$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa File: 326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa (raw, json) Hash identifier: hf0sTrKrDJ4boI08ZHhNaHWTmMq+esR34eLQdUrR3Dc= Subject key identifier: BD:60:96:2A:8B:B4:72:E1:9D:96:0B:2C:49:A8:89:DC:F5:49:05:9C Certificate issuer: /CN=503177A5FC39DD005C41B770207D6705510713A8 Certificate serial: 7B4934301A2BEB305A08709FD7E633A913441086 Authority key identifier: 50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa Signing time: Sat 22 Jun 2024 02:52:17 +0000 ROA not before: Sat 22 Jun 2024 02:47:17 +0000 ROA not after: Sat 21 Jun 2025 02:52:17 +0000 asID: 203069 IP address blocks: 2a12:dd47:8400::/45 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Jun 2024 16:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:49:34:30:1a:2b:eb:30:5a:08:70:9f:d7:e6:33:a9:13:44:10:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503177A5FC39DD005C41B770207D6705510713A8 Validity Not Before: Jun 22 02:47:17 2024 GMT Not After : Jun 21 02:52:17 2025 GMT Subject: CN=BD60962A8BB472E19D960B2C49A889DCF549059C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:67:20:53:11:ca:f7:00:60:4f:a4:e0:9c: 1e:4a:0d:a6:b9:43:b0:71:4e:71:04:f8:40:a9:49: 67:c5:ba:3c:e3:3b:13:b7:bb:18:7d:ae:5b:47:63: 65:4d:35:33:66:3f:43:06:96:28:10:92:f2:93:3d: 26:17:cc:5c:8f:6e:0c:2f:95:28:80:f0:79:54:ed: c0:8d:28:71:e4:9f:e5:f5:29:58:41:ef:e6:df:a2: c8:7f:87:e7:f1:08:33:ed:ee:98:41:22:55:58:59: da:26:0b:97:72:f8:00:84:82:1c:29:66:86:ef:5b: 63:19:fe:9d:38:a4:db:e9:61:e5:ea:3c:91:ad:03: 25:f6:76:f6:36:23:1e:7c:b9:7d:e6:34:88:92:e8: 86:73:75:09:73:18:6f:52:68:81:7a:55:d3:46:1f: a8:78:47:68:c0:11:6d:25:de:78:ff:92:c0:61:95: 6d:1f:1a:47:54:31:51:9c:df:ff:67:ff:6e:85:6b: f9:45:22:00:fc:2d:cd:ba:91:e0:ff:82:fd:cb:44: cc:42:7a:05:77:16:0f:25:c8:75:0a:63:6a:24:43: d9:db:f7:2d:a0:d3:69:ea:ec:10:39:0c:c7:77:d1: ed:b5:06:ac:ef:41:35:80:82:00:ba:3f:c8:73:cf: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:60:96:2A:8B:B4:72:E1:9D:96:0B:2C:49:A8:89:DC:F5:49:05:9C X509v3 Authority Key Identifier: keyid:50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:dd47:8400::/45 Signature Algorithm: sha256WithRSAEncryption b5:7b:64:ea:94:da:d7:ae:45:e0:29:0c:42:d6:ef:9c:2e:95: 1c:1e:53:2d:6b:75:29:0e:72:1d:b1:d2:2b:42:5f:4e:18:ca: 03:99:c9:7c:11:58:7f:f3:bd:d5:35:b9:5e:69:b9:b5:b5:e5: 7b:bc:58:42:a0:30:47:73:00:09:f8:21:f9:d5:d0:d2:e7:2e: af:2a:fc:3e:76:35:ca:70:62:34:b1:8d:0f:d0:cf:22:ef:df: d0:3f:74:9b:21:36:00:0d:ba:14:aa:a7:f7:97:c2:49:4c:bf: 68:8e:b9:b1:09:d4:11:55:9f:dc:7b:78:1b:ae:a9:2e:8b:fc: 47:e2:9e:95:b9:a8:e6:e4:d7:2f:e4:32:d2:3e:1a:f1:5e:cc: 97:3c:cd:2e:d9:41:da:e4:a7:d8:7e:6a:54:d5:d5:c9:ca:9d: b9:53:78:7c:5d:ef:58:e7:3d:c4:5e:89:4a:eb:1c:b4:55:d3: 67:83:cd:65:3d:e9:2f:95:3e:cd:8b:16:db:45:cc:b8:fb:ee: 8b:17:77:c0:9d:1f:61:d0:df:a9:61:dc:f1:af:fd:96:2b:08: 28:1a:f6:d7:4b:44:1e:95:41:6a:c4:83:14:f6:6c:c6:96:e4: 4c:d4:17:b4:54:3e:46:41:a4:09:45:3e:3a:45:e5:9c:6f:52: 60:89:5c:72 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUe0k0MBor6zBaCHCf1+YzqRNEEIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTAzMTc3QTVGQzM5REQwMDVDNDFCNzcwMjA3RDY3MDU1 MTA3MTNBODAeFw0yNDA2MjIwMjQ3MTdaFw0yNTA2MjEwMjUyMTdaMDMxMTAvBgNV BAMTKEJENjA5NjJBOEJCNDcyRTE5RDk2MEIyQzQ5QTg4OURDRjU0OTA1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW32cgUxHK9wBgT6TgnB5KDaa5 Q7BxTnEE+ECpSWfFujzjOxO3uxh9rltHY2VNNTNmP0MGligQkvKTPSYXzFyPbgwv lSiA8HlU7cCNKHHkn+X1KVhB7+bfosh/h+fxCDPt7phBIlVYWdomC5dy+ACEghwp ZobvW2MZ/p04pNvpYeXqPJGtAyX2dvY2Ix58uX3mNIiS6IZzdQlzGG9SaIF6VdNG H6h4R2jAEW0l3nj/ksBhlW0fGkdUMVGc3/9n/26Fa/lFIgD8Lc26keD/gv3LRMxC egV3Fg8lyHUKY2okQ9nb9y2g02nq7BA5DMd30e21BqzvQTWAggC6P8hzz4QdAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUvWCWKou0cuGdlgssSaiJ3PVJBZwwHwYDVR0j BBgwFoAUUDF3pfw53QBcQbdwIH1nBVEHE6gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjBiZThmN2ItZDQ0Yy00Y2EyLWJlYjMtMmRkNDFiYWVl ODM3LzMvNTAzMTc3QTVGQzM5REQwMDVDNDFCNzcwMjA3RDY3MDU1MTA3MTNBOC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03Mjc4LTQ2 Y2YtYWJkMS05OWNkMWZkMmJlNGUvNi81MDMxNzdBNUZDMzlERDAwNUM0MUI3NzAy MDdENjcwNTUxMDcxM0E4LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS82MGJlOGY3Yi1kNDRjLTRjYTItYmViMy0yZGQ0MWJhZWU4MzcvMy8zMjYxMzEz MjNhNjQ2NDM0MzczYTM4MzQzMDMwM2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzIz MDMzMzAzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcDKhLdR4QAMA0GCSqGSIb3DQEBCwUAA4IBAQC1 e2TqlNrXrkXgKQxC1u+cLpUcHlMta3UpDnIdsdIrQl9OGMoDmcl8EVh/873VNble abm1teV7vFhCoDBHcwAJ+CH51dDS5y6vKvw+djXKcGI0sY0P0M8i79/QP3SbITYA DboUqqf3l8JJTL9ojrmxCdQRVZ/ce3gbrqkui/xH4p6Vuajm5Ncv5DLSPhrxXsyX PM0u2UHa5KfYfmpU1dXJyp25U3h8Xe9Y5z3EXolK6xy0VdNng81lPekvlT7Nixbb Rcy4++6LF3fAnR9h0N+pYdzxr/2WKwgoGvbXS0QelUFqxIMU9mzGluRM1Be0VD5G QaQJRT46ReWcb1JgiVxy -----END CERTIFICATE-----Generated at Wed Jun 26 08:30:20 2024 by rpki-client on console.sobornost.net