$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200676.roa File: AS200676.roa (raw, json) Hash identifier: uZ1RBhBWQo7AJC+htzewZq/exhwJnjrZyodLVFvLCoo= Subject key identifier: 72:56:7C:92:E2:1B:5E:15:51:E2:7D:C2:71:D3:3C:2A:AB:4C:FB:74 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 07DD62E242A5EB2C9E7736D5D2DB5928B1EBD58A Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200676.roa Signing time: Tue 20 Aug 2024 02:31:58 +0000 ROA not before: Tue 20 Aug 2024 02:26:58 +0000 ROA not after: Tue 19 Aug 2025 02:31:58 +0000 asID: 200676 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:dd:62:e2:42:a5:eb:2c:9e:77:36:d5:d2:db:59:28:b1:eb:d5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:58 2024 GMT Not After : Aug 19 02:31:58 2025 GMT Subject: CN=72567C92E21B5E1551E27DC271D33C2AAB4CFB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:37:5f:4e:be:9a:e7:07:83:5b:7e:09:e5: 41:fd:3b:2c:83:13:dd:58:3f:38:30:58:26:3e:7a: a5:2e:96:6b:01:c4:2b:83:c6:b7:99:03:fc:4d:0e: 6f:cb:79:f6:f9:50:d9:93:07:36:99:d6:84:d6:b1: b4:4c:b0:04:5c:32:5d:f9:d9:1f:51:f0:5e:52:b3: d6:d8:97:a4:73:6a:20:18:8d:b0:43:a9:6b:ec:62: d4:02:06:a3:eb:72:72:2f:42:f0:98:66:e9:5c:08: 12:db:84:5d:f6:60:07:a0:e5:44:c1:98:78:da:69: 90:24:1a:10:61:7b:9c:87:a7:84:f3:90:6a:3b:a6: 2b:4b:9f:ea:28:e8:1b:70:a9:e3:88:02:45:e0:32: d8:d0:60:48:88:18:54:28:36:bf:e5:5c:d2:d9:23: e1:43:ab:3a:6a:94:26:47:68:3a:70:6a:8b:cf:6a: 23:f5:c1:7d:d2:0d:19:20:ed:09:0b:1d:83:29:1d: 03:68:71:16:67:f7:fa:a4:95:86:ed:6b:28:50:c5: f0:69:a2:16:d8:3f:7a:82:8e:18:70:e9:fc:12:e4: ec:fe:50:f5:89:86:a6:c2:2e:5a:ed:1f:c5:7a:41: 16:f6:32:a3:06:12:72:91:3f:10:6e:16:2e:8a:8b: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:56:7C:92:E2:1B:5E:15:51:E2:7D:C2:71:D3:3C:2A:AB:4C:FB:74 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS200676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 22:39:ff:ee:e4:53:7f:fd:eb:c8:a3:09:2c:df:97:f5:07:cc: 7a:7d:a0:10:c2:a7:22:a5:76:1a:1f:8d:d5:91:48:2b:da:9f: 6f:dc:03:33:8a:ea:96:e5:b8:e5:78:18:77:bb:67:c6:19:80: 1f:aa:91:04:c8:11:7c:bd:70:3e:ec:8c:c0:7d:14:c3:49:e8: bd:35:0c:52:ba:2c:9c:29:cb:68:ec:42:da:c4:24:fe:ab:00: 88:bb:08:61:0a:3f:89:55:cd:e9:e9:c5:e7:19:21:7c:6c:4b: 2d:ef:a0:b7:85:5c:bb:2b:0d:dc:7c:7d:03:cd:36:89:0e:61: d4:26:86:2d:78:96:a7:54:46:3e:37:db:6a:9f:c5:36:25:9d: 87:ca:fa:03:bd:45:a3:7e:07:5e:61:ef:b4:57:0d:cd:30:47: 5d:e3:94:bc:d2:7b:3d:e6:ee:1a:4e:19:55:cb:0e:55:19:50: 2d:05:d7:fd:56:7e:de:c0:58:db:5c:dd:2c:7c:03:6e:40:3b: 1b:33:e4:65:a9:a3:82:9f:22:60:a2:d0:94:49:68:22:2c:93: fc:e7:b7:ee:27:4b:36:97:ad:b7:75:f2:0a:87:80:2f:87:3d: 11:c1:8e:19:37:3a:46:aa:71:7e:ae:f1:e5:e1:56:8d:d4:d4: e4:67:cc:da -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUB91i4kKl6yyedzbV0ttZKLHr1YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NThaFw0yNTA4MTkwMjMxNThaMDMxMTAvBgNV BAMTKDcyNTY3QzkyRTIxQjVFMTU1MUUyN0RDMjcxRDMzQzJBQUI0Q0ZCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJzdfTr6a5weDW34J5UH9OyyD E91YPzgwWCY+eqUulmsBxCuDxreZA/xNDm/Lefb5UNmTBzaZ1oTWsbRMsARcMl35 2R9R8F5Ss9bYl6RzaiAYjbBDqWvsYtQCBqPrcnIvQvCYZulcCBLbhF32YAeg5UTB mHjaaZAkGhBhe5yHp4TzkGo7pitLn+oo6BtwqeOIAkXgMtjQYEiIGFQoNr/lXNLZ I+FDqzpqlCZHaDpwaovPaiP1wX3SDRkg7QkLHYMpHQNocRZn9/qklYbtayhQxfBp ohbYP3qCjhhw6fwS5Oz+UPWJhqbCLlrtH8V6QRb2MqMGEnKRPxBuFi6Ki8mbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUclZ8kuIbXhVR4n3CcdM8KqtM+3QwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjAwNjc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQAiOf/u5FN//evIowks35f1B8x6faAQwqci pXYaH43VkUgr2p9v3AMziuqW5bjleBh3u2fGGYAfqpEEyBF8vXA+7IzAfRTDSei9 NQxSuiycKcto7ELaxCT+qwCIuwhhCj+JVc3p6cXnGSF8bEst76C3hVy7Kw3cfH0D zTaJDmHUJoYteJanVEY+N9tqn8U2JZ2HyvoDvUWjfgdeYe+0Vw3NMEdd45S80ns9 5u4aThlVyw5VGVAtBdf9Vn7ewFjbXN0sfANuQDsbM+RlqaOCnyJgotCUSWgiLJP8 57fuJ0s2l623dfIKh4Avhz0RwY4ZNzpGqnF+rvHl4VaN1NTkZ8za -----END CERTIFICATE-----Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org