$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/326130373a323438333a3a2f33322d3332203d3e20323135363439.roa File: 326130373a323438333a3a2f33322d3332203d3e20323135363439.roa (raw, json) Hash identifier: pOzVd2eHAgFLWwlREY3tsob3qnIsOPP0Ozsw7JCfcn8= Subject key identifier: 05:81:24:FD:0E:21:A1:AE:19:7D:1E:06:2D:08:33:EC:98:B5:E4:9D Certificate issuer: /CN=AB988C63F14514C64BA41F5464D70E7BB3EA8764 Certificate serial: 5171AACFFEA074F12129B960E4331277A459DF7B Authority key identifier: AB:98:8C:63:F1:45:14:C6:4B:A4:1F:54:64:D7:0E:7B:B3:EA:87:64 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/326130373a323438333a3a2f33322d3332203d3e20323135363439.roa Signing time: Fri 29 Mar 2024 23:02:35 +0000 ROA not before: Fri 29 Mar 2024 22:57:35 +0000 ROA not after: Fri 28 Mar 2025 23:02:35 +0000 asID: 215649 IP address blocks: 2a07:2483::/32 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/AB988C63F14514C64BA41F5464D70E7BB3EA8764.crl rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/AB988C63F14514C64BA41F5464D70E7BB3EA8764.mft rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jul 2024 14:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:71:aa:cf:fe:a0:74:f1:21:29:b9:60:e4:33:12:77:a4:59:df:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB988C63F14514C64BA41F5464D70E7BB3EA8764 Validity Not Before: Mar 29 22:57:35 2024 GMT Not After : Mar 28 23:02:35 2025 GMT Subject: CN=058124FD0E21A1AE197D1E062D0833EC98B5E49D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:89:bc:08:21:c4:4f:71:9a:0b:94:cb:9e: 2f:35:87:37:ce:77:56:dd:03:4a:07:5b:42:aa:bb: 4c:62:3a:d0:2a:29:e9:8b:5a:c1:f2:9e:bc:fb:cf: fe:03:2a:08:1c:45:ff:9c:3f:40:8f:35:05:fb:78: 86:5b:6c:1d:7b:c3:3e:8d:ae:ec:84:db:5d:26:94: 8b:b5:6d:f5:ef:10:5b:9b:e3:ea:cf:8c:82:b6:b1: c9:1e:7a:3f:c4:a6:51:60:53:c7:6a:b0:07:4c:ec: 83:fe:15:b5:49:b2:3b:95:76:45:e1:92:26:fb:36: 6c:4e:63:46:4e:76:35:31:8d:ef:fa:9b:a8:f8:a7: be:85:4d:cf:36:81:64:9b:b2:de:cd:20:eb:ac:b0: 95:3a:e7:9c:81:03:68:37:66:15:ed:50:aa:59:70: a9:49:0f:f3:b5:42:76:3b:88:55:af:94:c3:e8:02: b3:2f:76:64:a3:fb:e8:41:d1:d8:47:3c:41:b8:92: a3:f2:a7:43:61:42:3d:01:d6:f0:ee:53:51:be:15: 73:f1:f2:b4:aa:8f:46:d2:1b:e2:81:24:71:41:7b: 86:0d:69:52:e8:42:f8:53:cf:b6:5d:38:b7:fe:52: ba:41:42:9f:b1:a7:4c:02:f3:89:98:d5:bd:03:21: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:81:24:FD:0E:21:A1:AE:19:7D:1E:06:2D:08:33:EC:98:B5:E4:9D X509v3 Authority Key Identifier: keyid:AB:98:8C:63:F1:45:14:C6:4B:A4:1F:54:64:D7:0E:7B:B3:EA:87:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/AB988C63F14514C64BA41F5464D70E7BB3EA8764.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/79a5b9dc-f78c-40a9-beb9-0d35b8347854/1/326130373a323438333a3a2f33322d3332203d3e20323135363439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:2483::/32 Signature Algorithm: sha256WithRSAEncryption 05:2a:d3:0f:c0:fb:96:a2:13:4c:d7:7d:e0:2b:cc:60:cc:c8: 61:bb:2e:9b:f1:1f:ff:88:69:49:fe:c7:9d:97:10:a4:13:58: 48:80:27:07:78:55:5c:1f:54:de:d5:ad:a6:60:aa:5d:29:6f: 76:50:59:60:84:2c:d6:d6:7a:c8:26:d5:b6:1d:0d:f4:48:5f: 3e:ae:f9:7b:c7:05:9f:00:cb:aa:04:23:af:f4:01:87:fb:3a: 05:ea:77:5a:4d:c9:6a:6b:ea:1f:ea:cc:51:78:bd:5e:90:6f: 54:9b:e0:ae:70:ca:4a:e9:1a:59:63:24:20:81:5b:9d:8e:0e: 21:ab:a1:d5:47:07:7e:bc:31:fb:d8:b5:ec:ba:95:20:d2:c7: 37:1a:87:84:c5:6c:39:24:74:8a:23:e2:6b:d7:fd:db:6a:aa: df:b6:b4:ca:e4:77:99:4a:ed:5c:ed:c4:fd:5d:75:f1:59:03: fc:f9:c9:7b:dd:27:28:8a:ab:e0:34:e0:32:7f:2a:3e:74:6b: e9:ec:94:9e:1b:72:fa:a1:7d:48:87:88:db:ad:05:b1:31:13: 70:94:58:24:f3:8f:02:76:19:ce:91:6c:10:af:0a:e0:58:2e: 49:b9:de:26:dd:5f:00:6b:6a:ff:9e:db:d6:f1:ec:6e:1b:83: 39:ba:87:44 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIUUXGqz/6gdPEhKblg5DMSd6RZ33swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI5ODhDNjNGMTQ1MTRDNjRCQTQxRjU0NjRENzBFN0JC M0VBODc2NDAeFw0yNDAzMjkyMjU3MzVaFw0yNTAzMjgyMzAyMzVaMDMxMTAvBgNV BAMTKDA1ODEyNEZEMEUyMUExQUUxOTdEMUUwNjJEMDgzM0VDOThCNUU0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4Im8CCHET3GaC5TLni81hzfO d1bdA0oHW0Kqu0xiOtAqKemLWsHynrz7z/4DKggcRf+cP0CPNQX7eIZbbB17wz6N ruyE210mlIu1bfXvEFub4+rPjIK2sckeej/EplFgU8dqsAdM7IP+FbVJsjuVdkXh kib7NmxOY0ZOdjUxje/6m6j4p76FTc82gWSbst7NIOussJU655yBA2g3ZhXtUKpZ cKlJD/O1QnY7iFWvlMPoArMvdmSj++hB0dhHPEG4kqPyp0NhQj0B1vDuU1G+FXPx 8rSqj0bSG+KBJHFBe4YNaVLoQvhTz7ZdOLf+UrpBQp+xp0wC84mY1b0DIWvzAgMB AAGjggJ5MIICdTAdBgNVHQ4EFgQUBYEk/Q4hoa4ZfR4GLQgz7Ji15J0wHwYDVR0j BBgwFoAUq5iMY/FFFMZLpB9UZNcOe7Pqh2QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzlhNWI5ZGMtZjc4Yy00MGE5LWJlYjktMGQzNWI4MzQ3 ODU0LzEvQUI5ODhDNjNGMTQ1MTRDNjRCQTQxRjU0NjRENzBFN0JCM0VBODc2NC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0zYzEwLTQ1 MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC9BQjk4OEM2M0YxNDUxNEM2NEJBNDFGNTQ2 NEQ3MEU3QkIzRUE4NzY0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS83OWE1YjlkYy1mNzhjLTQwYTktYmViOS0wZDM1YjgzNDc4NTQvMS8zMjYxMzAz NzNhMzIzNDM4MzMzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjMxMzUzNjM0Mzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAP MA0EAgACMAcDBQAqBySDMA0GCSqGSIb3DQEBCwUAA4IBAQAFKtMPwPuWohNM133g K8xgzMhhuy6b8R//iGlJ/sedlxCkE1hIgCcHeFVcH1Te1a2mYKpdKW92UFlghCzW 1nrIJtW2HQ30SF8+rvl7xwWfAMuqBCOv9AGH+zoF6ndaTclqa+of6sxReL1ekG9U m+CucMpK6RpZYyQggVudjg4hq6HVRwd+vDH72LXsupUg0sc3GoeExWw5JHSKI+Jr 1/3baqrftrTK5HeZSu1c7cT9XXXxWQP8+cl73ScoiqvgNOAyfyo+dGvp7JSeG3L6 oX1Ih4jbrQWxMRNwlFgk848CdhnOkWwQrwrgWC5Jud4m3V8Aa2r/ntvW8exuG4M5 uodE -----END CERTIFICATE-----Generated at Thu Jul 4 03:51:59 2024 by rpki-client on console.sobornost.net