$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa File: 326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa (raw, json) Hash identifier: AfzgORGNBz+QXzbNFXc6g6iPrPpHM5f2+sQ8boLLtk8= Subject key identifier: EB:A1:59:EA:C6:16:06:D9:A6:10:10:58:D7:CC:E2:0E:05:FC:68:83 Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Certificate serial: 0D46B7EEEB6E175B84188CCD8197131F60CFC480 Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa Signing time: Fri 02 Aug 2024 06:41:19 +0000 ROA not before: Fri 02 Aug 2024 06:36:19 +0000 ROA not after: Fri 01 Aug 2025 06:41:19 +0000 asID: 215590 IP address blocks: 2a0a:6044:9006::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:b7:ee:eb:6e:17:5b:84:18:8c:cd:81:97:13:1f:60:cf:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Validity Not Before: Aug 2 06:36:19 2024 GMT Not After : Aug 1 06:41:19 2025 GMT Subject: CN=EBA159EAC61606D9A6101058D7CCE20E05FC6883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9a:50:f9:46:e5:be:40:f0:42:14:aa:6a:d2: d3:b3:03:8e:dc:b6:68:01:ed:0f:48:ed:a3:4e:16: c2:2d:26:13:a5:26:56:fa:b4:0f:01:d6:6f:bb:e3: 13:c8:f6:de:56:5b:cf:6c:9b:dc:97:58:e7:63:ec: 61:06:41:80:a8:bb:af:37:d5:fc:27:de:bc:2f:f2: 79:dd:33:3c:24:a4:09:66:35:d0:36:97:d5:c9:2f: 08:d8:17:70:b8:17:59:fb:fc:82:cf:04:d3:9e:1a: 1a:a7:2e:a0:47:86:30:c6:77:f2:3b:20:55:b9:bb: 5f:a4:1c:55:70:7a:46:ba:7d:cb:4a:14:74:7d:70: 73:76:5c:7d:ad:55:36:78:1f:8a:81:9b:e9:60:d4: 7d:04:e2:72:35:07:38:0d:fe:0d:6f:82:44:8f:f4: b0:2d:34:1f:2b:ef:f2:46:50:da:e0:47:d0:0c:70: 2e:85:f4:3b:62:aa:50:55:27:01:8a:62:86:9b:11: e0:1a:21:3c:67:0c:1a:fd:61:ee:2d:45:75:bf:33: 51:9d:ff:95:3d:f9:82:20:e5:9b:3c:ed:46:65:c4: 84:f6:a2:af:be:c4:e1:27:60:f8:ef:7d:98:9b:cd: fe:57:c1:4e:47:29:f1:e1:28:16:56:85:ff:76:85: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A1:59:EA:C6:16:06:D9:A6:10:10:58:D7:CC:E2:0E:05:FC:68:83 X509v3 Authority Key Identifier: keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:9006::/48 Signature Algorithm: sha256WithRSAEncryption a2:44:c1:63:87:9d:8a:1d:ee:b4:bc:b5:a6:0a:69:9d:91:81: b9:24:cc:23:df:73:53:bb:30:1c:7c:5c:a7:18:a9:2b:3b:8b: 77:8f:57:96:b0:fd:cd:28:76:49:24:67:0f:36:f7:1c:05:e6: a2:2c:c9:99:d2:98:89:9b:c8:6a:bb:d9:69:36:5e:06:98:8a: 92:7e:66:1b:43:71:2f:38:51:b4:c1:02:ea:f2:b0:21:0f:74: bd:3a:bf:40:1b:69:96:fd:46:0c:5a:78:b9:8f:06:6f:b9:03: f7:af:99:ba:99:1d:8b:8e:09:1c:5a:59:13:18:d6:18:7c:aa: 18:ba:01:fc:b9:ee:9d:66:ae:b2:e6:b3:6c:ac:a1:81:d6:eb: 4f:9f:93:1d:ec:75:4c:dc:ef:82:e7:af:7c:16:7d:e9:d0:80: 96:82:d1:3b:c5:f9:87:49:aa:d9:05:24:ef:f9:3f:99:d7:f4: b6:08:a1:6a:c8:45:df:d3:99:11:26:75:2d:1b:1d:97:91:a9: 6c:2b:db:4f:2e:8a:f8:58:ae:4f:95:c9:92:1f:23:b7:0c:65: a7:7b:b0:f1:7c:95:29:f6:54:b4:92:dc:9c:21:75:82:c4:9e: 71:a7:0c:4f:f2:55:e9:d9:31:53:06:aa:cc:4e:ba:8c:e4:4d: 1e:87:d2:6d -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUDUa37utuF1uEGIzNgZcTH2DPxIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBC MkFGNjZERjAeFw0yNDA4MDIwNjM2MTlaFw0yNTA4MDEwNjQxMTlaMDMxMTAvBgNV BAMTKEVCQTE1OUVBQzYxNjA2RDlBNjEwMTA1OEQ3Q0NFMjBFMDVGQzY4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjmlD5RuW+QPBCFKpq0tOzA47c tmgB7Q9I7aNOFsItJhOlJlb6tA8B1m+74xPI9t5WW89sm9yXWOdj7GEGQYCou683 1fwn3rwv8nndMzwkpAlmNdA2l9XJLwjYF3C4F1n7/ILPBNOeGhqnLqBHhjDGd/I7 IFW5u1+kHFVweka6fctKFHR9cHN2XH2tVTZ4H4qBm+lg1H0E4nI1BzgN/g1vgkSP 9LAtNB8r7/JGUNrgR9AMcC6F9DtiqlBVJwGKYoabEeAaITxnDBr9Ye4tRXW/M1Gd /5U9+YIg5Zs87UZlxIT2oq++xOEnYPjvfZibzf5XwU5HKfHhKBZWhf92hU3RAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU66FZ6sYWBtmmEBBY18ziDgX8aIMwHwYDVR0j BBgwFoAUSIvYav2xviOOHj6t6FoFILKvZt8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw YTk1LzEvNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBCMkFGNjZERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURF ODVBMDUyMEIyQUY2NkRGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lY2IzMDMyMi05NGY3LTRlNjEtODY5MS01YzFiNjExYjBhOTUvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM5MzAzMDM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzUzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRJAGMA0GCSqGSIb3DQEBCwUAA4IBAQCi RMFjh52KHe60vLWmCmmdkYG5JMwj33NTuzAcfFynGKkrO4t3j1eWsP3NKHZJJGcP NvccBeaiLMmZ0piJm8hqu9lpNl4GmIqSfmYbQ3EvOFG0wQLq8rAhD3S9Or9AG2mW /UYMWni5jwZvuQP3r5m6mR2LjgkcWlkTGNYYfKoYugH8ue6dZq6y5rNsrKGB1utP n5Md7HVM3O+C5698Fn3p0ICWgtE7xfmHSarZBSTv+T+Z1/S2CKFqyEXf05kRJnUt Gx2XkalsK9tPLor4WK5PlcmSHyO3DGWne7DxfJUp9lS0ktycIXWCxJ5xpwxP8lXp 2TFTBqrMTrqM5E0eh9Jt -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org