$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330353a3a2f34382d3438203d3e20323134383039.roa File: 326130613a363034343a623330353a3a2f34382d3438203d3e20323134383039.roa (raw, json) Hash identifier: Y9fE6a5gg7WNyVSvI+MXpBK0rs4V3qcyaLACAk2tUlk= Subject key identifier: AF:06:BD:2C:18:80:40:30:8E:C6:64:9B:7E:62:07:6E:F0:72:2B:30 Certificate issuer: /CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296 Certificate serial: 26F3EB3F94C66C9A6F4AAEF885D9FFA4CA65C84E Authority key identifier: 5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330353a3a2f34382d3438203d3e20323134383039.roa Signing time: Sun 11 Aug 2024 10:39:32 +0000 ROA not before: Sun 11 Aug 2024 10:34:32 +0000 ROA not after: Sun 10 Aug 2025 10:39:32 +0000 asID: 214809 IP address blocks: 2a0a:6044:b305::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 12:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f3:eb:3f:94:c6:6c:9a:6f:4a:ae:f8:85:d9:ff:a4:ca:65:c8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296 Validity Not Before: Aug 11 10:34:32 2024 GMT Not After : Aug 10 10:39:32 2025 GMT Subject: CN=AF06BD2C188040308EC6649B7E62076EF0722B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:aa:8c:1a:b9:4d:f2:f7:73:ce:59:37:d9: 7a:c4:d4:44:ca:80:02:70:f2:91:49:f1:97:80:4b: b2:12:71:37:24:ba:d4:d5:7e:5b:34:b3:40:c3:f8: 81:a1:32:50:d4:7e:51:12:cc:0b:d4:b4:2e:37:6b: 06:a8:c5:3c:b2:8e:1e:f9:09:5e:cf:4d:22:d7:1e: 4a:34:38:02:9e:9e:ec:ea:4c:48:45:e1:2b:85:ba: f9:27:e9:85:62:ee:a9:95:64:d8:06:03:8e:4a:96: 7b:22:1b:d1:8f:27:3c:97:6a:d5:6f:f8:de:11:a2: 89:91:0f:e7:57:f0:12:3d:02:0d:87:e1:f0:13:70: 2f:d9:db:c2:dc:fe:0c:6f:8f:30:8c:c7:a0:13:09: 7c:5c:06:8e:69:ae:4a:78:69:93:22:04:d6:f7:a7: ea:95:5e:6d:84:7e:83:50:ed:21:5a:8f:6a:ff:78: a0:7f:52:04:2d:d9:bc:35:05:9e:ec:db:a2:33:77: 1a:7c:38:f6:4a:46:eb:84:37:85:cb:0f:62:aa:77: 6e:01:3c:56:ff:98:8d:da:0f:22:43:8e:c7:d9:e5: 02:cc:c7:5c:db:a8:3e:03:30:5e:42:75:38:e3:fe: 85:e0:f8:68:26:56:ff:7c:b5:da:66:c8:23:6b:9d: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:06:BD:2C:18:80:40:30:8E:C6:64:9B:7E:62:07:6E:F0:72:2B:30 X509v3 Authority Key Identifier: keyid:5F:ED:2A:FC:A7:C9:FB:DE:AC:83:52:7A:15:BE:54:7D:7B:63:C2:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5FED2AFCA7C9FBDEAC83527A15BE547D7B63C296.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/1/326130613a363034343a623330353a3a2f34382d3438203d3e20323134383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:b305::/48 Signature Algorithm: sha256WithRSAEncryption 75:53:ee:34:d9:dc:22:eb:51:df:fc:45:de:bc:dd:b1:49:0e: 66:f7:8b:42:47:b2:af:ee:83:00:55:3f:61:02:d1:0a:bd:18: 34:a1:59:31:1b:7c:ff:50:d1:99:c7:c7:b1:e2:14:15:82:71: be:d7:b0:f2:cd:00:a4:73:1b:2a:59:70:6b:de:26:89:07:8a: 9e:6b:e2:30:e8:53:65:32:09:b6:33:7a:c5:e3:55:59:a1:b8: ea:67:04:d4:e3:92:82:a1:a3:78:53:f0:e2:89:b2:b6:0b:74: 55:3f:23:cc:b8:80:0c:3e:9a:33:b2:02:3c:ba:b4:cc:d9:d3: 9c:c9:33:56:bb:71:37:ad:d0:cc:2c:d4:11:7d:ab:38:d4:84: dc:77:c6:3b:19:a4:5a:e5:ad:13:b1:9e:04:42:3c:a7:03:72: d8:18:cd:2a:a5:04:fc:c9:95:5a:8e:ef:a2:4c:34:26:45:ea: 93:d1:90:a7:15:c9:e7:42:0c:c8:9d:03:10:c3:d7:13:76:99: 08:60:0a:1f:ca:ff:e3:04:b3:71:40:63:a0:fa:b9:d5:26:74: 18:c2:c7:e6:1f:9d:af:a6:f7:fc:de:df:cc:60:32:5f:94:19: a2:a2:f4:28:be:f9:40:6b:4a:f9:37:c3:2b:3f:23:5f:c2:cf: 78:76:91:76 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUJvPrP5TGbJpvSq74hdn/pMplyE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3 QjYzQzI5NjAeFw0yNDA4MTExMDM0MzJaFw0yNTA4MTAxMDM5MzJaMDMxMTAvBgNV BAMTKEFGMDZCRDJDMTg4MDQwMzA4RUM2NjQ5QjdFNjIwNzZFRjA3MjJCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2aqMGrlN8vdzzlk32XrE1ETK gAJw8pFJ8ZeAS7IScTckutTVfls0s0DD+IGhMlDUflESzAvUtC43awaoxTyyjh75 CV7PTSLXHko0OAKenuzqTEhF4SuFuvkn6YVi7qmVZNgGA45KlnsiG9GPJzyXatVv +N4RoomRD+dX8BI9Ag2H4fATcC/Z28Lc/gxvjzCMx6ATCXxcBo5prkp4aZMiBNb3 p+qVXm2EfoNQ7SFaj2r/eKB/UgQt2bw1BZ7s26Izdxp8OPZKRuuEN4XLD2Kqd24B PFb/mI3aDyJDjsfZ5QLMx1zbqD4DMF5CdTjj/oXg+GgmVv98tdpmyCNrnZJPAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUrwa9LBiAQDCOxmSbfmIHbvByKzAwHwYDVR0j BBgwFoAUX+0q/KfJ+96sg1J6Fb5UfXtjwpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjBjNzVkZjktNWI5Mi00OGMwLWJiZGEtYTQzYmQxOWVm N2QzLzEvNUZFRDJBRkNBN0M5RkJERUFDODM1MjdBMTVCRTU0N0Q3QjYzQzI5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81RkVEMkFGQ0E3QzlGQkRFQUM4MzUyN0Ex NUJFNTQ3RDdCNjNDMjk2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9iMGM3NWRmOS01YjkyLTQ4YzAtYmJkYS1hNDNiZDE5ZWY3ZDMvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTYyMzMzMDM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRLMFMA0GCSqGSIb3DQEBCwUAA4IBAQB1 U+402dwi61Hf/EXevN2xSQ5m94tCR7Kv7oMAVT9hAtEKvRg0oVkxG3z/UNGZx8ex 4hQVgnG+17DyzQCkcxsqWXBr3iaJB4qea+Iw6FNlMgm2M3rF41VZobjqZwTU45KC oaN4U/DiibK2C3RVPyPMuIAMPpozsgI8urTM2dOcyTNWu3E3rdDMLNQRfas41ITc d8Y7GaRa5a0TsZ4EQjynA3LYGM0qpQT8yZVaju+iTDQmReqT0ZCnFcnnQgzInQMQ w9cTdpkIYAofyv/jBLNxQGOg+rnVJnQYwsfmH52vpvf83t/MYDJflBmiovQovvlA a0r5N8MrPyNfws94dpF2 -----END CERTIFICATE-----Generated at Wed Sep 18 23:45:55 2024 by rpki-client on console-ams.rpki-client.org