$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS44570.roa File: AS44570.roa (raw, json) Hash identifier: WWfkQnmadDnZTsJtkqA80hN2lZQbNwjxvXe9EYPcTuE= Subject key identifier: 82:5B:C6:F1:01:75:27:3D:0C:E0:8F:E2:45:30:32:0A:38:34:99:6D Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 5E05FF92C789782259B687160F9E710A40C53BA0 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS44570.roa Signing time: Tue 19 Sep 2023 02:14:55 +0000 ROA not before: Tue 19 Sep 2023 02:09:55 +0000 ROA not after: Tue 17 Sep 2024 02:14:55 +0000 asID: 44570 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:05:ff:92:c7:89:78:22:59:b6:87:16:0f:9e:71:0a:40:c5:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:55 2023 GMT Not After : Sep 17 02:14:55 2024 GMT Subject: CN=825BC6F10175273D0CE08FE24530320A3834996D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:34:34:c2:73:52:ce:02:20:67:1b:20:f7:54: 2f:9a:53:e8:c7:69:65:b7:4a:91:e8:41:71:ae:92: 4a:54:67:b5:6c:d9:45:0a:d1:35:32:5b:6a:d1:00: ef:61:22:66:53:63:4f:b1:b7:9a:0e:c8:d1:ec:dd: 38:df:79:8b:d7:8c:69:ef:a9:46:ae:ba:b2:6a:48: 28:80:9a:08:28:17:d1:02:62:08:0e:cc:fd:ce:d3: b6:18:09:a2:c7:79:3a:0c:4d:76:28:50:f2:8c:08: 64:9a:e3:4a:a4:d7:41:9e:f8:19:8c:02:62:88:ff: 08:09:30:c1:b7:d4:b3:58:1d:38:97:19:a2:5b:b0: 49:8e:e5:54:5a:50:a6:20:2d:aa:e8:db:3f:55:0a: 58:22:ed:63:67:10:97:40:ec:94:46:27:0a:e3:c9: da:58:44:2b:1b:a3:b8:52:24:e7:3f:29:eb:56:20: 3e:f6:fc:d0:bd:bc:17:ca:4e:7f:b9:8b:59:cd:60: aa:3b:51:91:d5:a9:06:1e:23:38:2a:a0:6e:45:2d: ca:0a:a5:4e:38:74:ae:3a:b2:b9:ef:90:ab:31:b1: b8:93:e8:5d:55:3f:50:b2:b3:71:eb:1a:f0:03:e7: 52:50:af:8e:45:c6:7f:b6:bc:df:06:90:24:43:3a: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5B:C6:F1:01:75:27:3D:0C:E0:8F:E2:45:30:32:0A:38:34:99:6D X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS44570.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption a1:49:ce:26:30:ec:5d:82:d4:e4:8c:a0:fd:ed:c7:ec:df:2a: b0:ff:88:09:00:de:eb:1b:36:2a:f2:1f:ce:45:3b:26:cd:e7: f2:2d:38:fc:89:03:48:c5:20:0f:17:74:62:5a:5c:96:90:18: 83:cb:32:fd:d0:58:12:e2:87:9f:3c:7e:5c:e4:a1:00:d1:b5: d3:d6:c5:a6:20:8f:6a:02:04:54:9f:f4:b3:7d:ed:9d:22:e8: 2c:95:de:fe:b1:68:7c:16:99:0d:d3:cc:af:f8:ca:8a:e1:6b: e5:c8:5a:1d:44:60:2a:1c:d6:24:8d:ae:aa:1b:ea:7f:82:74: 98:6a:b5:e1:b1:d9:69:28:0a:be:ad:fd:a8:f7:22:be:c9:cb: 80:5d:71:6a:18:a3:d0:fd:25:a5:72:a0:27:90:ff:f6:f6:c3: fc:5e:12:e7:ca:65:67:e2:2d:54:92:6f:20:c8:69:d6:05:8d: 28:11:c8:e1:e3:b8:96:18:ad:b4:7e:ca:2a:b6:a5:a9:e2:16: 89:ac:8b:ba:8c:dd:5e:5f:35:39:e9:af:f7:fb:bc:d5:ae:c1: 05:30:c3:a2:c6:10:8a:6e:e1:5b:69:db:86:d8:65:3e:85:db: ad:ef:6c:da:e3:9b:99:db:1c:86:16:52:a4:15:c1:5a:2e:ff: db:9e:c1:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgX/kseJeCJZtocWD55xCkDFO6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTVaFw0yNDA5MTcwMjE0NTVaMDMxMTAvBgNV BAMTKDgyNUJDNkYxMDE3NTI3M0QwQ0UwOEZFMjQ1MzAzMjBBMzgzNDk5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6NDTCc1LOAiBnGyD3VC+aU+jH aWW3SpHoQXGukkpUZ7Vs2UUK0TUyW2rRAO9hImZTY0+xt5oOyNHs3TjfeYvXjGnv qUauurJqSCiAmggoF9ECYggOzP3O07YYCaLHeToMTXYoUPKMCGSa40qk10Ge+BmM AmKI/wgJMMG31LNYHTiXGaJbsEmO5VRaUKYgLaro2z9VClgi7WNnEJdA7JRGJwrj ydpYRCsbo7hSJOc/KetWID72/NC9vBfKTn+5i1nNYKo7UZHVqQYeIzgqoG5FLcoK pU44dK46srnvkKsxsbiT6F1VP1Cys3HrGvAD51JQr45Fxn+2vN8GkCRDOiahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUglvG8QF1Jz0M4I/iRTAyCjg0mW0wHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNDQ1NzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAKFJziYw7F2C1OSMoP3tx+zfKrD/iAkA3usb NiryH85FOybN5/ItOPyJA0jFIA8XdGJaXJaQGIPLMv3QWBLih588flzkoQDRtdPW xaYgj2oCBFSf9LN97Z0i6CyV3v6xaHwWmQ3TzK/4yorha+XIWh1EYCoc1iSNrqob 6n+CdJhqteGx2WkoCr6t/aj3Ir7Jy4BdcWoYo9D9JaVyoCeQ//b2w/xeEufKZWfi LVSSbyDIadYFjSgRyOHjuJYYrbR+yiq2paniFomsi7qM3V5fNTnpr/f7vNWuwQUw w6LGEIpu4Vtp24bYZT6F263vbNrjm5nbHIYWUqQVwVou/9ueweg= -----END CERTIFICATE-----Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org