$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa File: 326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa (raw, json) Hash identifier: SpFD7pXqPw/IerpxSoXn4nE0KgZNsHNjYg1HX8psBsI= Subject key identifier: AE:EE:5B:71:20:30:73:A4:B9:B6:E9:C3:56:B4:6A:48:02:37:30:EB Certificate issuer: /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51 Certificate serial: 4F7FE02635D84B732D66BA745DBF9564EBF9FAA8 Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51 Authority info access: rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa Signing time: Tue 12 Mar 2024 01:46:50 +0000 ROA not before: Tue 12 Mar 2024 01:41:50 +0000 ROA not after: Tue 11 Mar 2025 01:46:50 +0000 asID: 203069 IP address blocks: 2a12:dd47:802c::/46 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Jun 2024 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7f:e0:26:35:d8:4b:73:2d:66:ba:74:5d:bf:95:64:eb:f9:fa:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51 Validity Not Before: Mar 12 01:41:50 2024 GMT Not After : Mar 11 01:46:50 2025 GMT Subject: CN=AEEE5B71203073A4B9B6E9C356B46A48023730EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:a3:19:bf:42:db:00:c8:37:2f:f4:46:2a: 22:f6:ea:81:44:de:42:c5:46:90:ff:37:98:24:41: 2f:20:2c:cc:56:51:97:b6:7b:55:c3:71:0e:d0:c6: fd:58:d3:95:88:21:5c:f7:77:11:43:fc:22:5a:b8: 2d:45:1a:5b:7d:46:ed:48:62:e2:bc:9a:64:c2:47: 1e:34:e6:6e:d6:fd:38:b1:90:4b:94:06:ae:4b:e6: 9a:ae:7c:25:d2:c6:88:67:b1:12:1a:cc:50:3d:d9: 83:92:7f:61:ca:b5:42:33:ae:cd:f2:1b:23:16:7c: 56:34:97:28:23:3e:8a:5f:72:92:cd:09:14:76:e5: 38:b0:3f:5e:4c:5a:ca:0f:7d:54:89:95:6c:4a:36: d8:41:e4:84:ae:08:c4:89:ad:ff:71:a5:2c:c1:eb: ff:96:6e:46:a9:a1:ef:38:20:a1:a0:86:ec:a0:82: 54:14:bd:cc:88:23:41:12:2e:05:56:99:b0:7f:2d: 74:21:70:37:a1:14:da:1f:fb:2e:0a:5c:69:74:fd: a6:cb:9a:cf:c3:1b:b4:a4:04:a0:31:bc:67:84:52: 8b:d6:22:e0:82:cb:a4:cf:5b:f4:f4:af:ff:3e:ca: de:7c:d8:4a:57:a4:0d:5f:e7:a0:34:28:e0:a6:de: b2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EE:5B:71:20:30:73:A4:B9:B6:E9:C3:56:B4:6A:48:02:37:30:EB X509v3 Authority Key Identifier: keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl Authority Information Access: CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383032633a3a2f34362d3438203d3e20323033303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:802c::/46 Signature Algorithm: sha256WithRSAEncryption 27:37:2b:0b:c6:f0:6f:43:67:08:6f:28:25:08:f9:23:9e:67: a9:15:13:29:1e:4b:c4:73:d6:d6:cd:0b:d6:bc:b5:8b:a1:c5: fd:5a:45:72:b8:2c:c5:cd:15:66:1d:96:8e:06:d8:76:29:01: 2a:e8:83:44:95:2a:5a:1e:8b:02:db:0e:85:a5:ea:d4:23:2b: 3e:78:9a:3e:44:04:bd:b4:53:4d:68:3b:8a:1f:f7:e2:d4:3f: 63:78:30:4b:82:e2:ef:0a:3f:41:f7:27:0d:5b:06:e8:2b:a6: fb:e9:26:c3:e6:b7:b7:db:18:44:ec:1a:65:71:a8:ff:19:a9: c6:f2:60:c3:02:55:a7:61:94:e2:72:b1:68:f2:01:57:9c:7a: 72:1e:3f:93:c8:e7:1e:f3:0a:46:94:27:68:a5:e0:7c:f2:00: bf:3e:7e:17:50:fa:24:86:66:0d:78:65:12:0f:71:b6:02:ec: 8c:67:51:46:25:be:0b:fe:95:9c:ca:e1:88:77:d7:47:ef:85: 3c:e9:75:14:1c:b9:e7:91:a8:79:c7:2f:87:01:97:0d:bd:43: 64:8a:fa:2f:97:39:f0:e0:1e:e0:43:88:8a:67:c4:bb:f0:c6: 4c:f0:14:c6:9a:69:6f:d9:d3:1f:d1:2a:03:62:a6:c1:e6:33: 93:bd:37:ea -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIUT3/gJjXYS3MtZrp0Xb+VZOv5+qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFF NTBEQUQ1MTAeFw0yNDAzMTIwMTQxNTBaFw0yNTAzMTEwMTQ2NTBaMDMxMTAvBgNV BAMTKEFFRUU1QjcxMjAzMDczQTRCOUI2RTlDMzU2QjQ2QTQ4MDIzNzMwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16qMZv0LbAMg3L/RGKiL26oFE 3kLFRpD/N5gkQS8gLMxWUZe2e1XDcQ7Qxv1Y05WIIVz3dxFD/CJauC1FGlt9Ru1I YuK8mmTCRx405m7W/TixkEuUBq5L5pqufCXSxohnsRIazFA92YOSf2HKtUIzrs3y GyMWfFY0lygjPopfcpLNCRR25TiwP15MWsoPfVSJlWxKNthB5ISuCMSJrf9xpSzB 6/+Wbkapoe84IKGghuygglQUvcyII0ESLgVWmbB/LXQhcDehFNof+y4KXGl0/abL ms/DG7SkBKAxvGeEUovWIuCCy6TPW/T0r/8+yt582EpXpA1f56A0KOCm3rIPAgMB AAGjggJLMIICRzAdBgNVHQ4EFgQUru5bcSAwc6S5tunDVrRqSAI3MOswHwYDVR0j BBgwFoAUNOaqx0GT/jTFfLX1YmCO4eUNrVEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzYvMzRFNkFBQzc0MTkzRkUzNEM1N0NCNUY1NjI2MDhFRTFFNTBEQUQ1MS5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kuY28v cmVwby9BUzk0NS8xLzM0RTZBQUM3NDE5M0ZFMzRDNTdDQjVGNTYyNjA4RUUxRTUw REFENTEuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUHMAuGgZdyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFiZjhlOTc3 LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS82LzMyNjEzMTMyM2E2NDY0MzQz NzNhMzgzMDMyNjMzYTNhMmYzNDM2MmQzNDM4MjAzZDNlMjAzMjMwMzMzMDM2Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwIqEt1HgCwwDQYJKoZIhvcNAQELBQADggEBACc3KwvG8G9DZwhv KCUI+SOeZ6kVEykeS8Rz1tbNC9a8tYuhxf1aRXK4LMXNFWYdlo4G2HYpASrog0SV KloeiwLbDoWl6tQjKz54mj5EBL20U01oO4of9+LUP2N4MEuC4u8KP0H3Jw1bBugr pvvpJsPmt7fbGETsGmVxqP8ZqcbyYMMCVadhlOJysWjyAVecenIeP5PI5x7zCkaU J2il4HzyAL8+fhdQ+iSGZg14ZRIPcbYC7IxnUUYlvgv+lZzK4Yh310fvhTzpdRQc ueeRqHnHL4cBlw29Q2SK+i+XOfDgHuBDiIpnxLvwxkzwFMaaaW/Z0x/RKgNipsHm M5O9N+o= -----END CERTIFICATE-----Generated at Wed Jun 19 21:35:07 2024 by rpki-client on console.sobornost.net