$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS6939.roa File: AS6939.roa (raw, json) Hash identifier: HGiMzy9nLsFNYUR/hDKLlrvimIPWDCGYbgNtMqzMrDs= Subject key identifier: 24:6B:34:26:19:6F:D0:B0:BB:2E:17:87:5D:77:8F:D2:59:08:FD:F8 Certificate issuer: /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Certificate serial: 6BFE408A7907E5689DF6CB37818D120BBBADAE08 Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS6939.roa Signing time: Tue 19 Sep 2023 02:14:57 +0000 ROA not before: Tue 19 Sep 2023 02:09:57 +0000 ROA not after: Tue 17 Sep 2024 02:14:57 +0000 asID: 6939 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Apr 2024 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fe:40:8a:79:07:e5:68:9d:f6:cb:37:81:8d:12:0b:bb:ad:ae:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E Validity Not Before: Sep 19 02:09:57 2023 GMT Not After : Sep 17 02:14:57 2024 GMT Subject: CN=246B3426196FD0B0BB2E17875D778FD25908FDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2e:0b:93:d2:f6:26:f1:65:67:1a:ab:9a:a6: 41:70:39:61:e9:4c:09:ee:58:18:3d:37:eb:70:f7: d7:5a:2a:3a:ff:68:04:60:65:18:11:26:5a:61:41: ef:df:58:28:b6:e5:3b:40:c3:ca:9a:d2:9c:1c:db: 3c:1f:a5:98:8d:26:10:9e:17:87:b6:b1:ff:1d:bb: a2:55:26:1a:56:a9:05:5d:0f:76:76:b5:c8:15:74: 8e:10:6e:74:72:3a:0d:37:b5:4d:8d:ff:3f:29:2e: 0f:c6:1a:2c:77:0b:1d:cb:df:d4:a2:5f:a8:89:05: 10:67:f7:8a:12:2b:e5:0e:73:28:cf:02:69:ad:61: 73:68:75:1a:cb:bb:a3:87:dd:d5:3f:ae:73:92:d1: 90:1f:ba:23:b1:2d:e9:93:2e:64:03:41:74:cd:63: 52:fa:89:91:e9:a1:d9:b4:1d:6a:17:6d:28:08:3b: 3d:db:09:ea:c3:18:ed:a5:a1:38:e4:89:d5:8d:5f: fc:d0:78:b9:23:5e:5b:1a:81:08:ac:89:cd:43:a2: f4:88:f3:bd:36:64:1c:54:87:c4:16:76:63:8d:65: 73:e0:8d:e1:bb:55:b5:10:ad:08:1d:fb:65:fb:68: ea:98:ac:c1:48:07:41:1e:13:ef:b2:7a:71:8f:85: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6B:34:26:19:6F:D0:B0:BB:2E:17:87:5D:77:8F:D2:59:08:FD:F8 X509v3 Authority Key Identifier: keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS6939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 Signature Algorithm: sha256WithRSAEncryption b1:63:67:84:b8:e9:ba:ff:46:44:dd:fc:10:7d:25:f7:1e:32: 20:6b:04:df:fd:aa:02:29:65:a4:08:f0:8b:f5:75:83:ed:2e: cb:0c:6f:ac:3d:0c:a7:b1:e7:fb:97:19:df:5d:8a:e6:5d:90: 61:f9:1f:8d:e4:66:08:d3:5c:45:ef:c6:17:11:60:54:b3:fd: e5:bf:9b:3a:0e:8e:16:40:c6:98:aa:c5:c0:0e:d9:75:7a:a1: e0:b4:a9:36:66:0a:dd:b3:b7:c1:d0:9c:01:a5:24:d6:c7:b3: 3d:7d:81:a1:52:c3:b7:1f:54:23:27:73:33:4c:7c:8a:da:21: 44:2f:d5:c2:85:9e:15:c8:fd:fd:44:4e:54:77:9d:79:a8:8b: 06:0e:44:73:b2:d7:34:3a:a0:f0:ef:dd:f4:0b:2e:88:45:1a: 24:ec:27:b9:0a:e8:b3:5b:fb:72:04:04:41:df:ed:9c:01:5c: e5:92:b8:f0:b9:3c:7e:7a:99:23:80:86:26:b0:99:af:2b:f0: 47:ea:41:81:f8:19:34:0c:44:8e:32:cf:fc:11:f0:2c:2f:3b: 5b:e7:5e:f7:fe:96:22:98:d5:1b:46:c5:91:8d:3e:ce:2c:d5: bf:4c:d1:42:f7:c7:2c:af:fa:53:70:ee:99:25:01:d0:f9:40: 16:ee:d5:0d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUa/5AinkH5Wid9ss3gY0SC7utrggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEw RTFFMkY4RTAeFw0yMzA5MTkwMjA5NTdaFw0yNDA5MTcwMjE0NTdaMDMxMTAvBgNV BAMTKDI0NkIzNDI2MTk2RkQwQjBCQjJFMTc4NzVENzc4RkQyNTkwOEZERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLguT0vYm8WVnGquapkFwOWHp TAnuWBg9N+tw99daKjr/aARgZRgRJlphQe/fWCi25TtAw8qa0pwc2zwfpZiNJhCe F4e2sf8du6JVJhpWqQVdD3Z2tcgVdI4QbnRyOg03tU2N/z8pLg/GGix3Cx3L39Si X6iJBRBn94oSK+UOcyjPAmmtYXNodRrLu6OH3dU/rnOS0ZAfuiOxLemTLmQDQXTN Y1L6iZHpodm0HWoXbSgIOz3bCerDGO2loTjkidWNX/zQeLkjXlsagQisic1DovSI 8702ZBxUh8QWdmONZXPgjeG7VbUQrQgd+2X7aOqYrMFIB0EeE++yenGPhTghAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUJGs0Jhlv0LC7LheHXXeP0lkI/fgwHwYDVR0j BBgwFoAUQfZXzzVk8jO5d/QKyl5L0Q4eL44wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzAvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFFMkY4RS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvNDFGNjU3Q0YzNTY0RjIzM0I5NzdGNDBBQ0E1RTRCRDEwRTFF MkY4RS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi8wL0FTNjkzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoHVMKw CzANBgkqhkiG9w0BAQsFAAOCAQEAsWNnhLjpuv9GRN38EH0l9x4yIGsE3/2qAill pAjwi/V1g+0uywxvrD0Mp7Hn+5cZ312K5l2QYfkfjeRmCNNcRe/GFxFgVLP95b+b Og6OFkDGmKrFwA7ZdXqh4LSpNmYK3bO3wdCcAaUk1sezPX2BoVLDtx9UIydzM0x8 itohRC/VwoWeFcj9/UROVHedeaiLBg5Ec7LXNDqg8O/d9AsuiEUaJOwnuQros1v7 cgQEQd/tnAFc5ZK48Lk8fnqZI4CGJrCZryvwR+pBgfgZNAxEjjLP/BHwLC87W+de 9/6WIpjVG0bFkY0+zizVv0zRQvfHLK/6U3DumSUB0PlAFu7VDQ== -----END CERTIFICATE-----Generated at Fri Apr 26 00:05:13 2024 by rpki-client on console-fra.rpki-client.org