$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa File: AS215280.roa (raw, json) Hash identifier: yCftr4mi6xiAbprH/+T19c9lVbQpU72Tnc6GimhFUog= Subject key identifier: E3:11:8F:DC:A6:AC:12:60:B6:B3:A4:70:C5:D3:DC:E1:67:B8:B6:EF Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 618203DA078C2FD23D3F3DEAA8C0DFFDED9FE3A9 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa Signing time: Wed 20 Mar 2024 23:20:40 +0000 ROA not before: Wed 20 Mar 2024 23:15:40 +0000 ROA not after: Wed 19 Mar 2025 23:20:40 +0000 asID: 215280 IP address blocks: 2a07:54c1:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:82:03:da:07:8c:2f:d2:3d:3f:3d:ea:a8:c0:df:fd:ed:9f:e3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Mar 20 23:15:40 2024 GMT Not After : Mar 19 23:20:40 2025 GMT Subject: CN=E3118FDCA6AC1260B6B3A470C5D3DCE167B8B6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:58:df:36:30:22:fe:14:d7:6f:d7:5c:a3: c9:4b:44:f0:35:cb:4e:f9:b3:f8:85:3f:58:fb:25: ef:b0:59:88:b9:cd:62:28:7f:5d:64:e5:1d:d2:85: 36:fa:63:0d:8b:e8:a4:c2:40:02:1a:52:17:3c:46: 02:77:66:09:25:83:5c:ba:5a:89:aa:29:5c:3c:60: 32:38:65:38:55:c0:60:1e:62:66:b5:5d:39:41:f4: ac:fc:59:50:a2:35:b4:8c:9e:7e:95:0f:67:42:f7: 81:78:d3:a4:e3:a8:a2:a3:33:47:e4:e4:71:ca:f5: 63:97:da:43:90:64:06:ee:90:0e:f8:05:0b:7a:2c: 37:5c:b8:e4:39:0a:18:94:5f:2a:d9:e7:cf:38:a2: bb:1a:92:30:23:74:82:86:8b:e4:ce:2e:25:6b:57: 9a:a4:5f:98:51:9c:02:18:43:76:78:1f:ca:0d:88: 25:3a:c1:1b:91:4a:86:eb:6e:db:4a:d2:84:ad:62: bb:0b:df:7d:12:dc:f1:bb:90:93:8c:3a:7c:1a:3e: 72:ed:a1:72:b1:07:50:ce:c4:1a:f3:93:ff:f7:3b: b2:96:ff:4f:3c:11:be:28:9a:82:67:5f:af:3c:3f: dd:fc:eb:32:f8:62:0d:6f:7b:2a:b6:52:da:57:d6: b6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:11:8F:DC:A6:AC:12:60:B6:B3:A4:70:C5:D3:DC:E1:67:B8:B6:EF X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS215280.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:3800::/40 Signature Algorithm: sha256WithRSAEncryption 41:4f:14:8d:91:af:38:37:c1:eb:86:d3:a2:22:83:6b:c8:a9: ea:91:18:7b:c1:cc:45:3f:de:b5:93:8f:c8:a9:3b:b8:1b:8c: 5d:7e:21:2d:88:67:b5:8f:c8:fb:48:f3:4f:30:15:1e:d6:72: 0c:c3:53:d2:ba:fe:22:f6:12:f9:aa:c5:c1:55:16:3c:ec:a9: a2:3c:f1:92:82:be:2e:83:c2:7a:63:01:ac:9c:a3:28:0a:77: ac:e6:7a:3a:c3:d3:eb:c6:f5:de:ee:8c:d2:38:fe:e6:d1:40: 80:c5:bb:39:22:34:39:32:ef:3e:fd:81:24:ed:8e:68:ad:79: b8:e3:9a:34:52:2d:4f:33:93:bc:9c:67:85:7f:42:f9:9e:33: 93:8a:17:02:95:55:67:15:fb:26:ad:9b:f3:64:42:9d:7d:8c: a8:d1:2b:7f:2a:83:eb:1a:43:74:3c:af:dc:11:cc:2f:2a:d1: 73:41:26:ff:06:21:e6:ac:fb:22:0b:9d:78:24:a1:2a:a6:15: 4b:f4:fc:00:4e:f5:16:11:98:66:61:98:4a:9a:b4:21:3f:30: d7:ba:55:78:2b:d1:bc:b1:40:08:d4:19:bd:e9:29:db:6e:63: 42:bf:ab:b8:d4:d6:51:8a:29:68:80:71:35:37:b0:32:c0:9f: 62:cb:b3:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYYID2geML9I9Pz3qqMDf/e2f46kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDAzMjAyMzE1NDBaFw0yNTAzMTkyMzIwNDBaMDMxMTAvBgNV BAMTKEUzMTE4RkRDQTZBQzEyNjBCNkIzQTQ3MEM1RDNEQ0UxNjdCOEI2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzu1jfNjAi/hTXb9dco8lLRPA1 y075s/iFP1j7Je+wWYi5zWIof11k5R3ShTb6Yw2L6KTCQAIaUhc8RgJ3Zgklg1y6 WomqKVw8YDI4ZThVwGAeYma1XTlB9Kz8WVCiNbSMnn6VD2dC94F406TjqKKjM0fk 5HHK9WOX2kOQZAbukA74BQt6LDdcuOQ5ChiUXyrZ5884orsakjAjdIKGi+TOLiVr V5qkX5hRnAIYQ3Z4H8oNiCU6wRuRSobrbttK0oStYrsL330S3PG7kJOMOnwaPnLt oXKxB1DOxBrzk//3O7KW/088Eb4omoJnX688P9386zL4Yg1veyq2UtpX1ra1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4xGP3KasEmC2s6RwxdPc4We4tu8wHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTMjE1MjgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU wTgwDQYJKoZIhvcNAQELBQADggEBAEFPFI2Rrzg3weuG06Iig2vIqeqRGHvBzEU/ 3rWTj8ipO7gbjF1+IS2IZ7WPyPtI808wFR7WcgzDU9K6/iL2EvmqxcFVFjzsqaI8 8ZKCvi6DwnpjAaycoygKd6zmejrD0+vG9d7ujNI4/ubRQIDFuzkiNDky7z79gSTt jmitebjjmjRSLU8zk7ycZ4V/QvmeM5OKFwKVVWcV+yatm/NkQp19jKjRK38qg+sa Q3Q8r9wRzC8q0XNBJv8GIeas+yILnXgkoSqmFUv0/ABO9RYRmGZhmEqatCE/MNe6 VXgr0byxQAjUGb3pKdtuY0K/q7jU1lGKKWiAcTU3sDLAn2LLs5A= -----END CERTIFICATE-----Generated at Thu Nov 21 12:08:37 2024 by rpki-client on console-fra.rpki-client.org