$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50836.roa File: AS50836.roa (raw, json) Hash identifier: c+vibYRz060Mask+NtITJlQBMfkyaJ239wuwjqJEKU4= Subject key identifier: 14:D8:0D:24:E7:7C:4B:CD:57:A9:EC:FC:27:0C:A5:B3:88:CA:C1:9A Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 17601467640FCB83C1058801E0729B43C796712C Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50836.roa Signing time: Tue 19 Sep 2023 02:14:59 +0000 ROA not before: Tue 19 Sep 2023 02:09:59 +0000 ROA not after: Tue 17 Sep 2024 02:14:59 +0000 asID: 50836 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:60:14:67:64:0f:cb:83:c1:05:88:01:e0:72:9b:43:c7:96:71:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:59 2023 GMT Not After : Sep 17 02:14:59 2024 GMT Subject: CN=14D80D24E77C4BCD57A9ECFC270CA5B388CAC19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:62:f0:17:5e:7d:d5:7b:2d:b0:aa:4f:8b: 44:90:99:c7:fc:87:fc:61:eb:85:98:2b:14:99:95: fd:f6:31:60:72:0b:1d:eb:26:de:9e:54:f1:d2:1d: 99:12:c9:66:30:0a:c9:a6:3c:8e:30:08:19:97:3c: 4c:4f:1a:a9:26:9e:11:31:1f:31:45:47:54:ae:90: 56:25:9a:94:77:fe:fb:7b:40:58:d8:20:70:b0:e2: a9:ef:b0:95:23:3f:35:00:0b:13:0d:3c:89:86:11: 15:4b:3c:9b:37:61:d3:15:8f:cd:e5:fa:b9:f5:95: 61:59:e6:ee:43:f5:26:95:ea:b0:81:8c:a0:0d:2f: d5:a4:c6:c9:c0:69:90:b0:51:45:48:4e:ef:b2:6a: 3b:e6:3d:12:17:48:c6:a2:1c:49:97:a8:38:2f:59: b2:85:7b:6a:b7:64:a6:d0:bd:94:90:b3:d0:50:da: d7:8d:f2:51:20:8b:58:79:16:a3:14:6e:ec:e8:33: ad:52:26:35:70:95:56:e1:ce:cf:7e:c5:a0:af:9e: e3:44:59:14:20:d6:b3:f6:5d:20:4d:48:df:18:d2: ff:3c:e6:b5:00:3f:c9:c9:1b:4d:3a:60:a6:cf:7b: 58:5f:42:3c:55:c4:96:52:e4:19:b2:55:f3:f6:60: d1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D8:0D:24:E7:7C:4B:CD:57:A9:EC:FC:27:0C:A5:B3:88:CA:C1:9A X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 9c:e8:3e:0d:e9:05:49:82:bf:b9:f6:fc:3a:1a:88:ca:5b:85: f3:42:88:df:da:0f:f0:4b:99:1b:e4:d8:09:b9:61:9d:75:ae: 47:99:25:7c:32:8d:10:cc:2a:30:0c:50:39:88:d5:66:31:eb: f2:18:58:6d:47:bb:44:ce:9c:40:fb:92:35:88:86:23:25:90: ef:bc:6a:cb:00:14:65:58:0e:cc:77:d5:31:f4:6b:11:5d:ae: d2:22:eb:78:c1:5e:f2:26:82:6c:2a:b0:43:76:28:80:5f:d3: 86:49:91:ef:b1:a6:c7:79:82:81:90:a9:0b:5a:3c:32:79:e3: cc:0b:f1:b0:9a:35:37:87:2d:65:dd:95:13:04:6c:2d:74:0f: e3:98:3a:2d:d7:c5:e3:c5:d5:83:57:73:ff:1c:fe:c7:c1:01: 72:aa:ca:93:97:04:bc:85:da:68:4f:70:70:35:9b:c6:0d:37: a3:cd:08:d8:34:6c:ce:e5:11:c5:45:84:17:94:62:36:e4:46: b1:e3:78:29:fe:35:f3:39:e0:b3:66:51:66:8c:2e:7f:b4:f9: b8:d9:f0:bb:e3:a7:48:26:61:c9:a7:01:18:06:78:5e:78:80: 97:3b:72:04:9b:53:fe:4b:7a:90:d4:ea:90:0a:a7:5d:37:28: bd:8a:67:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2AUZ2QPy4PBBYgB4HKbQ8eWcSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTlaFw0yNDA5MTcwMjE0NTlaMDMxMTAvBgNV BAMTKDE0RDgwRDI0RTc3QzRCQ0Q1N0E5RUNGQzI3MENBNUIzODhDQUMxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zGLwF1591XstsKpPi0SQmcf8 h/xh64WYKxSZlf32MWByCx3rJt6eVPHSHZkSyWYwCsmmPI4wCBmXPExPGqkmnhEx HzFFR1SukFYlmpR3/vt7QFjYIHCw4qnvsJUjPzUACxMNPImGERVLPJs3YdMVj83l +rn1lWFZ5u5D9SaV6rCBjKANL9WkxsnAaZCwUUVITu+yajvmPRIXSMaiHEmXqDgv WbKFe2q3ZKbQvZSQs9BQ2teN8lEgi1h5FqMUbuzoM61SJjVwlVbhzs9+xaCvnuNE WRQg1rP2XSBNSN8Y0v885rUAP8nJG006YKbPe1hfQjxVxJZS5BmyVfP2YNFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNgNJOd8S81Xqez8Jwyls4jKwZowHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTA4MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAJzoPg3pBUmCv7n2/DoaiMpbhfNCiN/aD/BL mRvk2Am5YZ11rkeZJXwyjRDMKjAMUDmI1WYx6/IYWG1Hu0TOnED7kjWIhiMlkO+8 assAFGVYDsx31TH0axFdrtIi63jBXvImgmwqsEN2KIBf04ZJke+xpsd5goGQqQta PDJ548wL8bCaNTeHLWXdlRMEbC10D+OYOi3XxePF1YNXc/8c/sfBAXKqypOXBLyF 2mhPcHA1m8YNN6PNCNg0bM7lEcVFhBeUYjbkRrHjeCn+NfM54LNmUWaMLn+0+bjZ 8Lvjp0gmYcmnARgGeF54gJc7cgSbU/5LepDU6pAKp103KL2KZ5g= -----END CERTIFICATE-----Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org