$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa File: 326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa (raw, json) Hash identifier: nqRKkbIsZMLuZENpuXAo4n6L2CneVecFLe2QSUK+Guk= Subject key identifier: 77:61:5E:D3:1E:00:AB:10:E6:BB:D7:8B:3D:E3:48:51:C7:DF:5F:52 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 709607D9C40A374DA5F2753E57B6064D87A296B5 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa Signing time: Sat 06 Jul 2024 23:22:12 +0000 ROA not before: Sat 06 Jul 2024 23:17:12 +0000 ROA not after: Sat 05 Jul 2025 23:22:12 +0000 asID: 214643 IP address blocks: 2a14:7581:e240::/42 maxlen: 42 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:96:07:d9:c4:0a:37:4d:a5:f2:75:3e:57:b6:06:4d:87:a2:96:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 6 23:17:12 2024 GMT Not After : Jul 5 23:22:12 2025 GMT Subject: CN=77615ED31E00AB10E6BBD78B3DE34851C7DF5F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:14:52:fe:6e:84:65:86:60:16:31:b3:e7: 5e:77:7e:2d:15:a1:02:62:59:ab:48:5e:a5:06:3e: ed:8a:ee:6a:a2:f7:9d:88:95:74:7b:9a:37:36:3e: 49:cd:6a:4e:8d:65:07:c7:75:96:a6:1f:07:5e:45: 93:df:38:a5:37:21:cb:50:c5:6c:b4:bd:53:b2:8e: 75:d9:b1:f3:41:9f:f9:f6:cb:25:0c:be:a4:73:c0: 7e:f5:d4:44:e7:f8:e5:b0:42:40:21:15:ee:2b:d8: bd:16:52:dc:0d:4e:6e:e5:f3:43:7e:53:55:3e:e1: 6e:25:66:53:91:cc:e6:1f:1d:39:f8:0f:9d:df:46: 47:93:47:7c:34:e5:f0:98:13:bc:fd:0a:43:d8:7f: c4:83:d9:9d:13:63:60:8d:db:bc:61:ae:84:81:a0: ed:d1:77:e6:7f:c0:96:ab:76:58:b3:2b:31:d2:6e: 91:0b:55:9b:c9:da:4a:8d:54:b6:fc:cf:06:40:d9: a2:f9:79:46:22:be:82:43:dd:f5:a7:17:5c:f5:a7: 8c:c2:40:65:0b:c4:9d:36:bf:06:99:47:d6:25:e2: 81:05:82:cb:db:d7:8e:68:09:1e:10:18:d2:1b:c8: 14:e5:80:4d:12:32:db:47:4f:ce:6d:4b:a6:b5:52: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:61:5E:D3:1E:00:AB:10:E6:BB:D7:8B:3D:E3:48:51:C7:DF:5F:52 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653234303a3a2f34322d3432203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e240::/42 Signature Algorithm: sha256WithRSAEncryption 34:7a:49:c8:7f:d5:66:e0:44:d4:2c:48:82:47:1c:9d:04:8e: 57:e2:87:9a:5a:3c:19:6f:37:bf:45:1c:c9:f0:83:46:b8:d6: e7:6f:bc:8f:cc:d6:ee:d4:d8:35:12:b5:4d:b6:6b:41:69:50: 6d:3d:34:be:9e:1b:b1:39:c0:c9:ac:91:9e:1b:d8:98:58:23: f1:ac:3a:8b:4d:38:87:a2:2a:36:97:89:fb:70:10:75:42:46: aa:8b:79:18:99:c0:68:49:f4:e1:3d:8e:a5:c2:f8:f3:a2:1b: 27:50:32:eb:da:fd:b8:ad:d3:fc:34:83:d1:b2:7c:e3:98:6b: 37:ef:0d:2b:72:6c:82:b8:6e:04:4a:b8:60:4b:bb:87:3c:da: e4:4e:95:bd:4d:1f:5d:44:5c:39:24:87:4c:19:ac:5b:c2:e7: 56:85:c3:5d:a1:dd:a2:c8:6e:a4:bd:bf:c9:d2:82:d8:8c:34: e1:11:f8:cc:b8:b6:6e:2f:a2:66:f7:03:67:a5:e8:12:68:42: b7:82:e7:4d:c3:0f:e7:94:5f:6e:53:71:b2:35:e9:a2:11:79: c0:88:a5:5a:a2:1f:64:58:59:d6:b4:10:de:5b:0d:61:96:80: 61:7c:52:2f:52:d9:1b:ac:3b:b9:23:8c:7a:44:fd:97:80:05: 1d:e0:35:6b -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUcJYH2cQKN02l8nU+V7YGTYeilrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDYyMzE3MTJaFw0yNTA3MDUyMzIyMTJaMDMxMTAvBgNV BAMTKDc3NjE1RUQzMUUwMEFCMTBFNkJCRDc4QjNERTM0ODUxQzdERjVGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUBRS/m6EZYZgFjGz5153fi0V oQJiWatIXqUGPu2K7mqi952IlXR7mjc2PknNak6NZQfHdZamHwdeRZPfOKU3IctQ xWy0vVOyjnXZsfNBn/n2yyUMvqRzwH711ETn+OWwQkAhFe4r2L0WUtwNTm7l80N+ U1U+4W4lZlORzOYfHTn4D53fRkeTR3w05fCYE7z9CkPYf8SD2Z0TY2CN27xhroSB oO3Rd+Z/wJardlizKzHSbpELVZvJ2kqNVLb8zwZA2aL5eUYivoJD3fWnF1z1p4zC QGULxJ02vwaZR9Yl4oEFgsvb145oCR4QGNIbyBTlgE0SMttHT85tS6a1Ul+HAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQUd2Fe0x4AqxDmu9eLPeNIUcffX1IwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzIzNDMwM2EzYTJmMzQzMjJkMzQzMjIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcGKhR1geJAMA0GCSqGSIb3DQEBCwUAA4IBAQA0 eknIf9Vm4ETULEiCRxydBI5X4oeaWjwZbze/RRzJ8INGuNbnb7yPzNbu1Ng1ErVN tmtBaVBtPTS+nhuxOcDJrJGeG9iYWCPxrDqLTTiHoio2l4n7cBB1Qkaqi3kYmcBo SfThPY6lwvjzohsnUDLr2v24rdP8NIPRsnzjmGs37w0rcmyCuG4ESrhgS7uHPNrk TpW9TR9dRFw5JIdMGaxbwudWhcNdod2iyG6kvb/J0oLYjDThEfjMuLZuL6Jm9wNn pegSaEK3gudNww/nlF9uU3GyNemiEXnAiKVaoh9kWFnWtBDeWw1hloBhfFIvUtkb rDu5I4x6RP2XgAUd4DVr -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net