$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: Z7UmNc3Gv5gVjdr5GEZSa1WMeyYlH2/3EFP7QkcQfYs= Subject key identifier: 1F:58:81:7C:20:7E:82:87:62:B6:3B:07:7B:BE:43:07:8F:1E:C5:4C Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 40E6642AB760D22348EAF711A8CA7AA253EBF8D5 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 04 Jun 2024 08:06:24 +0000 ROA not before: Tue 04 Jun 2024 08:01:24 +0000 ROA not after: Tue 03 Jun 2025 08:06:24 +0000 asID: 58339 IP address blocks: 2a05:dfc1:5f60::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e6:64:2a:b7:60:d2:23:48:ea:f7:11:a8:ca:7a:a2:53:eb:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: Jun 4 08:01:24 2024 GMT Not After : Jun 3 08:06:24 2025 GMT Subject: CN=1F58817C207E828762B63B077BBE43078F1EC54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:1b:d6:59:20:dc:2a:4d:3e:2e:3d:84:f7: 0b:34:20:25:3a:35:74:0c:04:47:d1:6b:4b:33:5c: 6d:94:80:50:cd:7a:86:a4:c8:e6:33:84:e5:a0:f7: 38:6b:a7:f2:6b:5a:7b:11:19:72:27:df:21:fb:c3: 27:51:96:86:9a:ca:c2:4d:30:f0:33:b1:b9:12:00: 74:2d:a3:f0:e7:94:f2:14:4c:fc:b2:5f:dd:6a:3d: 2a:b5:2f:94:ff:46:89:14:37:07:09:dd:2c:05:a5: 88:5d:35:55:50:df:18:87:5c:a7:3d:2b:5b:6e:7f: e7:ad:8d:fb:45:9c:a2:74:7d:7b:1f:de:f0:e4:73: e7:ca:44:13:e1:b8:ee:b5:3a:64:15:e8:04:31:93: 5e:3e:0d:a9:00:e8:6b:44:0e:49:a6:0f:10:17:26: e9:a0:ce:4a:38:16:7d:19:c4:5e:36:16:38:66:e5: 1e:45:a0:6f:ea:cc:1f:de:aa:ed:e8:73:f1:a7:ac: 9b:da:08:f5:1c:a2:06:6d:87:57:b7:00:5b:1b:5f: 40:ba:ec:d5:3e:02:cf:77:9b:c5:bc:78:34:e9:25: 0a:2b:ea:83:0b:c3:66:0d:8c:2d:f2:bb:3f:e7:4a: d7:6f:03:78:89:60:e8:95:2f:c2:0c:cf:32:f6:82: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:58:81:7C:20:7E:82:87:62:B6:3B:07:7B:BE:43:07:8F:1E:C5:4C X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5f60::/44 Signature Algorithm: sha256WithRSAEncryption 78:1b:cc:6e:a7:da:99:c8:ef:ee:c0:c4:8e:27:77:09:18:4e: d6:31:e0:c6:be:e4:e3:fb:43:13:bb:2c:3a:92:ae:a8:b9:c0: a3:d9:fb:bc:7d:35:4c:a4:96:f2:e6:2d:69:b7:3a:ae:88:a7: eb:1c:12:d0:fa:17:af:74:ae:28:cf:e4:f1:f6:ad:21:2b:ee: b8:34:a8:1d:af:55:34:94:ef:64:2d:34:6d:e9:d5:47:c1:49: d0:e5:3a:3f:2d:20:ad:00:92:7e:77:c3:b5:16:79:f5:c2:45: d9:84:f4:a6:44:71:e8:4b:47:81:62:ec:7e:43:a2:27:22:42: c0:ae:bc:c9:62:a4:70:a1:27:b7:97:78:97:7e:75:7f:75:b1: e9:6d:3e:00:af:06:1b:a9:82:2e:c3:c8:ae:30:35:47:10:93: d5:f6:0c:f1:ac:09:d3:52:04:ea:10:ff:4a:6b:67:f2:ea:72: 21:1b:b1:0d:50:c4:ad:22:dd:8f:76:d9:c0:01:18:8e:23:06: 05:91:a3:2c:e7:82:30:64:8a:4c:ee:26:3a:5d:8d:76:a2:ed: 85:dd:03:04:67:bf:4a:ff:b2:34:f8:fc:78:f8:42:02:ce:35: ad:a8:68:2a:0f:e1:48:c2:7c:c8:f4:06:91:73:cd:96:37:3a: d9:fa:5b:bc -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUQOZkKrdg0iNI6vcRqMp6olPr+NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNDA2MDQwODAxMjRaFw0yNTA2MDMwODA2MjRaMDMxMTAvBgNV BAMTKDFGNTg4MTdDMjA3RTgyODc2MkI2M0IwNzdCQkU0MzA3OEYxRUM1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhxvWWSDcKk0+Lj2E9ws0ICU6 NXQMBEfRa0szXG2UgFDNeoakyOYzhOWg9zhrp/JrWnsRGXIn3yH7wydRloaaysJN MPAzsbkSAHQto/DnlPIUTPyyX91qPSq1L5T/RokUNwcJ3SwFpYhdNVVQ3xiHXKc9 K1tuf+etjftFnKJ0fXsf3vDkc+fKRBPhuO61OmQV6AQxk14+DakA6GtEDkmmDxAX Jumgzko4Fn0ZxF42Fjhm5R5FoG/qzB/equ3oc/GnrJvaCPUcogZth1e3AFsbX0C6 7NU+As93m8W8eDTpJQor6oMLw2YNjC3yuz/nStdvA3iJYOiVL8IMzzL2gkutAgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUH1iBfCB+goditjsHe75DB48exUwwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjM2MzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwV9gMA0GCSqGSIb3DQEB CwUAA4IBAQB4G8xup9qZyO/uwMSOJ3cJGE7WMeDGvuTj+0MTuyw6kq6oucCj2fu8 fTVMpJby5i1ptzquiKfrHBLQ+hevdK4oz+Tx9q0hK+64NKgdr1U0lO9kLTRt6dVH wUnQ5To/LSCtAJJ+d8O1Fnn1wkXZhPSmRHHoS0eBYux+Q6InIkLArrzJYqRwoSe3 l3iXfnV/dbHpbT4ArwYbqYIuw8iuMDVHEJPV9gzxrAnTUgTqEP9Ka2fy6nIhG7EN UMStIt2PdtnAARiOIwYFkaMs54IwZIpM7iY6XY12ou2F3QMEZ79K/7I0+Px4+EIC zjWtqGgqD+FIwnzI9AaRc82WNzrZ+lu8 -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org