$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS206016.roa File: AS206016.roa (raw, json) Hash identifier: onJtMFstmTdlWe3s60ntUHX+Q206Q8RzIK9KrXWk4dA= Subject key identifier: 4A:AE:92:BA:43:29:29:92:FF:07:CE:82:63:93:C4:4D:ED:70:DC:5A Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 092471DD699086BC5C878009F81D09F87598CA44 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS206016.roa Signing time: Tue 20 Aug 2024 02:31:55 +0000 ROA not before: Tue 20 Aug 2024 02:26:55 +0000 ROA not after: Tue 19 Aug 2025 02:31:55 +0000 asID: 206016 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:24:71:dd:69:90:86:bc:5c:87:80:09:f8:1d:09:f8:75:98:ca:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:55 2024 GMT Not After : Aug 19 02:31:55 2025 GMT Subject: CN=4AAE92BA43292992FF07CE826393C44DED70DC5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:15:cd:da:4e:3b:eb:17:e5:cf:cc:dd:ba: 1f:1b:57:12:ed:5a:ee:7c:49:07:16:af:e6:1a:39: 59:6e:65:ed:f7:c9:0a:3d:dc:7c:32:6d:08:37:57: 9b:ff:a3:bb:e8:38:d2:2c:4a:dc:46:24:11:6d:50: 39:22:e1:c0:b4:c7:be:55:3c:3d:2a:25:53:b6:bb: a7:ee:b3:e6:a6:ce:e9:18:b6:4c:ba:a4:96:de:dd: fe:c4:9f:e1:ad:ba:83:66:16:7d:47:2f:03:f7:98: de:df:d1:72:e0:6b:f1:fd:be:20:93:0d:8f:8a:f7: 30:e1:69:1a:17:92:30:a5:59:1c:5a:77:6f:c1:34: bf:a1:87:1a:dd:45:4c:eb:a8:a4:a1:f2:19:5a:b1: 61:c8:e8:8f:fa:bd:54:13:41:24:4a:9d:cf:7e:b5: 3c:04:c3:26:1b:07:32:ea:b3:90:d3:d5:e6:e6:6e: 7a:55:a6:b2:8b:ab:3d:36:32:82:f2:7f:29:c6:18: de:49:e4:9f:b4:04:37:a1:99:ef:37:ce:41:cd:94: 35:66:61:9a:71:45:9c:5d:8d:a2:96:83:d0:d8:21: 75:d8:22:b3:4d:f4:63:35:d3:20:0f:38:96:17:cc: 4b:0c:60:4d:2d:32:b3:9b:60:da:28:41:89:bf:d2: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:92:BA:43:29:29:92:FF:07:CE:82:63:93:C4:4D:ED:70:DC:5A X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS206016.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 6a:4d:bf:a2:70:cc:af:ca:97:f0:20:44:82:07:98:79:68:c2: b4:b6:0d:b9:b5:7d:b1:58:5b:a9:74:eb:1c:30:81:1b:41:75: e6:f6:3c:9d:b7:9a:ba:20:bd:d3:e5:c4:6c:3b:81:a2:05:f3: 6f:81:d1:0c:bc:d2:0d:7d:b1:0e:6b:b9:5e:51:be:4d:cb:6c: 8d:4e:93:00:f8:5b:fe:89:7f:4f:c1:fa:40:02:9e:15:d9:d3: 22:2d:ec:f7:98:cf:b8:ec:aa:fb:0a:bf:fe:bc:b5:b6:b7:96: 3d:c4:fd:22:f7:08:34:7d:aa:2a:2f:83:fc:98:77:86:4e:a1: d8:cd:bd:49:c2:0d:67:21:63:94:99:ea:9f:86:9e:f1:51:21: c6:77:f1:ec:7f:df:eb:75:72:f9:23:6b:aa:64:cb:1a:9b:d1: 30:ce:62:10:07:38:bd:7c:f8:3e:76:c6:47:ec:0b:f1:95:f3: ac:59:06:77:7a:2b:8a:f0:42:2e:48:6f:a1:ec:e5:a5:c0:74: f1:59:fd:c9:5c:ee:56:75:22:2b:20:6a:40:2a:bb:c3:da:f6: b7:4d:80:79:58:db:c1:d6:cf:40:29:a9:1b:c2:4f:72:ba:39: c1:89:a6:12:cc:35:40:2e:13:1b:94:da:3b:47:8c:9c:d3:2b: 29:b7:76:0f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCSRx3WmQhrxch4AJ+B0J+HWYykQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTVaFw0yNTA4MTkwMjMxNTVaMDMxMTAvBgNV BAMTKDRBQUU5MkJBNDMyOTI5OTJGRjA3Q0U4MjYzOTNDNDRERUQ3MERDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZhXN2k476xflz8zduh8bVxLt Wu58SQcWr+YaOVluZe33yQo93HwybQg3V5v/o7voONIsStxGJBFtUDki4cC0x75V PD0qJVO2u6fus+amzukYtky6pJbe3f7En+GtuoNmFn1HLwP3mN7f0XLga/H9viCT DY+K9zDhaRoXkjClWRxad2/BNL+hhxrdRUzrqKSh8hlasWHI6I/6vVQTQSRKnc9+ tTwEwyYbBzLqs5DT1ebmbnpVprKLqz02MoLyfynGGN5J5J+0BDehme83zkHNlDVm YZpxRZxdjaKWg9DYIXXYIrNN9GM10yAPOJYXzEsMYE0tMrObYNooQYm/0rR5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSq6SukMpKZL/B86CY5PETe1w3FowHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjA2MDE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU wrALMA0GCSqGSIb3DQEBCwUAA4IBAQBqTb+icMyvypfwIESCB5h5aMK0tg25tX2x WFupdOscMIEbQXXm9jydt5q6IL3T5cRsO4GiBfNvgdEMvNINfbEOa7leUb5Ny2yN TpMA+Fv+iX9PwfpAAp4V2dMiLez3mM+47Kr7Cr/+vLW2t5Y9xP0i9wg0faoqL4P8 mHeGTqHYzb1Jwg1nIWOUmeqfhp7xUSHGd/Hsf9/rdXL5I2uqZMsam9EwzmIQBzi9 fPg+dsZH7AvxlfOsWQZ3eiuK8EIuSG+h7OWlwHTxWf3JXO5WdSIrIGpAKrvD2va3 TYB5WNvB1s9AKakbwk9yujnBiaYSzDVALhMblNo7R4yc0yspt3YP -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org