$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS6939.roa File: AS6939.roa (raw, json) Hash identifier: fH8i3DWG/7pUBw6ogY8rZvhLjCRm9JJvf8mOTu03f7o= Subject key identifier: 1D:36:72:D4:9E:9A:16:F4:77:CB:0A:80:E0:81:E0:2D:43:D6:4C:67 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 187A893013954B9F7B9FD55EA43231CD9661FFCB Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS6939.roa Signing time: Tue 20 Aug 2024 02:31:57 +0000 ROA not before: Tue 20 Aug 2024 02:26:57 +0000 ROA not after: Tue 19 Aug 2025 02:31:57 +0000 asID: 6939 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7a:89:30:13:95:4b:9f:7b:9f:d5:5e:a4:32:31:cd:96:61:ff:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Aug 20 02:26:57 2024 GMT Not After : Aug 19 02:31:57 2025 GMT Subject: CN=1D3672D49E9A16F477CB0A80E081E02D43D64C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:ce:b9:50:40:7a:9d:c6:32:09:e1:33:5b: db:da:89:3d:a5:8d:13:3d:3b:74:f6:14:8e:3f:69: af:cd:67:bf:59:68:bb:9b:f9:ca:5a:b3:f0:ba:03: 2a:83:25:63:a1:fd:34:66:e9:93:92:9f:8a:07:54: 92:38:3c:9d:dd:49:85:81:ba:ff:6e:01:06:7d:14: 35:74:3f:a8:63:f7:e8:14:a3:b0:8d:96:94:fd:45: 2c:da:06:c0:3d:45:9d:2a:d6:9e:2b:7e:7d:56:4d: 93:e0:68:ec:51:8b:ef:b0:80:f4:ef:31:50:0e:7a: 90:26:ee:ec:19:07:04:63:1f:9d:7d:07:01:da:a1: 07:9f:cb:6a:34:ef:6e:51:03:99:13:f9:3c:81:66: a5:8e:8c:e2:df:40:02:b2:79:7f:e5:54:10:1b:ae: b1:79:2e:bb:1a:3b:47:cb:c5:b7:3b:42:87:a8:41: d8:af:ff:c0:79:af:ed:c1:e0:26:14:0b:ea:6a:54: 79:27:67:b5:d4:2b:04:9c:c4:37:0e:4a:cd:48:60: ff:e7:c7:89:84:39:f1:1a:fd:c1:0a:bb:66:f0:3c: 6b:00:8f:73:ca:bd:4f:46:8b:8f:30:87:2e:2c:6b: a0:3c:70:d4:8e:ed:ad:cc:d3:01:ff:32:9c:4c:03: 9d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:36:72:D4:9E:9A:16:F4:77:CB:0A:80:E0:81:E0:2D:43:D6:4C:67 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS6939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 7d:24:a2:1d:a5:ed:e3:2d:1e:32:fc:e3:78:5c:2d:5f:c5:cf: 67:a0:37:b7:04:c0:8d:2b:9c:42:78:57:b9:0f:9f:c6:e5:1c: 85:4d:98:c4:1f:bf:b4:96:35:04:28:92:c9:8a:51:48:8e:4c: af:b4:3a:11:72:72:e7:81:3f:99:f7:fd:fb:97:67:35:69:4a: a2:b7:65:e3:bb:f5:e7:89:cc:8d:ee:28:94:24:00:c0:ce:32: 15:23:45:ab:1f:10:71:f5:68:bc:5f:ee:9b:c9:ed:83:a7:80: a7:a0:95:01:3a:fd:36:ac:cf:d7:ec:8b:b5:26:ca:fc:42:45: 5c:77:5c:b1:f3:69:fe:c4:f9:d4:3d:d2:2c:39:44:7a:ae:ea: c6:ff:66:d3:5f:83:04:11:94:ad:81:08:0c:13:d1:60:8f:6c: 88:6e:c3:52:be:cb:22:b5:a1:9d:99:87:8e:d8:eb:82:c3:59: 00:ae:0c:b9:d3:93:20:51:47:75:eb:3c:e2:f6:8a:0b:26:e2: c2:8c:08:38:ee:a4:35:e9:38:cc:64:41:d7:fd:72:05:e2:cb: b3:cc:92:00:13:4f:85:88:13:28:d0:dc:7c:ad:34:18:0c:e8: b2:36:32:60:4d:7c:78:de:c8:89:9d:3c:8e:a3:65:90:66:06: c0:f7:63:74 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGHqJMBOVS597n9VepDIxzZZh/8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yNDA4MjAwMjI2NTdaFw0yNTA4MTkwMjMxNTdaMDMxMTAvBgNV BAMTKDFEMzY3MkQ0OUU5QTE2RjQ3N0NCMEE4MEUwODFFMDJENDNENjRDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYs65UEB6ncYyCeEzW9vaiT2l jRM9O3T2FI4/aa/NZ79ZaLub+cpas/C6AyqDJWOh/TRm6ZOSn4oHVJI4PJ3dSYWB uv9uAQZ9FDV0P6hj9+gUo7CNlpT9RSzaBsA9RZ0q1p4rfn1WTZPgaOxRi++wgPTv MVAOepAm7uwZBwRjH519BwHaoQefy2o0725RA5kT+TyBZqWOjOLfQAKyeX/lVBAb rrF5LrsaO0fLxbc7QoeoQdiv/8B5r+3B4CYUC+pqVHknZ7XUKwScxDcOSs1IYP/n x4mEOfEa/cEKu2bwPGsAj3PKvU9Gi48why4sa6A8cNSO7a3M0wH/MpxMA50zAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUHTZy1J6aFvR3ywqA4IHgLUPWTGcwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNjkzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMKw CzANBgkqhkiG9w0BAQsFAAOCAQEAfSSiHaXt4y0eMvzjeFwtX8XPZ6A3twTAjSuc QnhXuQ+fxuUchU2YxB+/tJY1BCiSyYpRSI5Mr7Q6EXJy54E/mff9+5dnNWlKordl 47v154nMje4olCQAwM4yFSNFqx8QcfVovF/um8ntg6eAp6CVATr9NqzP1+yLtSbK /EJFXHdcsfNp/sT51D3SLDlEeq7qxv9m01+DBBGUrYEIDBPRYI9siG7DUr7LIrWh nZmHjtjrgsNZAK4MudOTIFFHdes84vaKCybiwowIOO6kNek4zGRB1/1yBeLLs8yS ABNPhYgTKNDcfK00GAzosjYyYE18eN7IiZ08jqNlkGYGwPdjdA== -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org