$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa File: 326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa (raw, json) Hash identifier: XpXMXD7WLvF9GioVgay+deJvR4n/11AkEGGwbKMgjqI= Subject key identifier: 9B:34:76:CA:D5:BC:BD:95:0E:11:2D:6D:23:1B:3E:DC:0F:13:C8:04 Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Certificate serial: 616FA82D0A13687C8D4A206E04569AFB54D2CE0D Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa Signing time: Wed 28 Aug 2024 13:57:30 +0000 ROA not before: Wed 28 Aug 2024 13:52:30 +0000 ROA not after: Wed 27 Aug 2025 13:57:30 +0000 asID: 214290 IP address blocks: 2a0a:6044:9008::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6f:a8:2d:0a:13:68:7c:8d:4a:20:6e:04:56:9a:fb:54:d2:ce:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Validity Not Before: Aug 28 13:52:30 2024 GMT Not After : Aug 27 13:57:30 2025 GMT Subject: CN=9B3476CAD5BCBD950E112D6D231B3EDC0F13C804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e5:d6:0c:0f:2c:68:6f:1d:38:93:1b:60:cd: ba:3b:11:d8:ad:0a:66:35:4a:38:90:bc:0b:49:18: ca:bc:19:c1:50:9c:ce:49:39:60:85:99:4a:1b:f6: 01:a9:95:fa:82:40:cf:8f:44:18:a6:c3:74:98:1e: 15:41:3a:26:52:72:c7:ed:96:ad:68:0f:bc:f3:cb: f9:2f:fc:17:3b:68:88:c3:2c:7e:77:41:f1:04:52: be:8a:11:96:10:90:53:3c:17:7d:40:9e:30:1c:c6: f8:49:78:01:98:d2:dc:b5:30:f5:29:2d:d6:07:2b: 61:55:ab:32:d6:44:53:cc:e3:6c:25:aa:85:a5:6c: a3:d0:df:fc:a7:f0:96:a7:b6:40:d0:8f:4b:0f:5f: 09:0a:69:50:b2:30:fa:1c:c4:fa:2e:9d:1b:e0:c5: 14:46:b4:fd:e0:38:1d:ca:94:5a:77:d4:fb:48:37: 30:d4:c9:25:b3:6f:eb:8d:a9:a5:15:f4:8e:82:5b: 2a:1d:d9:bc:24:4e:0f:22:47:67:37:02:c3:58:2a: 37:d9:7c:53:82:17:95:72:cc:dd:0f:d7:d5:d3:c3: 43:24:c9:6f:c5:fa:16:7f:06:ad:ef:64:ac:5a:42: 38:f1:cf:f4:18:c5:d5:02:a6:23:3c:38:71:0e:b7: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:34:76:CA:D5:BC:BD:95:0E:11:2D:6D:23:1B:3E:DC:0F:13:C8:04 X509v3 Authority Key Identifier: keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:9008::/48 Signature Algorithm: sha256WithRSAEncryption 9e:0c:7a:70:9d:c8:bb:ae:a6:96:1f:1a:57:0a:8a:e8:e6:47: 01:7b:e3:2a:a6:7f:9c:de:45:2c:65:5f:fa:96:b4:a1:86:16: b0:65:8d:86:97:94:e7:db:78:e0:6c:f2:8a:86:d4:af:b9:e9: 6f:6c:07:d3:cf:fc:55:bd:82:2b:fc:1c:14:4a:73:5d:ca:27: bc:6d:21:1f:02:a3:14:48:21:cc:ed:68:23:bb:87:ce:24:8d: 85:31:cd:fa:4a:ef:52:88:16:65:51:68:e0:64:73:c9:ea:74: a4:5e:35:4f:b5:37:a2:87:f9:ea:f0:dc:61:d7:36:6e:09:37: cb:73:64:75:be:69:3b:12:0a:6b:d2:2f:de:d7:0a:01:b6:f3: 34:f4:54:fc:34:1a:be:f6:e2:44:73:2c:3b:24:a3:e8:1d:dc: c2:4c:24:9d:09:15:18:2b:c5:1c:39:38:a0:41:2d:9e:05:cd: 84:20:97:d3:8d:c9:a3:59:3d:4b:e2:8a:a5:58:13:27:ea:6c: 1c:be:4f:44:92:7f:62:ef:3a:f6:c5:47:d8:de:f3:e0:55:e8: 06:1b:92:57:65:73:e3:42:ff:80:b4:98:41:2c:b0:8a:f6:4f: 39:7e:79:37:08:ac:7f:db:17:79:d3:5d:3b:8c:cc:e6:59:43: 79:bc:9c:a1 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUYW+oLQoTaHyNSiBuBFaa+1TSzg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBC MkFGNjZERjAeFw0yNDA4MjgxMzUyMzBaFw0yNTA4MjcxMzU3MzBaMDMxMTAvBgNV BAMTKDlCMzQ3NkNBRDVCQ0JEOTUwRTExMkQ2RDIzMUIzRURDMEYxM0M4MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5dYMDyxobx04kxtgzbo7Edit CmY1SjiQvAtJGMq8GcFQnM5JOWCFmUob9gGplfqCQM+PRBimw3SYHhVBOiZScsft lq1oD7zzy/kv/Bc7aIjDLH53QfEEUr6KEZYQkFM8F31AnjAcxvhJeAGY0ty1MPUp LdYHK2FVqzLWRFPM42wlqoWlbKPQ3/yn8JantkDQj0sPXwkKaVCyMPocxPounRvg xRRGtP3gOB3KlFp31PtINzDUySWzb+uNqaUV9I6CWyod2bwkTg8iR2c3AsNYKjfZ fFOCF5VyzN0P19XTw0MkyW/F+hZ/Bq3vZKxaQjjxz/QYxdUCpiM8OHEOt5TXAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUmzR2ytW8vZUOES1tIxs+3A8TyAQwHwYDVR0j BBgwFoAUSIvYav2xviOOHj6t6FoFILKvZt8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw YTk1LzEvNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBCMkFGNjZERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURF ODVBMDUyMEIyQUY2NkRGLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9lY2IzMDMyMi05NGY3LTRlNjEtODY5MS01YzFiNjExYjBhOTUvMS8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM5MzAzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzIzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRJAIMA0GCSqGSIb3DQEBCwUAA4IBAQCe DHpwnci7rqaWHxpXCoro5kcBe+Mqpn+c3kUsZV/6lrShhhawZY2Gl5Tn23jgbPKK htSvuelvbAfTz/xVvYIr/BwUSnNdyie8bSEfAqMUSCHM7Wgju4fOJI2FMc36Su9S iBZlUWjgZHPJ6nSkXjVPtTeih/nq8Nxh1zZuCTfLc2R1vmk7Egpr0i/e1woBtvM0 9FT8NBq+9uJEcyw7JKPoHdzCTCSdCRUYK8UcOTigQS2eBc2EIJfTjcmjWT1L4oql WBMn6mwcvk9Ekn9i7zr2xUfY3vPgVegGG5JXZXPjQv+AtJhBLLCK9k85fnk3CKx/ 2xd50107jMzmWUN5vJyh -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org