$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199177.roa File: AS199177.roa (raw, json) Hash identifier: 506nhxPlC3hkEYrLhW03Itv5pS5RsryKEOw/UDdQI+g= Subject key identifier: 08:AF:52:FD:B5:41:4B:1D:4C:04:55:92:2B:D9:A6:0D:83:03:D4:14 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 1D6BD3586CE23C02DD534E3D9BA03E81B49A44EC Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199177.roa Signing time: Tue 19 Sep 2023 02:14:59 +0000 ROA not before: Tue 19 Sep 2023 02:09:59 +0000 ROA not after: Tue 17 Sep 2024 02:14:59 +0000 asID: 199177 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6b:d3:58:6c:e2:3c:02:dd:53:4e:3d:9b:a0:3e:81:b4:9a:44:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:59 2023 GMT Not After : Sep 17 02:14:59 2024 GMT Subject: CN=08AF52FDB5414B1D4C0455922BD9A60D8303D414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:81:d8:d9:10:c8:42:61:bb:37:1f:ad:e6: d4:dd:0c:08:1d:d0:54:86:28:43:e0:41:a2:84:d3: a7:45:c7:6a:c5:ed:36:83:7a:fe:19:d9:d4:7b:7e: c6:b8:d4:b9:45:a8:e4:3b:82:e3:cb:b0:df:f8:2d: 38:d5:42:65:54:68:a5:16:4b:c1:0b:e2:0e:0a:01: 8a:7a:0b:0d:ed:0a:76:bd:e6:aa:1b:0d:23:4e:9c: 35:5f:1a:68:d1:e7:2a:df:0f:c3:af:9c:15:e6:de: e0:58:84:04:66:64:56:e3:b2:67:4f:6c:c3:94:a3: 2d:7a:77:64:ee:45:4b:f2:a6:c0:64:39:10:89:13: 49:f2:41:5e:7d:c0:f1:0f:34:de:a9:8d:c3:e1:23: f5:7b:bc:32:ed:22:7e:98:fd:5c:d6:38:8e:f2:9e: 75:ba:05:3f:a5:b7:0a:90:b0:6d:45:36:db:78:d1: b4:77:40:c3:7c:4a:bd:98:0d:cc:4c:e5:46:93:61: aa:da:38:79:32:01:d1:7b:a9:73:e7:4e:5b:cd:b4: 41:0c:82:c7:ca:ca:84:ef:c7:12:24:46:cb:76:48: 27:1b:c2:78:ba:fd:65:d0:25:d6:0a:dd:ca:24:fa: ed:9b:95:fb:72:76:4a:12:41:68:1a:86:c0:fa:a9: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AF:52:FD:B5:41:4B:1D:4C:04:55:92:2B:D9:A6:0D:83:03:D4:14 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS199177.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 29:a2:7c:1e:8f:f5:b5:ef:59:fb:bd:1a:78:cb:2a:40:c2:6f: ad:bd:e2:92:db:72:60:4c:e7:06:8f:90:07:a8:88:bb:3f:28: 21:2f:f7:54:c0:06:cd:2e:48:7b:41:b7:cc:16:00:2e:d0:2f: 05:66:42:7e:52:25:b9:c2:ee:38:e5:d2:30:74:b0:19:a3:d9: f0:09:c0:af:dd:57:1c:e6:8a:83:65:51:9d:05:22:49:13:3b: 0b:f9:0e:52:58:f7:ab:55:e5:41:8d:6a:5e:28:a4:4c:98:de: c3:04:21:b2:77:52:a6:d7:06:11:6a:2b:7d:b4:43:74:41:e4: a1:31:61:08:02:e8:cd:be:6a:fc:ef:d3:71:38:77:a4:92:6b: 3b:c4:ff:4d:81:b2:a4:ea:ab:63:3f:f0:e3:3c:d6:6a:b2:77: be:13:20:22:fe:fe:3f:d8:0e:22:71:9e:c6:f7:68:c5:bc:4a: ad:6b:82:8b:74:bc:79:d1:c1:55:16:b5:45:96:67:d2:2a:b9: 23:dd:af:7a:59:c5:16:65:f1:03:49:cf:e2:d8:19:eb:43:40: 99:ab:b4:c6:71:71:52:f7:3b:41:45:f9:4d:a7:83:ba:64:6d: 60:4c:cc:72:df:c4:09:95:9f:4d:ff:e1:46:25:c6:36:aa:0b: 8d:f8:e9:7e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHWvTWGziPALdU049m6A+gbSaROwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTlaFw0yNDA5MTcwMjE0NTlaMDMxMTAvBgNV BAMTKDA4QUY1MkZEQjU0MTRCMUQ0QzA0NTU5MjJCRDlBNjBEODMwM0Q0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4YHY2RDIQmG7Nx+t5tTdDAgd 0FSGKEPgQaKE06dFx2rF7TaDev4Z2dR7fsa41LlFqOQ7guPLsN/4LTjVQmVUaKUW S8EL4g4KAYp6Cw3tCna95qobDSNOnDVfGmjR5yrfD8OvnBXm3uBYhARmZFbjsmdP bMOUoy16d2TuRUvypsBkORCJE0nyQV59wPEPNN6pjcPhI/V7vDLtIn6Y/VzWOI7y nnW6BT+ltwqQsG1FNtt40bR3QMN8Sr2YDcxM5UaTYaraOHkyAdF7qXPnTlvNtEEM gsfKyoTvxxIkRst2SCcbwni6/WXQJdYK3cok+u2blftydkoSQWgahsD6qXNFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCK9S/bVBSx1MBFWSK9mmDYMD1BQwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMTk5MTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAponwej/W171n7vRp4yypAwm+tveKS23Jg TOcGj5AHqIi7PyghL/dUwAbNLkh7QbfMFgAu0C8FZkJ+UiW5wu445dIwdLAZo9nw CcCv3Vcc5oqDZVGdBSJJEzsL+Q5SWPerVeVBjWpeKKRMmN7DBCGyd1Km1wYRait9 tEN0QeShMWEIAujNvmr879NxOHekkms7xP9NgbKk6qtjP/DjPNZqsne+EyAi/v4/ 2A4icZ7G92jFvEqta4KLdLx50cFVFrVFlmfSKrkj3a96WcUWZfEDSc/i2BnrQ0CZ q7TGcXFS9ztBRflNp4O6ZG1gTMxy38QJlZ9N/+FGJcY2qguN+Ol+ -----END CERTIFICATE-----Generated at Sat Jun 1 06:15:08 2024 by rpki-client on console-ams.rpki-client.org