$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50755.roa File: AS50755.roa (raw, json) Hash identifier: 5H2uGVBVuQmOc2nZV/3cPDoAwD0pO1AvEBenv1YpWSQ= Subject key identifier: 8D:74:F4:7C:BD:2A:18:B9:A0:C1:65:CD:EC:AC:FF:D1:55:CD:51:BE Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 34EFD6231BDBA6E963A26D0DFF859B8B26DEA884 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50755.roa Signing time: Tue 20 Aug 2024 02:31:56 +0000 ROA not before: Tue 20 Aug 2024 02:26:56 +0000 ROA not after: Tue 19 Aug 2025 02:31:56 +0000 asID: 50755 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ef:d6:23:1b:db:a6:e9:63:a2:6d:0d:ff:85:9b:8b:26:de:a8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:56 2024 GMT Not After : Aug 19 02:31:56 2025 GMT Subject: CN=8D74F47CBD2A18B9A0C165CDECACFFD155CD51BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:f7:bc:75:1d:ed:3e:07:ec:c2:c9:c0:09: 96:e8:3c:19:79:6a:23:24:71:06:08:94:c0:7c:ce: fa:6f:86:1f:2a:d2:d2:b6:47:b2:a1:5b:2d:23:64: af:26:6f:0d:55:d1:ce:2a:72:ef:47:ef:bf:c9:12: 1f:fe:7f:78:36:a6:c6:49:df:11:88:f3:c6:06:26: d2:19:54:2b:d0:9d:f0:56:96:c6:e6:d1:72:7d:0d: bc:90:93:60:04:e5:37:c6:6d:0e:22:8e:86:88:cf: 0b:83:4e:77:70:ab:cb:10:f2:5f:7d:10:4f:fe:88: e3:ee:06:ed:86:eb:86:fa:dd:17:46:67:d3:16:ca: 71:cd:93:13:42:2f:d4:3a:4e:9f:d4:be:7b:e7:4a: 4c:3e:7c:26:c3:69:3d:ec:f5:a7:ff:15:42:ef:74: cc:4b:70:87:f4:29:5d:ab:e7:6b:d7:61:d1:90:f4: 99:2a:d2:80:fd:5f:02:0e:d6:29:40:95:1c:96:85: d7:e2:6d:22:ab:9c:cc:26:db:b8:4b:62:97:99:89: 86:48:cf:23:53:77:61:5a:55:02:d9:70:38:cd:19: f0:50:d4:11:f0:91:8d:c9:7d:37:41:e2:ea:67:00: e0:86:59:20:92:23:31:bc:e5:36:bc:58:66:0b:96: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:F4:7C:BD:2A:18:B9:A0:C1:65:CD:EC:AC:FF:D1:55:CD:51:BE X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50755.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 88:fa:b6:81:fc:3f:fc:5b:33:cc:f5:be:66:26:08:e9:9c:d2: 31:28:ff:91:42:95:66:50:79:fa:25:b3:6f:8d:ca:72:c2:17: c6:ab:0e:ff:01:e5:73:53:87:28:1a:b9:05:48:5b:ce:bd:13: bf:0a:72:68:89:1f:56:bf:2f:88:c5:17:fa:e0:33:3c:c4:97: ce:5e:2f:81:47:cf:30:60:1c:f2:e6:38:f3:79:ba:94:99:9d: b2:55:c4:61:59:84:50:b9:db:3d:ac:1c:7a:34:dc:65:42:92: 0a:65:ba:00:39:2d:c1:75:e1:68:a4:f5:e2:2c:5f:5a:de:01: d9:82:d4:24:2b:4d:32:ed:0b:1a:2a:cf:42:b8:52:71:25:e6: d2:d8:a8:f2:ee:2a:c9:68:09:62:13:89:f9:20:47:26:05:f2: 12:c8:95:bd:cd:7e:41:b9:5f:3d:4d:97:dc:70:d8:52:e0:2b: b4:f6:4d:59:30:77:16:42:cd:1f:5d:54:f0:94:97:23:b6:9b: 41:dc:ba:14:3b:06:6c:54:8f:d4:4d:67:6c:6c:50:83:18:73: e6:05:84:de:0c:ef:8e:dc:dc:1d:b3:20:6e:b0:08:36:c1:6d: ad:9f:6f:ef:37:9e:10:0f:ee:2d:dc:95:62:9c:b7:02:60:5e: 18:98:df:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNO/WIxvbpuljom0N/4WbiybeqIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTZaFw0yNTA4MTkwMjMxNTZaMDMxMTAvBgNV BAMTKDhENzRGNDdDQkQyQTE4QjlBMEMxNjVDREVDQUNGRkQxNTVDRDUxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4Pe8dR3tPgfswsnACZboPBl5 aiMkcQYIlMB8zvpvhh8q0tK2R7KhWy0jZK8mbw1V0c4qcu9H77/JEh/+f3g2psZJ 3xGI88YGJtIZVCvQnfBWlsbm0XJ9DbyQk2AE5TfGbQ4ijoaIzwuDTndwq8sQ8l99 EE/+iOPuBu2G64b63RdGZ9MWynHNkxNCL9Q6Tp/UvnvnSkw+fCbDaT3s9af/FULv dMxLcIf0KV2r52vXYdGQ9Jkq0oD9XwIO1ilAlRyWhdfibSKrnMwm27hLYpeZiYZI zyNTd2FaVQLZcDjNGfBQ1BHwkY3JfTdB4upnAOCGWSCSIzG85Ta8WGYLlrHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjXT0fL0qGLmgwWXN7Kz/0VXNUb4wHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTA3NTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAIj6toH8P/xbM8z1vmYmCOmc0jEo/5FClWZQ efols2+NynLCF8arDv8B5XNThygauQVIW869E78KcmiJH1a/L4jFF/rgMzzEl85e L4FHzzBgHPLmOPN5upSZnbJVxGFZhFC52z2sHHo03GVCkgplugA5LcF14Wik9eIs X1reAdmC1CQrTTLtCxoqz0K4UnEl5tLYqPLuKsloCWITifkgRyYF8hLIlb3NfkG5 Xz1Nl9xw2FLgK7T2TVkwdxZCzR9dVPCUlyO2m0HcuhQ7BmxUj9RNZ2xsUIMYc+YF hN4M747c3B2zIG6wCDbBba2fb+83nhAP7i3clWKctwJgXhiY34U= -----END CERTIFICATE-----Generated at Thu Nov 21 12:08:37 2024 by rpki-client on console-fra.rpki-client.org