$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa File: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (raw, json) Hash identifier: 0PZ2HJID9XheP2ZR30M5e+uc9KFWb33URoG3R3EDvcw= Subject key identifier: C0:1B:61:E2:8C:A9:BC:B2:B5:75:57:8C:03:C4:9B:55:F0:11:1F:BD Certificate issuer: /CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6 Certificate serial: 3F31A0EFCF310FC3CD10C4857D23CB5FE087A45D Authority key identifier: 34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa Signing time: Fri 14 Jun 2024 02:20:23 +0000 ROA not before: Fri 14 Jun 2024 02:15:23 +0000 ROA not after: Fri 13 Jun 2025 02:20:23 +0000 asID: 215885 IP address blocks: 2a0f:85c1:331::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Jun 2024 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:31:a0:ef:cf:31:0f:c3:cd:10:c4:85:7d:23:cb:5f:e0:87:a4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6 Validity Not Before: Jun 14 02:15:23 2024 GMT Not After : Jun 13 02:20:23 2025 GMT Subject: CN=C01B61E28CA9BCB2B575578C03C49B55F0111FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:50:19:fb:1d:c6:21:8f:00:46:67:a7:43: 05:f8:6a:5f:84:ce:dd:7f:48:78:a2:ef:05:b1:a8: 1a:72:b3:97:5b:69:63:ff:30:b3:b0:2c:3a:c4:87: ca:c7:03:b6:87:73:de:83:49:f9:90:f2:50:4a:bb: 3b:da:d3:92:d7:95:72:f8:70:e4:3b:8e:c9:f1:85: c8:e6:c0:c9:a4:9b:05:9d:9e:b5:1f:42:87:34:1e: 40:d5:65:69:24:bf:62:1f:e9:16:6d:50:ba:58:6e: 5e:42:14:d4:6c:26:9a:80:8f:63:b3:b8:b7:58:d4: e2:72:91:b1:d6:fd:3b:68:ea:0b:54:93:29:1a:ca: b6:b8:9a:2b:6d:f9:48:7f:ec:ff:73:05:2f:a3:94: f4:d9:99:e6:81:d7:c1:33:42:99:87:11:24:9c:4b: bb:2f:98:6b:5c:94:48:84:a3:63:86:de:bf:32:80: 15:34:76:b4:1c:31:ea:49:bd:6e:76:99:ca:1f:79: 87:0e:9f:7c:5f:66:e0:9c:e5:f0:b6:de:7e:da:19: c6:cc:44:6e:58:6c:81:9c:31:59:8d:a3:18:c8:69: a6:66:26:2b:6b:52:e6:74:fa:86:78:d7:2b:ae:8a: 8d:40:7a:a0:2f:66:b7:28:e8:f6:61:ac:51:72:e9: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1B:61:E2:8C:A9:BC:B2:B5:75:57:8C:03:C4:9B:55:F0:11:1F:BD X509v3 Authority Key Identifier: keyid:34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:331::/48 Signature Algorithm: sha256WithRSAEncryption 56:63:fb:a1:20:fa:e4:09:4b:bd:e3:49:06:21:b3:d7:e3:1f: 72:57:05:96:18:20:5f:90:55:15:77:eb:f2:a8:09:58:8d:f3: 2e:51:5d:a4:24:0a:a8:89:4e:05:27:22:87:bb:84:24:2d:49: 01:84:09:ef:0a:16:45:05:2d:4f:03:b4:ee:9f:ec:c7:b9:f9: 43:66:33:a6:51:59:18:c1:95:0e:a3:9f:6d:22:19:4b:62:d6: 14:f4:9b:e5:3f:62:e6:94:1c:13:da:07:95:d7:a0:ea:99:8a: f5:d7:f4:6f:45:a1:06:c9:4e:12:75:5c:b6:67:da:0b:b6:83: 6f:9b:2a:45:e5:71:fd:77:dd:2c:ae:a7:e1:fc:95:39:6d:43: 3d:c1:e4:be:9f:52:bf:8f:0d:54:5a:56:36:38:cc:bb:eb:2b: 64:e9:24:e8:98:a7:08:b8:5f:41:2e:8c:2e:67:6e:e2:3d:df: 7c:09:b6:00:09:df:49:07:b1:b1:9f:bc:3e:99:a9:42:d9:7f: 86:c4:d2:13:14:2b:58:2f:fb:d6:a2:05:5c:8f:c2:f3:4f:85: 1c:5e:df:8e:ff:0a:33:ad:f0:64:e4:5a:98:f9:a6:97:5b:b6: 87:69:28:45:3b:9c:67:0e:ae:8d:ab:8a:a7:77:ba:f8:79:f1: 71:06:87:1f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUPzGg788xD8PNEMSFfSPLX+CHpF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURG MTBGNEFDNjAeFw0yNDA2MTQwMjE1MjNaFw0yNTA2MTMwMjIwMjNaMDMxMTAvBgNV BAMTKEMwMUI2MUUyOENBOUJDQjJCNTc1NTc4QzAzQzQ5QjU1RjAxMTFGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDFAZ+x3GIY8ARmenQwX4al+E zt1/SHii7wWxqBpys5dbaWP/MLOwLDrEh8rHA7aHc96DSfmQ8lBKuzva05LXlXL4 cOQ7jsnxhcjmwMmkmwWdnrUfQoc0HkDVZWkkv2If6RZtULpYbl5CFNRsJpqAj2Oz uLdY1OJykbHW/Tto6gtUkykayra4mitt+Uh/7P9zBS+jlPTZmeaB18EzQpmHESSc S7svmGtclEiEo2OG3r8ygBU0drQcMepJvW52mcofeYcOn3xfZuCc5fC23n7aGcbM RG5YbIGcMVmNoxjIaaZmJitrUuZ0+oZ41yuuio1AeqAvZrco6PZhrFFy6SMXAgMB AAGjggKDMIICfzAdBgNVHQ4EFgQUwBth4oypvLK1dVeMA8SbVfARH70wHwYDVR0j BBgwFoAUNB3SR4ILfSrU8IX/f1mIrfEPSsYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGE5ZjIxNWQtYTk3OC00MDJjLTkwNjQtNGRlNGZkNDk0 M2FmLzEvMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURGMTBGNEFDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8zNDFERDI0NzgyMEI3RDJBRDRGMDg1RkY3 RjU5ODhBREYxMEY0QUM2LmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYTlmMjE1ZC1hOTc4LTQwMmMtOTA2NC00ZGU0ZmQ0OTQzYWYvMS8zMjYxMzA2 NjNhMzgzNTYzMzEzYTMzMzMzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEz NTM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACoPhcEDMTANBgkqhkiG9w0BAQsFAAOCAQEAVmP7 oSD65AlLveNJBiGz1+MfclcFlhggX5BVFXfr8qgJWI3zLlFdpCQKqIlOBScih7uE JC1JAYQJ7woWRQUtTwO07p/sx7n5Q2YzplFZGMGVDqOfbSIZS2LWFPSb5T9i5pQc E9oHldeg6pmK9df0b0WhBslOEnVctmfaC7aDb5sqReVx/XfdLK6n4fyVOW1DPcHk vp9Sv48NVFpWNjjMu+srZOkk6JinCLhfQS6MLmdu4j3ffAm2AAnfSQexsZ+8Ppmp Qtl/hsTSExQrWC/71qIFXI/C80+FHF7fjv8KM63wZORamPmml1u2h2koRTucZw6u jauKp3e6+HnxcQaHHw== -----END CERTIFICATE-----Generated at Mon Jun 17 22:55:40 2024 by rpki-client on console.sobornost.net