sna/rz7eNgLOvcO6TcwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMTk5MTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQB1N0wrhGuKlTlLUNV9g6U1ds6XmxFLrYYs WZ8vD+EfWFmAFlae8ACZVTPFA4yW7M6LOz9ETLwsLlo/xkty1BGYYzHgMM2HWgCV 3/U+lBSlC98BX+ix5S+UkrU66GLJlbEDjeKym/XXt9gdvk0kIJIa0TEv9AzOzVV9 tKRaY/ERAbgi8xqMtSHkAZyU4U+WAfgwn43Ki3Uk3RJIglsU+i+tz1d56jSKqoOy +GGB/aiIU60CIJgkO5vy7hTtrroCpKphXrWJZUwK/gDvuw/uQHEYSvhJ0qL8bmOE qlk3gYQpDogmvwjDD21IIJF3vnL+BFplcHUVHYoPcTxYChdf0LyZ -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org