$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa File: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (raw, json) Hash identifier: WoYYXy0WXkt2pwt4m8D9I2LfOvIhGaGz1pYsH4GwK3U= Subject key identifier: 95:15:58:E8:34:F5:4A:2F:AA:B3:5A:0E:FC:2F:3A:32:3D:E8:AD:AC Certificate issuer: /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Certificate serial: 125AA5AC1C5839559130F25E7222AEB543B31021 Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa Signing time: Tue 04 Jun 2024 08:06:25 +0000 ROA not before: Tue 04 Jun 2024 08:01:25 +0000 ROA not after: Tue 03 Jun 2025 08:06:25 +0000 asID: 58339 IP address blocks: 2a05:dfc1:8ec0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Sep 2024 14:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:a5:ac:1c:58:39:55:91:30:f2:5e:72:22:ae:b5:43:b3:10:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C Validity Not Before: Jun 4 08:01:25 2024 GMT Not After : Jun 3 08:06:25 2025 GMT Subject: CN=951558E834F54A2FAAB35A0EFC2F3A323DE8ADAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:7d:ee:21:c4:95:ad:9a:78:66:48:91:e9: 85:eb:a2:b5:bf:4f:45:e9:b4:b1:3e:1b:30:f2:9b: fd:de:9b:d1:b7:84:4b:2f:89:71:5e:0c:cd:08:88: 36:aa:95:b6:e6:68:1f:99:f4:55:73:bc:f8:18:5c: 6e:7b:d2:0e:08:95:eb:a2:41:b5:f1:9a:9e:4d:cf: dd:fa:f4:9c:c1:b5:fe:4c:c5:50:9c:d4:b5:13:b1: 2c:e4:d6:0e:d6:5a:84:e0:11:6d:a1:3a:5e:da:7f: 69:45:4b:37:2c:bc:77:bb:9a:bd:a2:70:b6:6a:f9: 1e:4e:e3:20:1c:4c:43:cc:a8:24:55:62:8b:57:57: b9:7d:45:42:f8:64:eb:3c:41:ae:b9:91:ba:b3:68: 39:3c:60:15:7c:77:0d:62:3c:b0:1c:56:68:b7:88: f1:06:9e:10:59:59:d5:a9:4c:40:69:ae:33:2c:e6: 56:3d:ff:5e:dc:05:73:02:67:ac:e6:5e:72:4b:98: 8d:b4:24:0d:c3:50:56:33:87:38:4c:e4:30:30:69: 53:da:1d:18:14:ac:a8:86:98:77:a2:d0:30:f0:4c: 2e:ad:7b:53:8a:52:91:79:ee:4b:10:43:e4:d1:69: 9f:cc:4b:fe:d8:bd:95:28:a3:a4:be:e0:a0:10:74: 86:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:15:58:E8:34:F5:4A:2F:AA:B3:5A:0E:FC:2F:3A:32:3D:E8:AD:AC X509v3 Authority Key Identifier: keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8ec0::/44 Signature Algorithm: sha256WithRSAEncryption 2c:bd:63:a6:6e:8d:40:ab:f9:ae:04:6e:0b:75:ad:54:64:23: 7a:61:e1:1e:f4:49:bd:68:c9:37:c4:bf:dc:36:11:42:81:1a: 52:c4:6c:13:d8:65:f3:ea:ae:ae:a0:fd:ba:f6:5b:08:6e:bb: 42:16:62:e5:23:71:ac:9c:23:ab:bb:5e:a9:72:56:41:25:f3: 25:85:2d:bc:d9:db:9c:00:da:28:df:b5:33:c7:d2:25:ba:69: 89:9b:d0:22:3a:11:61:04:70:cd:24:dd:9b:d7:88:b5:c5:ff: 5c:f8:07:10:b4:be:a5:58:c8:83:65:f1:9e:68:99:f1:d9:d6: c4:e8:64:54:5c:0e:aa:5d:60:53:4f:fc:5c:3f:0b:5f:f5:c4: 80:bd:07:3b:e9:57:62:d8:34:67:d5:79:87:61:94:f1:23:ee: 8a:d0:25:4a:94:74:24:9f:ac:6b:6e:9b:40:39:81:0f:14:f4: 6e:04:7e:11:94:99:27:1d:a8:01:44:75:df:37:61:0a:af:d9: bb:fb:59:a1:2e:01:40:bf:4e:80:55:16:22:56:7a:78:14:20: e0:6f:ea:18:c8:27:47:6b:0d:83:5f:91:5a:61:7b:b0:74:58: d0:82:d4:a6:8b:a3:5c:ba:5f:72:d6:d6:4c:b9:f6:31:d6:49: 92:23:90:94 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIUElqlrBxYOVWRMPJeciKutUOzECEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1 NzU2QjE5QzAeFw0yNDA2MDQwODAxMjVaFw0yNTA2MDMwODA2MjVaMDMxMTAvBgNV BAMTKDk1MTU1OEU4MzRGNTRBMkZBQUIzNUEwRUZDMkYzQTMyM0RFOEFEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6H3uIcSVrZp4ZkiR6YXrorW/ T0XptLE+GzDym/3em9G3hEsviXFeDM0IiDaqlbbmaB+Z9FVzvPgYXG570g4Ileui QbXxmp5Nz9369JzBtf5MxVCc1LUTsSzk1g7WWoTgEW2hOl7af2lFSzcsvHe7mr2i cLZq+R5O4yAcTEPMqCRVYotXV7l9RUL4ZOs8Qa65kbqzaDk8YBV8dw1iPLAcVmi3 iPEGnhBZWdWpTEBprjMs5lY9/17cBXMCZ6zmXnJLmI20JA3DUFYzhzhM5DAwaVPa HRgUrKiGmHei0DDwTC6te1OKUpF57ksQQ+TRaZ/MS/7YvZUoo6S+4KAQdIZ1AgMB AAGjggJeMIICWjAdBgNVHQ4EFgQUlRVY6DT1Si+qs1oO/C86Mj3orawwHwYDVR0j BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYzMzAzYTNhMmYzNDM0MmQzNDM0 MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY7AMA0GCSqGSIb3DQEB CwUAA4IBAQAsvWOmbo1Aq/muBG4Lda1UZCN6YeEe9Em9aMk3xL/cNhFCgRpSxGwT 2GXz6q6uoP269lsIbrtCFmLlI3GsnCOru16pclZBJfMlhS282ducANoo37Uzx9Il ummJm9AiOhFhBHDNJN2b14i1xf9c+AcQtL6lWMiDZfGeaJnx2dbE6GRUXA6qXWBT T/xcPwtf9cSAvQc76Vdi2DRn1XmHYZTxI+6K0CVKlHQkn6xrbptAOYEPFPRuBH4R lJknHagBRHXfN2EKr9m7+1mhLgFAv06AVRYiVnp4FCDgb+oYyCdHaw2DX5FaYXuw dFjQgtSmi6Ncul9y1tZMufYx1kmSI5CU -----END CERTIFICATE-----Generated at Sat Sep 21 00:30:01 2024 by rpki-client on console-fra.rpki-client.org