$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210935.roa File: AS210935.roa (raw, json) Hash identifier: FuwLb5ZSkKQD185g/afHTqxILQJjAvekKI54DNRWs4Q= Subject key identifier: 97:C4:54:4D:7E:0E:2D:8D:F1:BA:84:69:82:38:2D:00:B1:48:66:23 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 375E5EB4EBF7A57CA348E89F07AFD75796E4A727 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210935.roa Signing time: Tue 19 Sep 2023 02:14:56 +0000 ROA not before: Tue 19 Sep 2023 02:09:56 +0000 ROA not after: Tue 17 Sep 2024 02:14:56 +0000 asID: 210935 IP address blocks: 2a07:54c4:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5e:5e:b4:eb:f7:a5:7c:a3:48:e8:9f:07:af:d7:57:96:e4:a7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:56 2023 GMT Not After : Sep 17 02:14:56 2024 GMT Subject: CN=97C4544D7E0E2D8DF1BA846982382D00B1486623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:7e:93:b6:34:9b:4a:0a:1f:6e:0c:02:af: eb:0f:3a:73:b9:2d:57:ed:77:8d:0b:cf:25:46:73: 5d:df:ec:c4:f3:ea:09:5f:d6:a8:22:29:3c:81:45: 5b:5c:a3:47:ec:71:85:f3:11:e8:3b:3b:79:50:c1: 71:f1:69:cd:9b:4a:5a:38:97:13:19:87:e8:c3:56: d5:c7:7c:7f:86:1d:77:b6:ed:30:8e:21:80:c0:84: 0e:3d:1f:58:86:8c:9c:c6:40:ea:88:11:eb:63:4e: 3b:55:00:69:37:d2:65:91:bc:fe:e8:a9:97:70:b8: f5:8b:5e:65:bc:57:aa:0f:bc:89:db:d7:13:c0:a0: 9d:c8:29:5a:a6:88:ec:b9:66:b2:4c:f2:d8:ac:30: 09:f6:15:95:67:23:e8:01:cf:1a:13:94:7f:fb:ea: 07:c2:76:43:6d:9b:18:60:11:e7:c2:60:9c:87:6e: 61:a1:3d:cc:4f:70:13:1e:fc:1e:99:9d:68:ff:d9: fb:b9:0c:74:72:9d:90:93:64:9e:6e:f8:20:cc:d7: f6:b2:26:76:dc:c6:90:85:6d:4e:eb:aa:8d:b3:d3: 63:73:50:bf:01:6c:c6:c3:b8:49:52:ef:d6:8b:b9: a7:f4:77:c0:73:08:5e:92:03:7c:23:0b:fb:ef:e9: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C4:54:4D:7E:0E:2D:8D:F1:BA:84:69:82:38:2D:00:B1:48:66:23 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS210935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c4:1::/48 Signature Algorithm: sha256WithRSAEncryption 20:4d:6f:70:43:21:ce:37:43:ba:40:47:ec:1a:af:52:66:cd: 2a:6a:14:25:05:84:3a:a2:18:b1:96:ac:0c:c1:9d:c5:3b:6d: 94:40:22:29:d8:a3:7d:41:bf:d5:06:41:c7:51:da:df:42:80: 43:09:d3:39:1c:82:3a:87:7e:e4:63:43:8d:d6:2b:1d:4f:bd: 41:5d:7b:0c:ab:2c:55:42:4e:54:e8:e0:ec:d0:5f:65:56:e3: 88:ff:14:49:d8:f2:f2:d0:52:82:12:8a:97:12:09:cf:c8:d1: d1:25:ed:de:21:e7:9e:fe:ec:71:43:8f:e1:be:c4:64:3e:7b: 2e:e4:4b:ae:db:11:27:d7:fa:91:e0:a8:3a:1c:83:63:2a:fe: 59:e9:9f:0c:06:51:69:e0:68:1d:dd:d6:6e:43:40:97:8f:81: bf:bb:8e:78:b1:65:9b:57:98:39:b8:11:94:37:71:3d:54:1d: 1a:6d:6d:6e:3d:e3:4a:8d:82:27:b1:57:07:48:d1:88:3c:d3: 79:5c:09:f2:b9:65:07:b4:e3:8b:2c:86:b4:46:8f:82:6d:41: 93:d8:3a:66:d5:6e:83:77:2c:79:99:ff:4b:df:f9:46:e5:91: a3:5e:ab:4f:f0:2a:37:f0:20:df:54:0e:50:50:aa:08:a9:31: b6:2c:96:b4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUN15etOv3pXyjSOifB6/XV5bkpycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTZaFw0yNDA5MTcwMjE0NTZaMDMxMTAvBgNV BAMTKDk3QzQ1NDREN0UwRTJEOERGMUJBODQ2OTgyMzgyRDAwQjE0ODY2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrH6TtjSbSgofbgwCr+sPOnO5 LVftd40LzyVGc13f7MTz6glf1qgiKTyBRVtco0fscYXzEeg7O3lQwXHxac2bSlo4 lxMZh+jDVtXHfH+GHXe27TCOIYDAhA49H1iGjJzGQOqIEetjTjtVAGk30mWRvP7o qZdwuPWLXmW8V6oPvInb1xPAoJ3IKVqmiOy5ZrJM8tisMAn2FZVnI+gBzxoTlH/7 6gfCdkNtmxhgEefCYJyHbmGhPcxPcBMe/B6ZnWj/2fu5DHRynZCTZJ5u+CDM1/ay JnbcxpCFbU7rqo2z02NzUL8BbMbDuElS79aLuaf0d8BzCF6SA3wjC/vv6cTnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUl8RUTX4OLY3xuoRpgjgtALFIZiMwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjEwOTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdU xAABMA0GCSqGSIb3DQEBCwUAA4IBAQAgTW9wQyHON0O6QEfsGq9SZs0qahQlBYQ6 ohixlqwMwZ3FO22UQCIp2KN9Qb/VBkHHUdrfQoBDCdM5HII6h37kY0ON1isdT71B XXsMqyxVQk5U6ODs0F9lVuOI/xRJ2PLy0FKCEoqXEgnPyNHRJe3eIeee/uxxQ4/h vsRkPnsu5Euu2xEn1/qR4Kg6HINjKv5Z6Z8MBlFp4Ggd3dZuQ0CXj4G/u454sWWb V5g5uBGUN3E9VB0abW1uPeNKjYInsVcHSNGIPNN5XAnyuWUHtOOLLIa0Ro+CbUGT 2Dpm1W6Ddyx5mf9L3/lG5ZGjXqtP8Co38CDfVA5QUKoIqTG2LJa0 -----END CERTIFICATE-----Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org