$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa File: 326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa (raw, json) Hash identifier: fG47sY1LTqZE859VXrJ6CXOWtcEuaJIZS+Vs6MmpMWw= Subject key identifier: F8:13:79:D7:74:C1:2B:8F:E9:FA:E0:3B:8E:64:09:A3:7D:B5:4D:E7 Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 557A3BD4562FA57BBC36CC1862C9E723A320DBB9 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa Signing time: Fri 05 Jul 2024 10:56:08 +0000 ROA not before: Fri 05 Jul 2024 10:51:08 +0000 ROA not after: Fri 04 Jul 2025 10:56:08 +0000 asID: 214643 IP address blocks: 2a14:7581:e301::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jul 2024 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7a:3b:d4:56:2f:a5:7b:bc:36:cc:18:62:c9:e7:23:a3:20:db:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Jul 5 10:51:08 2024 GMT Not After : Jul 4 10:56:08 2025 GMT Subject: CN=F81379D774C12B8FE9FAE03B8E6409A37DB54DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:e8:31:59:22:bf:24:b4:de:32:3b:79:ba: e2:31:d2:51:6b:3c:d9:3b:85:37:e0:9a:e2:67:7d: 90:7f:05:e9:3e:c4:bd:f8:f1:07:ea:77:a4:16:12: cc:35:7c:3b:04:7f:e9:39:60:2d:06:42:12:fb:c8: 98:b1:46:17:53:f8:53:15:c1:e1:08:61:2a:ae:be: 48:20:92:cd:5a:19:e2:6c:f6:b6:04:a7:ad:a2:9d: 5b:e1:0e:46:2a:27:2f:a4:98:7a:9c:6e:a4:e6:40: 52:39:ea:87:df:d8:50:48:2a:11:c4:77:bd:b7:07: 76:13:1d:d3:1e:f8:6c:65:89:80:7e:3d:3f:19:36: 4d:1f:a7:d5:be:c3:55:14:51:30:c4:44:a0:78:c0: 71:64:ea:d1:bd:6c:2d:3a:6c:35:4d:93:bc:5e:11: 82:15:03:59:e3:50:05:4b:e2:3f:1c:42:63:29:e4: 39:83:a7:63:af:6a:07:af:36:eb:20:8a:16:d1:da: be:85:48:bc:ec:80:ef:20:79:a2:3b:6b:5e:be:8a: 7e:b8:a9:55:24:21:bc:23:e8:e2:41:f6:e2:8a:f7: 73:8a:5b:2c:66:bf:53:7d:cb:e7:f5:5c:76:fe:04: e0:59:45:74:00:12:18:cc:47:72:79:30:00:0b:a6: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:13:79:D7:74:C1:2B:8F:E9:FA:E0:3B:8E:64:09:A3:7D:B5:4D:E7 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538313a653330313a3a2f34382d3438203d3e20323134363433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:e301::/48 Signature Algorithm: sha256WithRSAEncryption 9a:19:e6:36:ff:90:96:7b:1a:e3:01:9b:38:d8:53:c3:3f:33: 40:dd:50:eb:0b:ff:b4:1c:9c:77:d8:ea:96:e4:d8:6b:44:f1: a1:e8:b3:11:35:ba:69:12:58:3f:52:aa:b7:f0:d9:4c:57:91: a8:86:c4:cd:a8:86:42:68:7b:58:ca:bb:16:a7:36:7f:a6:19: 21:e7:97:35:f5:f1:ae:0b:92:de:c4:c6:fe:bf:a8:9a:1e:32: 06:0c:9d:b0:0b:4b:69:f7:90:8f:08:a2:ee:bf:b2:03:2b:78: ec:fc:38:5f:86:07:ad:28:ee:a3:88:8a:2d:82:ca:af:e7:9d: 7b:2b:51:64:b9:b3:91:3f:3f:c3:2e:c4:27:7e:51:5e:10:c9: 95:e5:da:60:11:b3:34:f5:5b:af:19:50:8d:62:3d:bc:e7:32: 5c:20:bd:3e:17:00:6d:d4:9e:e4:63:d4:f0:9f:c3:92:b1:6b: cc:36:fb:47:10:51:09:ec:ef:27:28:06:af:67:36:eb:55:32: 6c:65:4a:ac:41:92:6b:99:d8:32:66:16:1c:1e:1b:94:f3:58: 7a:e3:de:07:85:6b:9f:50:00:92:ba:44:ae:78:1e:43:dd:13: a4:b7:82:10:25:c8:f4:71:60:65:ff:5c:4f:48:9a:dc:e3:92: 27:1e:9f:e5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVXo71FYvpXu8NswYYsnnI6Mg27kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDA3MDUxMDUxMDhaFw0yNTA3MDQxMDU2MDhaMDMxMTAvBgNV BAMTKEY4MTM3OUQ3NzRDMTJCOEZFOUZBRTAzQjhFNjQwOUEzN0RCNTRERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxt+gxWSK/JLTeMjt5uuIx0lFr PNk7hTfgmuJnfZB/Bek+xL348Qfqd6QWEsw1fDsEf+k5YC0GQhL7yJixRhdT+FMV weEIYSquvkggks1aGeJs9rYEp62inVvhDkYqJy+kmHqcbqTmQFI56off2FBIKhHE d723B3YTHdMe+GxliYB+PT8ZNk0fp9W+w1UUUTDERKB4wHFk6tG9bC06bDVNk7xe EYIVA1njUAVL4j8cQmMp5DmDp2OvagevNusgihbR2r6FSLzsgO8geaI7a16+in64 qVUkIbwj6OJB9uKK93OKWyxmv1N9y+f1XHb+BOBZRXQAEhjMR3J5MAALpn0fAgMB AAGjggKFMIICgTAdBgNVHQ4EFgQU+BN513TBK4/p+uA7jmQJo321TecwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9kYjhkOGI3ZC1jNDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMS8zMjYxMzEz NDNhMzczNTM4MzEzYTY1MzMzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz MTM0MzYzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1geMBMA0GCSqGSIb3DQEBCwUAA4IBAQCa GeY2/5CWexrjAZs42FPDPzNA3VDrC/+0HJx32OqW5NhrRPGh6LMRNbppElg/Uqq3 8NlMV5GohsTNqIZCaHtYyrsWpzZ/phkh55c19fGuC5LexMb+v6iaHjIGDJ2wC0tp 95CPCKLuv7IDK3js/DhfhgetKO6jiIotgsqv5517K1FkubORPz/DLsQnflFeEMmV 5dpgEbM09VuvGVCNYj285zJcIL0+FwBt1J7kY9Twn8OSsWvMNvtHEFEJ7O8nKAav ZzbrVTJsZUqsQZJrmdgyZhYcHhuU81h6494HhWufUACSukSueB5D3ROkt4IQJcj0 cWBl/1xPSJrc45InHp/l -----END CERTIFICATE-----Generated at Sun Jul 14 08:31:14 2024 by rpki-client on console.sobornost.net