$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50842.roa File: AS50842.roa (raw, json) Hash identifier: kUN1kGqKUDuV1OZolNX4tfAhAzQPUVWkDv+txcelBe0= Subject key identifier: 65:2A:5F:C3:FD:1D:CC:57:3F:87:FE:4B:F6:E1:23:0A:3C:A8:C5:EB Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 09DC3057B43BE22541FD03C19B296AC0C984E3B8 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50842.roa Signing time: Tue 19 Sep 2023 02:14:59 +0000 ROA not before: Tue 19 Sep 2023 02:09:59 +0000 ROA not after: Tue 17 Sep 2024 02:14:59 +0000 asID: 50842 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Jun 2024 13:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:dc:30:57:b4:3b:e2:25:41:fd:03:c1:9b:29:6a:c0:c9:84:e3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:59 2023 GMT Not After : Sep 17 02:14:59 2024 GMT Subject: CN=652A5FC3FD1DCC573F87FE4BF6E1230A3CA8C5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:b1:50:99:a1:98:e3:17:ba:53:79:14:ee: 63:1c:26:d9:2d:68:cf:73:ad:f7:7a:ee:f9:77:25: ae:dc:f6:1c:d0:f9:d8:e5:77:0f:0b:ac:84:94:20: c2:62:35:60:38:5d:63:55:60:0c:f6:17:e0:c4:29: ca:0d:af:f4:25:b3:70:fe:22:91:58:66:58:db:00: ba:16:8c:11:d7:8b:7e:ee:9b:3b:5c:95:e7:9d:86: d8:4d:26:23:92:68:82:b1:f6:a2:90:da:64:ef:fd: ee:bc:77:26:8e:b6:e6:9a:9d:73:29:fe:94:db:e7: 99:b6:c7:7c:dd:9d:cc:8d:64:e6:bc:29:47:07:6d: 97:71:03:1f:7b:e3:c0:10:b3:3c:18:a1:49:9e:be: 0e:2e:81:e1:64:5a:3c:8b:25:78:7b:4e:b3:fd:36: 9f:8a:4d:09:69:61:4d:7e:4d:f3:bd:5a:41:fd:29: 30:69:08:6a:32:9b:39:bc:25:bf:db:7b:ab:66:0b: 81:6a:6f:1e:6c:75:c3:98:9a:9d:a7:e2:cf:d7:9c: 45:e3:7c:b9:f7:fa:61:99:df:3c:92:5d:b2:ad:8a: ca:c1:34:09:79:1b:11:99:bd:6a:fa:78:9d:84:5a: d7:06:f9:b8:8f:87:b4:b2:64:de:47:5d:49:07:7b: 9a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:5F:C3:FD:1D:CC:57:3F:87:FE:4B:F6:E1:23:0A:3C:A8:C5:EB X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50842.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 44:1c:55:b8:fa:1f:20:11:79:5b:58:1f:55:35:35:89:b1:9b: 85:4b:45:8a:c9:15:15:8f:d3:38:78:fb:6f:53:f3:ea:0a:00: cb:aa:9a:5f:67:4a:9a:a3:1f:df:4d:ac:d4:63:c9:ce:d1:65: b6:ba:03:69:9d:6c:7e:61:a4:af:07:22:bc:d4:ad:97:75:c0: 4a:41:bc:83:ef:d1:15:0e:3a:10:01:65:68:7b:e8:55:64:7e: 20:49:ef:63:58:0f:e9:48:29:dd:1a:70:f4:58:f1:92:fd:1a: 28:0b:b2:d2:e1:7b:13:5d:46:9a:47:cd:86:cc:81:03:13:13: 20:ef:57:3c:20:b9:75:f5:dc:a0:a5:24:37:af:2e:3f:8f:0d: 3a:67:ab:3f:4a:c3:62:7d:32:a2:f7:b2:d1:0f:08:3e:97:65: 23:95:0a:5a:7e:1e:72:6c:02:9b:8c:22:ea:6f:7f:83:a7:1d: de:67:6e:70:17:2e:94:59:e2:d6:07:a4:08:0e:eb:3c:ad:c8: 04:71:b9:e6:0b:81:3a:4c:5e:ed:7c:7c:b1:9a:4d:71:db:11: 8e:0d:13:fd:52:07:10:26:fc:aa:ea:58:4e:9c:8f:f1:f7:01: 66:5c:dd:00:f0:88:d4:30:2b:43:37:15:24:a9:02:d8:73:54: c9:e9:9c:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdwwV7Q74iVB/QPBmylqwMmE47gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTlaFw0yNDA5MTcwMjE0NTlaMDMxMTAvBgNV BAMTKDY1MkE1RkMzRkQxRENDNTczRjg3RkU0QkY2RTEyMzBBM0NBOEM1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4rFQmaGY4xe6U3kU7mMcJtkt aM9zrfd67vl3Ja7c9hzQ+djldw8LrISUIMJiNWA4XWNVYAz2F+DEKcoNr/Qls3D+ IpFYZljbALoWjBHXi37umztcleedhthNJiOSaIKx9qKQ2mTv/e68dyaOtuaanXMp /pTb55m2x3zdncyNZOa8KUcHbZdxAx9748AQszwYoUmevg4ugeFkWjyLJXh7TrP9 Np+KTQlpYU1+TfO9WkH9KTBpCGoymzm8Jb/be6tmC4Fqbx5sdcOYmp2n4s/XnEXj fLn3+mGZ3zySXbKtisrBNAl5GxGZvWr6eJ2EWtcG+biPh7SyZN5HXUkHe5r3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSpfw/0dzFc/h/5L9uEjCjyoxeswHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNTA4NDIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC sAswDQYJKoZIhvcNAQELBQADggEBAEQcVbj6HyAReVtYH1U1NYmxm4VLRYrJFRWP 0zh4+29T8+oKAMuqml9nSpqjH99NrNRjyc7RZba6A2mdbH5hpK8HIrzUrZd1wEpB vIPv0RUOOhABZWh76FVkfiBJ72NYD+lIKd0acPRY8ZL9GigLstLhexNdRppHzYbM gQMTEyDvVzwguXX13KClJDevLj+PDTpnqz9Kw2J9MqL3stEPCD6XZSOVClp+HnJs ApuMIupvf4OnHd5nbnAXLpRZ4tYHpAgO6zytyARxueYLgTpMXu18fLGaTXHbEY4N E/1SBxAm/KrqWE6cj/H3AWZc3QDwiNQwK0M3FSSpAthzVMnpnJA= -----END CERTIFICATE-----Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org