$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa File: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa (raw, json) Hash identifier: sR+9Y8oEj6MqzGtRkFzAYPAw7rPUdb2HcOFNynPsY40= Subject key identifier: 00:B7:65:42:0B:C9:43:27:CD:BF:10:71:89:9E:8D:7E:44:A9:AF:1E Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 2E9780F4CAD7B3CE0B53E631139F176E026AE71F Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa Signing time: Wed 10 Jul 2024 16:01:41 +0000 ROA not before: Wed 10 Jul 2024 15:56:41 +0000 ROA not after: Wed 09 Jul 2025 16:01:41 +0000 asID: 215364 IP address blocks: 2a14:7581:90ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:97:80:f4:ca:d7:b3:ce:0b:53:e6:31:13:9f:17:6e:02:6a:e7:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Jul 10 15:56:41 2024 GMT Not After : Jul 9 16:01:41 2025 GMT Subject: CN=00B765420BC94327CDBF1071899E8D7E44A9AF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:c7:af:51:33:ee:dc:1f:a3:f0:c6:6c:06: c5:a2:b1:22:5e:ff:1a:59:14:06:c9:26:e2:ac:cb: b8:27:12:14:09:6b:22:c9:e4:ed:9f:ca:51:d5:2f: 2f:14:b7:9c:5d:a8:d8:e7:df:2b:f8:e5:3f:e1:8f: 18:7d:8e:b5:10:48:34:da:22:4c:19:28:a5:22:fd: 17:3c:92:63:6a:45:a0:1b:fe:98:3f:0e:79:f2:d4: 71:eb:b9:c8:f2:b3:44:83:de:7e:71:07:3d:6b:de: 0e:fe:53:98:73:3d:fc:34:51:8b:e8:81:bd:32:78: 85:e3:ae:34:64:87:64:c0:d0:f8:f1:39:02:3a:a1: c4:ee:46:25:da:25:36:62:84:34:29:fa:fa:c8:f4: 6e:29:4b:f2:c6:0b:03:e9:31:f4:fe:e8:e3:1e:91: 94:c1:61:d2:58:8b:f3:60:5e:e8:73:4a:77:89:42: e9:1b:94:c5:4a:1b:b3:ca:f2:ec:6d:58:46:64:ad: 82:ae:1b:fa:a3:00:d6:f5:91:6f:14:65:62:a2:59: 0e:49:2e:ba:9c:99:e1:31:50:e4:ec:09:fb:14:b5: 86:e6:ae:70:ef:c8:17:7f:37:e0:8d:91:09:0f:32: 22:39:07:c7:30:e8:10:85:71:b2:e6:2b:3c:7f:bb: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:65:42:0B:C9:43:27:CD:BF:10:71:89:9E:8D:7E:44:A9:AF:1E X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/326131343a373538313a393066663a3a2f34382d3438203d3e20323135333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:90ff::/48 Signature Algorithm: sha256WithRSAEncryption 94:83:53:c1:e5:7e:ff:e0:e5:35:ce:71:fe:e7:1d:a1:e8:d7: 17:f5:a0:90:69:62:45:30:c5:bd:30:1b:4b:92:a8:23:ae:b8: 38:63:b2:59:92:2a:14:b5:00:85:cb:4a:ea:63:cf:be:a0:df: 92:6a:8c:a7:e8:f3:3b:25:d0:80:be:b0:9c:76:3b:59:44:d5: f3:d8:c6:6b:a0:cd:c4:b8:de:72:57:fb:17:94:6d:d8:1e:f4: c9:70:48:f4:52:dc:0d:17:70:54:ef:a6:2f:9c:c5:01:41:31: 4f:34:7e:12:44:ae:74:18:16:02:b0:26:68:41:4c:47:27:12: 77:07:4b:b2:f4:06:3c:6d:6d:79:d7:9e:4f:4c:de:bf:00:51: 3a:ca:9d:8a:c3:68:03:fa:cf:00:30:a0:b5:da:3b:8d:10:c7: 02:72:22:a6:98:c2:3e:d0:6c:76:0a:4d:7f:c2:51:64:04:3f: b9:53:4c:2f:9b:1c:a6:ea:8b:f1:61:85:89:e1:8c:ea:e6:36: 7b:1e:d7:c2:76:1d:41:cf:17:4b:e5:97:bd:63:bd:ac:65:fb: c6:2b:7f:2b:a2:94:e5:16:09:79:a9:d4:09:06:fd:37:11:5e: 07:de:3b:c3:58:2d:73:cf:68:7b:f3:a5:87:ee:a6:11:39:22: c7:2a:ed:31 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULpeA9MrXs84LU+YxE58XbgJq5x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNDA3MTAxNTU2NDFaFw0yNTA3MDkxNjAxNDFaMDMxMTAvBgNV BAMTKDAwQjc2NTQyMEJDOTQzMjdDREJGMTA3MTg5OUU4RDdFNDRBOUFGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZGsevUTPu3B+j8MZsBsWisSJe /xpZFAbJJuKsy7gnEhQJayLJ5O2fylHVLy8Ut5xdqNjn3yv45T/hjxh9jrUQSDTa IkwZKKUi/Rc8kmNqRaAb/pg/Dnny1HHrucjys0SD3n5xBz1r3g7+U5hzPfw0UYvo gb0yeIXjrjRkh2TA0PjxOQI6ocTuRiXaJTZihDQp+vrI9G4pS/LGCwPpMfT+6OMe kZTBYdJYi/NgXuhzSneJQukblMVKG7PK8uxtWEZkrYKuG/qjANb1kW8UZWKiWQ5J LrqcmeExUOTsCfsUtYbmrnDvyBd/N+CNkQkPMiI5B8cw6BCFcbLmKzx/u/ttAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUALdlQgvJQyfNvxBxiZ6NfkSprx4wHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS84NTVjN2Q1YS0xNWM0LTQ1ODktODVmYS1iNDkxYTA3MTA0OGMvMC8zMjYxMzEz NDNhMzczNTM4MzEzYTM5MzA2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM1MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gZD/MA0GCSqGSIb3DQEBCwUAA4IBAQCU g1PB5X7/4OU1znH+5x2h6NcX9aCQaWJFMMW9MBtLkqgjrrg4Y7JZkioUtQCFy0rq Y8++oN+Saoyn6PM7JdCAvrCcdjtZRNXz2MZroM3EuN5yV/sXlG3YHvTJcEj0UtwN F3BU76YvnMUBQTFPNH4SRK50GBYCsCZoQUxHJxJ3B0uy9AY8bW15155PTN6/AFE6 yp2Kw2gD+s8AMKC12juNEMcCciKmmMI+0Gx2Ck1/wlFkBD+5U0wvmxym6ovxYYWJ 4Yzq5jZ7HtfCdh1BzxdL5Ze9Y72sZfvGK38ropTlFgl5qdQJBv03EV4H3jvDWC1z z2h786WH7qYROSLHKu0x -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:09 2024 by rpki-client on console.sobornost.net