$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa File: 326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa (raw, json) Hash identifier: m2Y8ipRfFjIYjQverUVCGCnSQhyWfKuhVvYpfn9lip4= Subject key identifier: E6:29:3D:A9:8D:EB:06:5B:B3:0B:B5:BA:A8:24:AE:74:A7:49:14:BF Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 2C5463841B2FD1922E74DC5A646B0105519BD951 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa Signing time: Fri 12 Jul 2024 16:54:41 +0000 ROA not before: Fri 12 Jul 2024 16:49:41 +0000 ROA not after: Fri 11 Jul 2025 16:54:41 +0000 asID: 214643 IP address blocks: 2a14:7581:e1c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:54:63:84:1b:2f:d1:92:2e:74:dc:5a:64:6b:01:05:51:9b:d9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 12 16:49:41 2024 GMT Not After : Jul 11 16:54:41 2025 GMT Subject: CN=E6293DA98DEB065BB30BB5BAA824AE74A74914BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:e0:b3:85:4d:66:80:c0:93:a5:45:21:d5: fa:40:26:a5:0a:6d:2b:c5:95:d0:95:de:bb:6f:2d: 1c:45:68:9d:ee:b4:d0:f4:94:1f:b8:62:17:a9:ed: 6e:d3:13:c6:a8:4e:3d:b5:18:87:64:97:58:3b:4d: 87:1d:d0:e8:e5:e9:f1:9e:f8:b5:24:8d:3f:c9:50: 1c:ae:77:ac:20:c1:3f:0d:b6:17:55:7c:87:ab:2d: 55:a8:77:13:17:f3:0f:95:d2:ae:c7:96:53:68:5a: 38:51:d6:35:60:65:7b:b9:44:1e:bb:60:df:7b:62: 9b:7d:88:7c:7e:c3:f7:9d:98:aa:a8:80:57:45:d1: fd:ed:a9:2f:89:a3:c1:3e:31:cc:c1:ad:fb:07:ce: d4:aa:11:83:4c:c8:af:55:a0:49:de:b8:8c:49:6c: 9d:84:10:3f:0b:bc:7f:6f:d1:29:ce:b9:bc:a6:1a: 20:e8:d6:a9:f9:0d:c0:f4:f5:e8:18:6b:9e:1c:b6: 94:e9:3d:32:ef:62:95:71:d8:9b:43:38:c3:dc:62: de:f1:12:e6:d9:29:9f:6c:da:50:bf:07:bf:78:c7: 59:1a:21:2e:b7:b6:8f:42:37:df:1c:6c:28:65:ea: f6:55:6a:6b:c1:86:48:55:e7:71:7a:e2:24:ca:ae: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:29:3D:A9:8D:EB:06:5B:B3:0B:B5:BA:A8:24:AE:74:A7:49:14:BF X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653163303a3a2f34322d3432203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e1c0::/42 Signature Algorithm: sha256WithRSAEncryption 5c:40:1c:7c:b9:65:dd:4f:b7:9a:66:f9:8c:4a:f0:e9:08:99: dc:15:9c:c6:36:4e:26:14:b6:23:f8:28:dd:fa:76:c6:33:3e: 29:20:e5:d4:b0:fd:4c:07:9c:20:75:b7:4b:e4:b6:34:ac:5d: b5:cc:fb:6e:a1:49:c4:3a:72:52:f4:29:46:a8:f0:93:69:8c: e2:03:4e:f0:33:94:a3:ca:d2:b0:10:d4:c3:50:aa:51:52:58: fb:6d:75:b3:41:97:4f:7b:3f:3c:73:68:15:57:ff:f3:63:fb: 60:ad:78:49:00:ab:68:b3:29:07:43:94:f4:4d:e1:f8:df:a8: 05:8e:c4:85:06:23:59:d0:10:e1:8d:fe:c8:f5:63:89:51:8b: 34:a5:94:96:ef:f2:01:ec:63:9f:a9:59:86:08:6f:c3:02:e5: a1:44:52:70:5e:5f:e6:85:ef:53:4a:7d:09:13:79:cd:da:82: 10:db:f9:7c:eb:36:d2:13:06:1e:8d:1c:a8:d6:cc:f1:f5:5a: af:44:cf:13:fe:f1:e9:24:50:3c:b7:f9:98:8b:89:24:73:95: b0:a7:38:93:89:d5:0c:f0:9f:71:ae:ef:dc:07:17:45:34:2b: e4:75:9c:53:38:a4:bb:60:65:7b:9f:c7:8a:6a:8f:0f:18:0a: c9:60:fe:63 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULFRjhBsv0ZIudNxaZGsBBVGb2VEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MTIxNjQ5NDFaFw0yNTA3MTExNjU0NDFaMDMxMTAvBgNV BAMTKEU2MjkzREE5OERFQjA2NUJCMzBCQjVCQUE4MjRBRTc0QTc0OTE0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJeCzhU1mgMCTpUUh1fpAJqUK bSvFldCV3rtvLRxFaJ3utND0lB+4Yhep7W7TE8aoTj21GIdkl1g7TYcd0Ojl6fGe +LUkjT/JUByud6wgwT8NthdVfIerLVWodxMX8w+V0q7HllNoWjhR1jVgZXu5RB67 YN97Ypt9iHx+w/edmKqogFdF0f3tqS+Jo8E+MczBrfsHztSqEYNMyK9VoEneuIxJ bJ2EED8LvH9v0SnOubymGiDo1qn5DcD09egYa54ctpTpPTLvYpVx2JtDOMPcYt7x EubZKZ9s2lC/B794x1kaIS63to9CN98cbChl6vZVamvBhkhV53F64iTKrkUvAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU5ik9qY3rBluzC7W6qCSudKdJFL8wHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzE2MzMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcGKhR1geHAMA0GCSqGSIb3DQEBCwUAA4IBAQBc QBx8uWXdT7eaZvmMSvDpCJncFZzGNk4mFLYj+Cjd+nbGMz4pIOXUsP1MB5wgdbdL 5LY0rF21zPtuoUnEOnJS9ClGqPCTaYziA07wM5SjytKwENTDUKpRUlj7bXWzQZdP ez88c2gVV//zY/tgrXhJAKtosykHQ5T0TeH436gFjsSFBiNZ0BDhjf7I9WOJUYs0 pZSW7/IB7GOfqVmGCG/DAuWhRFJwXl/mhe9TSn0JE3nN2oIQ2/l86zbSEwYejRyo 1szx9VqvRM8T/vHpJFA8t/mYi4kkc5WwpziTidUM8J9xru/cBxdFNCvkdZxTOKS7 YGV7n8eKao8PGArJYP5j -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net