$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa File: 326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa (raw, json) Hash identifier: W5E4BRgvv/9BqWg1k2ZBBJeNpdqu394hkunHQ1w85Qs= Subject key identifier: E9:EA:B9:22:6D:B1:6B:C3:FC:34:BA:F6:FF:8A:8D:49:97:CB:04:AE Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 7F5E740D69AFD782FF397993B6F5825E06BFECB3 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa Signing time: Tue 09 Jul 2024 22:37:18 +0000 ROA not before: Tue 09 Jul 2024 22:32:18 +0000 ROA not after: Tue 08 Jul 2025 22:37:18 +0000 asID: 214643 IP address blocks: 2a14:7581:e202::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5e:74:0d:69:af:d7:82:ff:39:79:93:b6:f5:82:5e:06:bf:ec:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 9 22:32:18 2024 GMT Not After : Jul 8 22:37:18 2025 GMT Subject: CN=E9EAB9226DB16BC3FC34BAF6FF8A8D4997CB04AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:85:42:30:1b:ac:bb:53:ce:e6:f2:95:a3: 7c:77:b8:a9:c8:f8:a0:18:85:64:51:7a:d4:79:1c: 38:98:96:a6:06:9d:20:00:96:f7:d4:e8:38:fb:71: 4b:74:03:ac:a6:33:48:5c:bc:60:22:52:5e:df:17: 1c:6b:89:bb:7e:98:36:5e:51:31:ff:41:0e:ee:57: a6:5d:ae:7f:d7:4c:6d:f8:35:c9:52:f6:83:b6:34: f1:d4:a8:2f:3d:ff:ad:19:09:0d:6b:bc:23:4c:1c: 85:21:eb:63:bc:7a:bb:60:84:bd:aa:66:e6:a2:a8: 53:99:ca:a0:37:ea:7b:e4:69:b0:2e:e4:2a:9f:43: 1f:b3:49:2e:4d:b9:00:47:51:9a:a5:e4:91:95:17: 5c:49:ed:10:98:5b:58:4a:31:8a:2d:6d:b9:17:5b: 2f:7e:a2:ad:4d:67:1f:cd:09:69:a8:a0:b7:33:f0: 44:1e:ed:e3:c6:11:0f:8b:41:b0:db:72:51:dc:f8: 59:4c:37:8c:28:d1:b6:4b:a1:85:0a:a0:44:41:fd: 3c:2e:97:3e:6b:38:42:66:48:94:28:b3:d2:f5:94: 53:2e:cd:70:e6:8c:f6:74:3e:c9:d2:04:67:5b:a8: d7:0d:df:19:00:38:a3:bf:5b:3f:fa:a2:13:76:46: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EA:B9:22:6D:B1:6B:C3:FC:34:BA:F6:FF:8A:8D:49:97:CB:04:AE X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653230323a3a2f34382d3438203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e202::/48 Signature Algorithm: sha256WithRSAEncryption 24:d2:c8:c9:3d:13:15:4f:00:a4:e2:e8:a7:32:bb:71:1a:a0: 97:2d:b2:a6:dd:01:6e:5f:d8:7c:62:95:9a:ee:5d:94:4d:c9: c5:3a:f1:9a:9e:e8:02:ec:16:bd:a2:e1:83:d9:63:8b:2d:f5: b8:73:0f:31:c7:69:99:ec:95:db:85:d3:90:d8:b6:9b:85:39: 88:31:b1:f8:0c:ec:06:4a:3a:af:1d:7c:80:28:1a:88:2e:f8: 04:9f:42:a0:6d:c0:9e:e3:18:12:fc:d9:8b:5a:25:af:73:8b: 6c:be:de:cf:e3:59:70:23:a0:ed:3b:32:e9:17:66:40:88:ea: 2c:f4:3f:65:53:10:1b:44:05:9c:67:7e:94:55:65:c5:ac:ae: 0d:03:7a:55:b3:23:11:95:12:37:fc:b1:a8:03:f7:65:47:f3: d6:1b:d3:67:e7:f8:5e:f7:1d:ba:68:81:3b:29:9b:ee:20:0c: 99:29:a9:06:ee:b1:3e:54:c6:0f:de:7f:1d:1a:f0:96:c8:4a: 57:8e:06:8c:4f:80:a2:6a:57:5e:23:2d:72:ab:76:79:10:3e: 09:e3:57:dc:94:18:6d:e1:7e:7e:78:86:5b:6b:43:0d:7d:39: cd:72:b2:4b:0c:01:b6:55:32:ba:a4:f3:f4:71:f4:6a:01:01: e3:fb:52:29 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUf150DWmv14L/OXmTtvWCXga/7LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDkyMjMyMThaFw0yNTA3MDgyMjM3MThaMDMxMTAvBgNV BAMTKEU5RUFCOTIyNkRCMTZCQzNGQzM0QkFGNkZGOEE4RDQ5OTdDQjA0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyYVCMBusu1PO5vKVo3x3uKnI +KAYhWRRetR5HDiYlqYGnSAAlvfU6Dj7cUt0A6ymM0hcvGAiUl7fFxxribt+mDZe UTH/QQ7uV6Zdrn/XTG34NclS9oO2NPHUqC89/60ZCQ1rvCNMHIUh62O8ertghL2q ZuaiqFOZyqA36nvkabAu5CqfQx+zSS5NuQBHUZql5JGVF1xJ7RCYW1hKMYotbbkX Wy9+oq1NZx/NCWmooLcz8EQe7ePGEQ+LQbDbclHc+FlMN4wo0bZLoYUKoERB/Twu lz5rOEJmSJQos9L1lFMuzXDmjPZ0PsnSBGdbqNcN3xkAOKO/Wz/6ohN2Ri5FAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU6eq5Im2xa8P8NLr2/4qNSZfLBK4wHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzIzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1geICMA0GCSqGSIb3DQEBCwUAA4IBAQAk 0sjJPRMVTwCk4uinMrtxGqCXLbKm3QFuX9h8YpWa7l2UTcnFOvGanugC7Ba9ouGD 2WOLLfW4cw8xx2mZ7JXbhdOQ2LabhTmIMbH4DOwGSjqvHXyAKBqILvgEn0KgbcCe 4xgS/NmLWiWvc4tsvt7P41lwI6DtOzLpF2ZAiOos9D9lUxAbRAWcZ36UVWXFrK4N A3pVsyMRlRI3/LGoA/dlR/PWG9Nn5/he9x26aIE7KZvuIAyZKakG7rE+VMYP3n8d GvCWyEpXjgaMT4CialdeIy1yq3Z5ED4J41fclBht4X5+eIZba0MNfTnNcrJLDAG2 VTK6pPP0cfRqAQHj+1Ip -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net