$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa File: 326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa (raw, json) Hash identifier: ZmUx6T9QZCqdwLpnTe2pjNUl5+p3SFgFCFUVwxwmZA4= Subject key identifier: C6:F1:F7:57:02:2C:FB:47:16:8E:93:F8:C6:F2:A7:4D:D1:1B:BB:41 Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Certificate serial: 07AA19CEB3EAE56AD1F6ADDAF03E551A834D41 Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa Signing time: Thu 28 Mar 2024 00:25:34 +0000 ROA not before: Thu 28 Mar 2024 00:20:34 +0000 ROA not after: Thu 27 Mar 2025 00:25:34 +0000 asID: 215232 IP address blocks: 2a0a:6044:9030::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:aa:19:ce:b3:ea:e5:6a:d1:f6:ad:da:f0:3e:55:1a:83:4d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Validity Not Before: Mar 28 00:20:34 2024 GMT Not After : Mar 27 00:25:34 2025 GMT Subject: CN=C6F1F757022CFB47168E93F8C6F2A74DD11BBB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:e0:46:16:b5:ce:ad:5f:33:03:f2:25:a5: 95:49:0f:47:98:a6:04:69:73:66:1d:24:16:57:6c: 09:b3:60:e3:c7:fb:ff:0b:e2:a7:e2:52:5b:51:4b: aa:3f:f9:47:74:8e:b8:b0:15:f3:d4:ef:1f:d4:69: 3f:35:ce:7a:32:97:e9:b5:48:00:d8:20:33:32:f4: cb:d1:cb:8b:39:bf:33:f5:aa:82:5c:d0:1d:9f:50: fd:84:5c:f4:07:33:b6:5f:ec:5e:c3:1a:3d:56:1f: 5d:52:b4:72:b6:ba:0e:5a:79:dd:34:c2:d4:59:25: 9c:45:09:30:7d:54:f3:bd:dc:20:93:c3:19:8d:83: ef:75:9a:72:d0:30:95:fc:af:1c:81:ca:ab:ce:79: 8d:a6:ed:e4:ef:7b:c1:97:12:24:79:a1:0e:62:41: 43:f5:ff:6f:d2:7b:9a:bc:28:50:d6:19:ea:a9:82: f2:79:0c:76:1a:9c:02:57:08:c1:a4:86:11:7f:28: dd:a4:e2:7b:ea:37:b2:b7:1f:50:92:44:c6:5a:ad: f7:82:a6:00:1e:0b:e1:e6:7b:bf:96:76:03:60:77: 7e:f7:91:79:30:9d:11:3e:e3:2b:80:c3:41:4e:c8: 18:db:1d:64:fa:0f:ef:b4:c7:a4:c9:4b:9f:ff:a4: f4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F1:F7:57:02:2C:FB:47:16:8E:93:F8:C6:F2:A7:4D:D1:1B:BB:41 X509v3 Authority Key Identifier: keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:9030::/44 Signature Algorithm: sha256WithRSAEncryption 7f:c0:c2:ad:fb:21:4a:47:d2:ed:68:35:05:e6:ed:29:97:08: 35:94:4a:7d:30:5b:4b:26:48:a1:7d:5b:72:e5:89:7f:a6:e9: 3c:70:73:8e:79:35:b4:95:b3:b6:0e:96:10:27:4e:3e:52:7e: 38:9a:c7:42:da:aa:55:5a:fb:0b:b8:59:93:af:15:c2:68:d1: 8a:be:66:4a:8f:ff:8d:24:b5:25:d3:1c:ca:85:92:b3:98:e5: 50:6e:16:f6:ba:b3:4d:90:9f:3f:39:03:63:47:15:8e:e9:fc: 24:a9:5c:8c:0e:d7:b7:fe:0e:09:64:e0:40:6a:15:9d:2c:98: a2:33:a3:49:70:93:a6:4f:66:db:76:1c:81:86:74:20:31:11: b7:b0:79:7f:bc:93:f1:6b:c8:f3:6f:15:05:1e:bc:12:93:bf: 63:cf:95:10:97:36:a8:61:c8:36:cd:42:31:fc:9f:07:3f:29: a1:4b:97:22:19:8e:4b:8f:45:cd:fb:da:80:07:c2:3a:fd:7a: 10:e8:41:27:89:31:82:54:63:89:53:19:a3:f2:aa:e3:9b:73: 4c:51:96:86:b8:03:e6:d5:da:9a:9b:1e:18:22:df:d7:e3:56: 02:c9:51:6f:d7:34:bc:ce:db:0b:ac:ff:1d:28:2b:fb:c8:44: 08:25:d8:b1 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgITB6oZzrPq5WrR9q3a8D5VGoNNQTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURFODVBMDUyMEIy QUY2NkRGMB4XDTI0MDMyODAwMjAzNFoXDTI1MDMyNzAwMjUzNFowMzExMC8GA1UE AxMoQzZGMUY3NTcwMjJDRkI0NzE2OEU5M0Y4QzZGMkE3NEREMTFCQkI0MTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSi4EYWtc6tXzMD8iWllUkPR5im BGlzZh0kFldsCbNg48f7/wvip+JSW1FLqj/5R3SOuLAV89TvH9RpPzXOejKX6bVI ANggMzL0y9HLizm/M/WqglzQHZ9Q/YRc9Acztl/sXsMaPVYfXVK0cra6Dlp53TTC 1FklnEUJMH1U873cIJPDGY2D73WactAwlfyvHIHKq855jabt5O97wZcSJHmhDmJB Q/X/b9J7mrwoUNYZ6qmC8nkMdhqcAlcIwaSGEX8o3aTie+o3srcfUJJExlqt94Km AB4L4eZ7v5Z2A2B3fveReTCdET7jK4DDQU7IGNsdZPoP77THpMlLn/+k9EcCAwEA AaOCAoUwggKBMB0GA1UdDgQWBBTG8fdXAiz7RxaOk/jG8qdN0Ru7QTAfBgNVHSME GDAWgBRIi9hq/bG+I44ePq3oWgUgsq9m3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9lY2IzMDMyMi05NGY3LTRlNjEtODY5MS01YzFiNjExYjBh OTUvMS80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURFODVBMDUyMEIyQUY2NkRGLmNy bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0 MS1iY2MxLTI3NjU0M2EyNWM3ZC8wLzQ4OEJEODZBRkRCMUJFMjM4RTFFM0VBREU4 NUEwNTIwQjJBRjY2REYuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2VjYjMwMzIyLTk0ZjctNGU2MS04NjkxLTVjMWI2MTFiMGE5NS8xLzMyNjEzMDYx M2EzNjMwMzQzNDNhMzkzMDMzMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjMx MzUzMjMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQqCmBEkDAwDQYJKoZIhvcNAQELBQADggEBAH/A wq37IUpH0u1oNQXm7SmXCDWUSn0wW0smSKF9W3LliX+m6Txwc455NbSVs7YOlhAn Tj5Sfjiax0LaqlVa+wu4WZOvFcJo0Yq+ZkqP/40ktSXTHMqFkrOY5VBuFva6s02Q nz85A2NHFY7p/CSpXIwO17f+Dglk4EBqFZ0smKIzo0lwk6ZPZtt2HIGGdCAxEbew eX+8k/FryPNvFQUevBKTv2PPlRCXNqhhyDbNQjH8nwc/KaFLlyIZjkuPRc372oAH wjr9ehDoQSeJMYJUY4lTGaPyquObc0xRloa4A+bV2pqbHhgi39fjVgLJUW/XNLzO 2wus/x0oK/vIRAgl2LE= -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org