$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: XPk2k9dsgjsxpPiSvqwJ4CNqJpsAAMLtunEw6Hp2t78= Subject key identifier: 48:26:C9:CC:25:C9:DF:1F:C1:7D:6C:47:F8:E4:0E:3D:5F:BB:EE:50 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 68705101FBBF5E8626A6273BEAEF59425FC66CE7 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa Signing time: Tue 04 Jun 2024 08:06:24 +0000 ROA not before: Tue 04 Jun 2024 08:01:24 +0000 ROA not after: Tue 03 Jun 2025 08:06:24 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 22:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:70:51:01:fb:bf:5e:86:26:a6:27:3b:ea:ef:59:42:5f:c6:6c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: Jun 4 08:01:24 2024 GMT Not After : Jun 3 08:06:24 2025 GMT Subject: CN=4826C9CC25C9DF1FC17D6C47F8E40E3D5FBBEE50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:8f:55:63:5b:09:73:be:08:70:96:dc:82: 7f:1b:63:22:b5:66:88:62:98:02:af:b6:43:fd:62: 31:3f:fd:f0:e8:d3:1e:7b:ab:e7:1a:43:58:72:74: cb:af:6f:29:ef:be:38:39:ec:e8:16:f6:3c:51:03: e7:e2:35:da:20:69:e8:e1:63:0b:47:5f:30:1c:b0: 18:50:83:f9:e7:92:d9:37:6c:62:3b:9a:03:aa:75: 76:1a:32:30:5f:76:7c:ae:73:8e:a1:9b:fc:ea:90: 3b:94:f9:2e:52:41:35:21:f7:72:31:9b:87:60:49: 32:39:a3:4b:23:c2:28:88:9b:f3:d3:01:de:f6:00: d1:b3:c5:a1:92:10:30:57:97:af:1c:10:3b:bd:fd: 46:a0:81:86:9e:df:de:4b:e5:8a:c6:22:27:d7:b0: 7e:dd:71:10:28:99:9a:6d:a0:bc:ca:d0:c7:40:27: 20:15:c1:ae:26:84:40:3f:de:14:58:28:43:14:f9: 9b:ba:89:3f:9d:1a:d1:45:0e:fb:6b:9d:ed:45:02: 5a:aa:73:64:43:66:47:74:bb:ec:dd:b8:6a:1c:2b: 7e:0d:3b:ab:b5:fc:87:9e:23:e4:a4:41:7a:e4:b9: ad:55:ea:f1:fd:08:ed:83:33:5e:ef:cd:c6:02:d0: 44:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:26:C9:CC:25:C9:DF:1F:C1:7D:6C:47:F8:E4:0E:3D:5F:BB:EE:50 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f00::/48 Signature Algorithm: sha256WithRSAEncryption 75:36:3d:71:eb:a9:46:e2:5d:9c:24:94:6c:69:15:c6:8b:cd: a6:27:c5:a8:bd:0c:53:61:86:06:69:3f:dc:66:80:81:0c:4f: e4:77:40:b5:63:2e:db:2b:c0:25:50:9e:bd:bf:97:1b:4a:73: 58:14:04:61:ac:b1:da:ae:cd:05:f1:4f:9b:d7:e1:5a:36:fc: 8b:6c:ad:77:20:21:3f:58:32:33:bc:f2:6c:ec:d6:67:f9:75: be:54:d1:13:22:70:81:55:65:9c:3e:26:19:d7:3f:aa:68:a0: 3d:f9:78:b2:86:84:a0:cf:33:12:39:36:b5:51:fd:97:cb:d0: 34:b5:25:75:4b:eb:23:27:61:46:08:11:cd:08:e8:35:f9:90: 00:03:1f:95:36:d5:8a:b9:45:17:fc:85:48:5d:e9:84:79:3d: 72:2c:0c:a8:28:09:ad:14:a8:d9:2d:e5:13:8a:a3:26:3f:67: cd:23:67:1e:c1:c0:0b:2d:20:13:30:d0:6c:58:56:c9:21:08: 04:88:72:8a:71:6c:7b:d8:3c:3c:29:b7:b7:cd:b6:a8:28:17: a9:7d:f3:e2:8b:9a:a4:1e:c5:7e:cb:47:59:65:ce:e1:0e:1d: 3c:0e:90:6e:a9:42:44:e4:fa:e1:c1:40:8a:75:dd:3b:7f:5d: 7f:10:b1:a8 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUaHBRAfu/XoYmpic76u9ZQl/GbOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNDA2MDQwODAxMjRaFw0yNTA2MDMwODA2MjRaMDMxMTAvBgNV BAMTKDQ4MjZDOUNDMjVDOURGMUZDMTdENkM0N0Y4RTQwRTNENUZCQkVFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbY9VY1sJc74IcJbcgn8bYyK1 ZohimAKvtkP9YjE//fDo0x57q+caQ1hydMuvbynvvjg57OgW9jxRA+fiNdogaejh YwtHXzAcsBhQg/nnktk3bGI7mgOqdXYaMjBfdnyuc46hm/zqkDuU+S5SQTUh93Ix m4dgSTI5o0sjwiiIm/PTAd72ANGzxaGSEDBXl68cEDu9/UaggYae395L5YrGIifX sH7dcRAomZptoLzK0MdAJyAVwa4mhEA/3hRYKEMU+Zu6iT+dGtFFDvtrne1FAlqq c2RDZkd0u+zduGocK34NO6u1/IeeI+SkQXrkua1V6vH9CO2DM17vzcYC0ET9AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUSCbJzCXJ3x/BfWxH+OQOPV+77lAwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMwMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8AMA0GCSqGSIb3DQEB CwUAA4IBAQB1Nj1x66lG4l2cJJRsaRXGi82mJ8WovQxTYYYGaT/cZoCBDE/kd0C1 Yy7bK8AlUJ69v5cbSnNYFARhrLHars0F8U+b1+FaNvyLbK13ICE/WDIzvPJs7NZn +XW+VNETInCBVWWcPiYZ1z+qaKA9+XiyhoSgzzMSOTa1Uf2Xy9A0tSV1S+sjJ2FG CBHNCOg1+ZAAAx+VNtWKuUUX/IVIXemEeT1yLAyoKAmtFKjZLeUTiqMmP2fNI2ce wcALLSATMNBsWFbJIQgEiHKKcWx72Dw8Kbe3zbaoKBepffPii5qkHsV+y0dZZc7h Dh08DpBuqUJE5PrhwUCKdd07f11/ELGo -----END CERTIFICATE-----Generated at Fri Sep 20 09:06:54 2024 by rpki-client on console-ams.rpki-client.org