$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204901.roa File: AS204901.roa (raw, json) Hash identifier: jdLWRI735fzFBUdQoX4Qd/YU6UeVALjke74lfBNd5iw= Subject key identifier: B0:0B:3D:3A:7C:37:40:48:CC:9B:86:75:80:92:02:78:E6:CB:54:98 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 19AB3BB1A1376520AAD41473E79CF24A49585E18 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204901.roa Signing time: Tue 20 Aug 2024 02:31:54 +0000 ROA not before: Tue 20 Aug 2024 02:26:54 +0000 ROA not after: Tue 19 Aug 2025 02:31:54 +0000 asID: 204901 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ab:3b:b1:a1:37:65:20:aa:d4:14:73:e7:9c:f2:4a:49:58:5e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:54 2024 GMT Not After : Aug 19 02:31:54 2025 GMT Subject: CN=B00B3D3A7C374048CC9B867580920278E6CB5498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:8b:9d:c1:cb:71:ec:5c:e9:75:c2:2a:e6: c4:cd:47:e4:50:7c:61:41:12:4e:c4:47:e3:e0:c1: b1:ec:4a:46:33:b8:ab:e4:b5:9a:7c:28:08:c2:f0: d1:1a:e8:76:6a:59:4a:14:d0:9e:35:6b:6a:17:68: 21:56:49:78:06:3f:26:69:dc:7c:d0:57:83:0c:2f: 3a:4d:94:10:75:d4:d3:67:a5:2e:0b:f6:3b:52:d1: 8e:7c:74:6d:51:0b:f9:45:61:8d:40:a2:e5:9b:ac: 5f:47:19:ab:d7:27:1a:48:6a:db:02:47:40:d1:ad: b9:bd:50:9d:64:a6:f1:8d:51:69:c2:bb:aa:ce:8f: fb:24:ea:d8:eb:49:b1:9a:d7:a9:0d:66:b5:ea:1d: 39:5e:c5:43:fe:d0:a6:47:be:26:21:06:38:7b:ad: 5b:51:bd:24:60:d8:ee:54:ff:12:15:fd:50:23:83: 83:88:85:a1:38:f8:c8:41:1e:75:4c:73:69:c9:9c: c6:e8:f7:ba:fd:a1:2f:07:a1:fe:b7:7d:da:03:bb: 32:8e:59:00:22:ea:8c:db:d6:47:1b:51:f2:d3:bb: 2c:36:59:30:23:e6:59:8b:bc:b1:af:87:28:57:58: 19:c1:f6:58:fc:96:9e:ca:fd:32:a0:82:7c:2e:3f: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0B:3D:3A:7C:37:40:48:CC:9B:86:75:80:92:02:78:E6:CB:54:98 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS204901.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 7a:62:56:84:ba:1c:4c:03:cf:ce:e0:85:71:a4:c8:5e:6b:45: 6c:f7:b8:28:b6:7f:2b:4c:30:d9:6b:7f:df:df:1f:1e:c4:a2: 2c:4c:f7:45:80:fa:70:e3:65:c9:89:5e:ae:10:64:c7:0e:33: e2:4d:ab:9b:57:b5:56:42:7a:52:ac:0a:e8:71:46:40:0f:94: 41:c6:b4:79:ff:22:ef:26:4d:a2:96:62:f9:7d:75:2c:38:0f: 00:69:7b:7e:c1:82:98:39:0b:2e:6f:38:32:93:b1:d6:d2:bf: 85:36:a2:f1:5c:55:51:3c:97:32:b2:e8:b3:7c:a7:ac:03:97: 52:71:96:06:9f:4d:bf:62:fa:c1:8f:ff:d2:47:4d:c5:5a:ae: 6d:4c:e9:a5:d1:ff:dd:7c:7d:c9:e6:d2:5f:80:86:03:79:5c: 22:86:a3:ae:bd:01:d4:24:3b:59:3f:08:65:f6:23:9b:96:9f: 31:92:9c:1f:86:7c:88:5c:cb:b1:92:a0:44:9d:b4:73:ed:76: bf:29:94:56:0b:75:d9:02:b2:16:f5:7d:a7:f4:1a:3a:18:44: 34:bf:30:09:bd:3b:b4:f1:77:c4:68:28:04:0f:91:28:b8:14: d9:77:c4:68:51:64:95:ae:5a:6c:00:a4:c3:b3:bc:d9:b4:f8: 49:30:37:ef -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGas7saE3ZSCq1BRz55zySklYXhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTRaFw0yNTA4MTkwMjMxNTRaMDMxMTAvBgNV BAMTKEIwMEIzRDNBN0MzNzQwNDhDQzlCODY3NTgwOTIwMjc4RTZDQjU0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXIudwctx7FzpdcIq5sTNR+RQ fGFBEk7ER+PgwbHsSkYzuKvktZp8KAjC8NEa6HZqWUoU0J41a2oXaCFWSXgGPyZp 3HzQV4MMLzpNlBB11NNnpS4L9jtS0Y58dG1RC/lFYY1AouWbrF9HGavXJxpIatsC R0DRrbm9UJ1kpvGNUWnCu6rOj/sk6tjrSbGa16kNZrXqHTlexUP+0KZHviYhBjh7 rVtRvSRg2O5U/xIV/VAjg4OIhaE4+MhBHnVMc2nJnMbo97r9oS8Hof63fdoDuzKO WQAi6ozb1kcbUfLTuyw2WTAj5lmLvLGvhyhXWBnB9lj8lp7K/TKggnwuP/jPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUsAs9Onw3QEjMm4Z1gJICeObLVJgwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjA0OTAxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQB6YlaEuhxMA8/O4IVxpMhea0Vs97gotn8r TDDZa3/f3x8exKIsTPdFgPpw42XJiV6uEGTHDjPiTaubV7VWQnpSrArocUZAD5RB xrR5/yLvJk2ilmL5fXUsOA8AaXt+wYKYOQsubzgyk7HW0r+FNqLxXFVRPJcysuiz fKesA5dScZYGn02/YvrBj//SR03FWq5tTOml0f/dfH3J5tJfgIYDeVwihqOuvQHU JDtZPwhl9iOblp8xkpwfhnyIXMuxkqBEnbRz7Xa/KZRWC3XZArIW9X2n9Bo6GEQ0 vzAJvTu08XfEaCgED5EouBTZd8RoUWSVrlpsAKTDs7zZtPhJMDfv -----END CERTIFICATE-----Generated at Sun Nov 24 10:22:13 2024 by rpki-client on console-fra.rpki-client.org