$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa File: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (raw, json) Hash identifier: CI2trAO5tY7xWETG/nEdmZBLg2xb/bS4UECfuMJO6Gg= Subject key identifier: C8:33:4B:30:F2:7B:90:42:50:B9:15:39:B8:B0:17:B9:B9:C7:21:C9 Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 59030B24415D7F766E5E906E6E354D77B6225EB4 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa Signing time: Tue 04 Jun 2024 08:06:24 +0000 ROA not before: Tue 04 Jun 2024 08:01:24 +0000 ROA not after: Tue 03 Jun 2025 08:06:24 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f10::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Sep 2024 14:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:03:0b:24:41:5d:7f:76:6e:5e:90:6e:6e:35:4d:77:b6:22:5e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: Jun 4 08:01:24 2024 GMT Not After : Jun 3 08:06:24 2025 GMT Subject: CN=C8334B30F27B904250B91539B8B017B9B9C721C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:e9:75:e0:e9:08:a5:4a:58:bc:56:9e:45: 82:a1:4c:45:6c:65:cd:28:e9:6b:ea:16:d0:4d:4e: 50:5a:7b:2b:ef:c0:ea:7d:b6:9f:9b:c4:ce:63:8d: a8:76:08:5f:28:c0:9b:a6:08:f9:cb:a2:18:42:7a: fb:75:94:ba:8d:9c:72:53:1b:b3:19:fb:85:4b:5c: a4:89:22:30:80:93:df:d8:ae:2a:32:63:c8:ee:86: f0:5b:10:ee:bb:a3:e0:ad:07:7e:b8:67:28:d2:22: a7:2a:32:70:d6:a9:30:74:c0:e5:df:b1:20:7d:09: ca:dc:6d:8d:f5:26:69:9a:08:85:1b:55:55:f5:07: f5:79:ae:5b:b1:5c:d1:6e:b4:06:af:e5:d6:c2:4e: 27:2b:85:60:c9:ed:71:53:8e:34:cb:aa:75:ba:ce: b6:fe:c1:a6:5d:26:fa:2e:1d:ec:6c:eb:c5:73:83: 4d:79:02:8a:43:08:80:7a:ac:8e:e8:72:01:83:36: 88:15:be:20:4d:91:e0:c1:2f:3d:4e:f6:ac:a2:12: b7:7b:6a:12:87:c9:20:73:60:00:15:e9:a7:f1:d6: 31:a0:27:e6:a9:ca:ca:bd:39:55:6b:12:cb:96:cd: 08:56:9b:68:6e:29:c3:6c:84:15:37:a3:3c:19:f1: ac:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:4B:30:F2:7B:90:42:50:B9:15:39:B8:B0:17:B9:B9:C7:21:C9 X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f10::/48 Signature Algorithm: sha256WithRSAEncryption c8:db:76:da:dd:55:70:1a:89:dc:c6:4c:7e:8e:16:ba:8f:c7: db:35:89:9a:f8:cb:b3:3a:e4:92:4a:61:0e:09:9a:07:65:05: 43:cd:85:b1:8b:c9:90:09:a9:89:19:be:40:dc:98:56:b3:e0: 2f:df:a2:0c:51:a0:09:94:69:b1:6d:7d:73:b1:eb:ed:12:c8: 53:06:84:0c:de:10:74:fd:f5:ee:3d:8f:97:6d:34:54:80:d1: f3:73:0e:c3:91:f4:79:43:22:40:74:a8:27:df:3e:99:7d:e4: 30:0b:86:ab:d1:38:da:cf:38:a3:c2:24:de:a8:0c:f8:4f:8a: ea:99:37:95:7f:e2:a8:4a:48:26:0f:ca:0c:fa:6e:33:d6:e2: 76:87:16:ed:92:4f:cb:aa:74:56:59:e2:86:34:c4:40:f9:7b: 48:96:c8:fa:0b:ad:b2:42:db:58:ed:b6:7b:31:3f:66:f4:30: fb:70:d2:d0:62:21:5c:74:9a:1e:83:4e:f5:60:70:7b:a1:f3: 42:11:32:2b:51:7e:db:1f:d0:cb:4b:3e:71:d5:62:fd:fe:78: 43:13:5a:10:2d:5a:d6:6b:a8:b1:89:77:74:e6:67:10:3b:4c: 9e:cd:7b:a6:a9:14:04:40:ad:1d:1b:ea:bf:61:1b:7e:a4:2c: 94:ff:e2:dd -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUWQMLJEFdf3ZuXpBubjVNd7YiXrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNDA2MDQwODAxMjRaFw0yNTA2MDMwODA2MjRaMDMxMTAvBgNV BAMTKEM4MzM0QjMwRjI3QjkwNDI1MEI5MTUzOUI4QjAxN0I5QjlDNzIxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yul14OkIpUpYvFaeRYKhTEVs Zc0o6WvqFtBNTlBaeyvvwOp9tp+bxM5jjah2CF8owJumCPnLohhCevt1lLqNnHJT G7MZ+4VLXKSJIjCAk9/YrioyY8juhvBbEO67o+CtB364ZyjSIqcqMnDWqTB0wOXf sSB9CcrcbY31JmmaCIUbVVX1B/V5rluxXNFutAav5dbCTicrhWDJ7XFTjjTLqnW6 zrb+waZdJvouHexs68Vzg015AopDCIB6rI7ocgGDNogVviBNkeDBLz1O9qyiErd7 ahKHySBzYAAV6afx1jGgJ+apysq9OVVrEsuWzQhWm2huKcNshBU3ozwZ8awPAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUyDNLMPJ7kEJQuRU5uLAXubnHIckwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMxMzAzYTNhMmYzNDM4MmQzNDM4 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8QMA0GCSqGSIb3DQEB CwUAA4IBAQDI23ba3VVwGoncxkx+jha6j8fbNYma+MuzOuSSSmEOCZoHZQVDzYWx i8mQCamJGb5A3JhWs+Av36IMUaAJlGmxbX1zsevtEshTBoQM3hB0/fXuPY+XbTRU gNHzcw7DkfR5QyJAdKgn3z6ZfeQwC4ar0TjazzijwiTeqAz4T4rqmTeVf+KoSkgm D8oM+m4z1uJ2hxbtkk/LqnRWWeKGNMRA+XtIlsj6C62yQttY7bZ7MT9m9DD7cNLQ YiFcdJoeg071YHB7ofNCETIrUX7bH9DLSz5x1WL9/nhDE1oQLVrWa6ixiXd05mcQ O0yezXumqRQEQK0dG+q/YRt+pCyU/+Ld -----END CERTIFICATE-----Generated at Sat Sep 21 00:30:01 2024 by rpki-client on console-fra.rpki-client.org