aboutsummaryrefslogtreecommitdiff
path: root/scripts/resource-cert-samples/RIR
diff options
context:
space:
mode:
Diffstat (limited to 'scripts/resource-cert-samples/RIR')
-rw-r--r--scripts/resource-cert-samples/RIR/11.pem100
-rw-r--r--scripts/resource-cert-samples/RIR/12.pem100
-rw-r--r--scripts/resource-cert-samples/RIR/13.pem79
-rw-r--r--scripts/resource-cert-samples/RIR/14.pem79
-rw-r--r--scripts/resource-cert-samples/RIR/15.pem79
-rw-r--r--scripts/resource-cert-samples/RIR/16.pem79
-rw-r--r--scripts/resource-cert-samples/RIR/17.pem100
-rw-r--r--scripts/resource-cert-samples/RIR/18.pem98
-rw-r--r--scripts/resource-cert-samples/RIR/19.pem95
-rw-r--r--scripts/resource-cert-samples/RIR/1A.pem94
-rw-r--r--scripts/resource-cert-samples/RIR/1B.pem100
-rw-r--r--scripts/resource-cert-samples/RIR/1C.pem98
-rw-r--r--scripts/resource-cert-samples/RIR/1D.pem95
-rw-r--r--scripts/resource-cert-samples/RIR/1E.pem94
-rw-r--r--scripts/resource-cert-samples/RIR/1F.pem76
-rw-r--r--scripts/resource-cert-samples/RIR/20.pem76
-rw-r--r--scripts/resource-cert-samples/RIR/21.pem76
-rw-r--r--scripts/resource-cert-samples/RIR/22.pem76
-rw-r--r--scripts/resource-cert-samples/RIR/23.pem100
-rw-r--r--scripts/resource-cert-samples/RIR/24.pem98
-rw-r--r--scripts/resource-cert-samples/RIR/25.pem95
-rw-r--r--scripts/resource-cert-samples/RIR/26.pem94
-rw-r--r--scripts/resource-cert-samples/RIR/index22
-rw-r--r--scripts/resource-cert-samples/RIR/index.old22
-rw-r--r--scripts/resource-cert-samples/RIR/serial2
-rw-r--r--scripts/resource-cert-samples/RIR/serial.old2
26 files changed, 2027 insertions, 2 deletions
diff --git a/scripts/resource-cert-samples/RIR/11.pem b/scripts/resource-cert-samples/RIR/11.pem
new file mode 100644
index 00000000..f8e33d59
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/11.pem
@@ -0,0 +1,100 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 17 (0x11)
+ Signature Algorithm: sha1WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 9 23:30:59 2007 GMT
+ Not After : Aug 8 23:30:59 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ FB:B8:A7:A3:36:48:0A:A0:9F:F0:2E:DC:8B:68:BC:B3:5C:45:25:D7
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533-64540
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha1WithRSAEncryption
+ 7b:22:d4:c2:f4:0b:74:d7:34:f4:f0:42:fa:cd:94:79:82:c3:
+ 12:dd:34:a3:e1:16:ea:de:f4:f6:b4:4d:fc:93:0e:f6:6f:7a:
+ e1:f9:bc:66:ee:56:b3:5b:28:36:ca:e8:0d:25:5b:62:31:c8:
+ 55:21:3f:4a:59:e7:cd:68:c7:6b:7c:e9:33:00:d2:59:80:23:
+ d8:58:17:e5:c6:3a:a3:d6:c3:fa:27:b2:12:9e:13:58:c3:37:
+ c2:c9:e9:d0:aa:4c:d4:82:e5:ce:ba:cc:11:d9:6d:95:24:04:
+ 75:bc:1c:56:57:2d:5f:90:19:54:38:06:13:fa:3f:b1:b4:8c:
+ 83:6c:2e:8a:e1:ca:e8:c0:6b:5c:2b:36:c5:9d:f0:65:1d:f2:
+ ab:97:77:20:5b:28:13:8f:d7:b4:1e:c3:89:5d:0f:03:fb:2c:
+ 9e:ac:59:98:ca:62:9c:cf:63:a3:ed:31:dd:0f:8f:d0:26:e8:
+ 40:bc:94:7c:b0:e6:44:07:7f:59:19:9d:1a:f7:04:d7:05:d9:
+ fc:0d:16:16:66:9c:2b:cd:87:dc:00:02:f1:e8:48:de:5f:8f:
+ b4:3e:22:fb:74:3b:7f:cb:90:7f:d6:6c:1d:26:65:e2:cc:55:
+ 3a:07:01:6c:48:61:7a:d4:55:09:c1:13:bb:ed:f5:69:e6:ba:
+ b6:80:9d:e5
+-----BEGIN CERTIFICATE-----
+MIIEEDCCAvigAwIBAgIBETANBgkqhkiG9w0BAQUFADAaMRgwFgYDVQQDEw9URVNU
+IEVOVElUWSBSSVIwHhcNMDcwODA5MjMzMDU5WhcNMDgwODA4MjMzMDU5WjAaMRgw
+FgYDVQQDEw9URVNUIEVOVElUWSBSSVIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
+ggEKAoIBAQCspybEmGiZtvLnxZcFfvnX8uw55iuOwkKIuY8itjxZsA6KHQ74gbHI
+/0qKGkO8eJE+r7KwlWCpPp3C/5mPj7bc2Ea3hjWm9kIFwsWbhBXiWA9wnLxT1yh2
++PIUeSK91otsDisC5djzM/oWQ5uAh/myRau9fRSyJC9BE29FxNz5TX/Y0+GqXFKd
+yXo4t7BDvbdqN0Ps5zTEO0zKzHsfke+r1DV2QoLU9XngEjwkki7colyD8HGKJpYw
+1LiWTQAsGvAPeVLHJ3NUd8GG+YZhzuBpp6g9dznnJO5BjVIZO1eMhMya1QV85oMs
+4xNtZhuHIIJH4QUm8DspaW28r0iRxEDxAgMBAAGjggFfMIIBWzAPBgNVHRMBAf8E
+BTADAQH/MB0GA1UdDgQWBBT7uKejNkgKoJ/wLtyLaLyzXEUl1zAOBgNVHQ8BAf8E
+BAMCAQYwQAYIKwYBBQUHAQsENDAyMDAGCCsGAQUFBzAFhiRyc3luYzovL3dvbWJh
+dHMtci11cy5oYWN0cm4ubmV0L1JJUi8wJgYIKwYBBQUHAQgBAf8EFzAVoBMwETAK
+AgMA/BUCAwD8HAIDAPwgMIGuBggrBgEFBQcBBwEB/wSBnjCBmzAyBAIAATAsAwQA
+CgAAAwQACgMAMA4DBQDAAAIBAwUBwAACIDAOAwUCwAACLAMFAMAAAmQwZQQCAAIw
+XzAmAxECIAENuAAAAAAAAAAAAAAARAMRACABDbgAAAAAAAAAAAAAAQADEAAgAQ24
+AAAAAAAAAAAKAAADEAAgAQ24AAAAAAAAAAAKAwADEQAgAQ24AAAAAAAAABAAAABE
+MA0GCSqGSIb3DQEBBQUAA4IBAQB7ItTC9At01zT08EL6zZR5gsMS3TSj4Rbq3vT2
+tE38kw72b3rh+bxm7lazWyg2yugNJVtiMchVIT9KWefNaMdrfOkzANJZgCPYWBfl
+xjqj1sP6J7ISnhNYwzfCyenQqkzUguXOuswR2W2VJAR1vBxWVy1fkBlUOAYT+j+x
+tIyDbC6K4crowGtcKzbFnfBlHfKrl3cgWygTj9e0HsOJXQ8D+yyerFmYymKcz2Oj
+7THdD4/QJuhAvJR8sOZEB39ZGZ0a9wTXBdn8DRYWZpwrzYfcAALx6EjeX4+0PiL7
+dDt/y5B/1mwdJmXizFU6BwFsSGF61FUJwRO77fVp5rq2gJ3l
+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/12.pem b/scripts/resource-cert-samples/RIR/12.pem
new file mode 100644
index 00000000..71bb1954
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/12.pem
@@ -0,0 +1,100 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 18 (0x12)
+ Signature Algorithm: sha1WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 9 23:35:48 2007 GMT
+ Not After : Aug 8 23:35:48 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ FB:B8:A7:A3:36:48:0A:A0:9F:F0:2E:DC:8B:68:BC:B3:5C:45:25:D7
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533-64540
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha1WithRSAEncryption
+ 80:5c:c5:27:3a:5d:bb:11:2c:ec:b4:89:ab:3f:79:a7:31:ef:
+ 7f:ed:93:75:2c:9d:4b:5c:f1:28:38:3e:cc:c4:98:e5:81:01:
+ db:e1:61:5c:37:0a:3f:91:52:34:a5:6b:28:8c:b7:ae:38:95:
+ a7:67:26:39:b2:43:cb:a5:db:fc:4f:12:6c:f4:69:82:ab:80:
+ 9c:8f:aa:d9:21:6e:3e:e1:f5:78:f4:59:d0:2e:97:1d:23:3d:
+ 27:86:70:5b:b7:59:e7:98:1c:ae:19:42:e8:65:ef:eb:bf:6c:
+ f8:94:6a:27:b9:11:5e:81:b6:ee:5f:10:ae:9f:b7:30:50:30:
+ e6:84:5c:90:ef:3d:24:e7:6a:20:5c:d2:4c:96:66:28:15:46:
+ 40:63:00:65:96:a5:5f:78:2a:66:d2:16:b1:86:77:e0:39:7d:
+ fc:14:e1:bc:54:5b:b1:08:65:aa:f1:1b:39:2f:bf:ca:07:a0:
+ ab:e7:e4:b0:8c:cb:48:c7:44:94:ff:04:a4:c9:85:6d:40:ca:
+ 8f:0c:01:e6:11:f6:eb:07:96:b5:83:15:87:27:88:72:b3:d9:
+ 41:4e:d0:f0:88:1a:17:10:72:89:85:c0:12:79:c1:5c:07:bb:
+ d7:39:ef:ce:49:85:11:62:01:50:71:91:b9:e3:7e:45:a8:45:
+ d6:d0:a9:3a
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/13.pem b/scripts/resource-cert-samples/RIR/13.pem
new file mode 100644
index 00000000..3b1e67f4
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/13.pem
@@ -0,0 +1,79 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 19 (0x13)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 00:58:17 2007 GMT
+ Not After : Aug 9 00:58:17 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ FB:B8:A7:A3:36:48:0A:A0:9F:F0:2E:DC:8B:68:BC:B3:5C:45:25:D7
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 62:6a:d0:3e:02:bf:ad:3c:e5:c9:23:1f:66:6d:cc:80:59:a5:
+ 64:61:f2:20:64:bc:91:5d:76:d9:ce:6e:db:d1:c0:89:77:9d:
+ cc:a6:e2:4a:43:0e:bb:f3:36:60:3f:1d:b7:9a:38:ad:10:e0:
+ 89:82:61:c7:4a:48:70:c3:03:73:ae:ab:37:31:0c:36:cc:46:
+ 12:ea:54:3d:03:d6:ba:4c:d6:cf:73:ea:90:4c:37:da:a3:f6:
+ b6:f3:af:d8:a7:82:e7:1a:7b:05:23:77:20:52:b3:53:64:d0:
+ bd:24:83:21:49:2f:30:fc:12:3b:fa:73:c3:c9:de:3f:af:bb:
+ 5e:ed:b3:bf:9b:9e:71:83:37:f1:98:e3:77:e1:72:4f:1d:c6:
+ 7b:59:32:34:f7:e4:76:70:52:41:72:97:bb:61:c0:c8:26:ac:
+ 28:6e:e7:ef:f8:6c:ea:b2:4c:62:d0:28:5e:6c:50:94:09:a1:
+ d4:ab:0c:d3:b3:d1:4a:ea:ef:33:ed:08:43:54:71:fb:6d:40:
+ c8:dc:75:84:28:ff:4e:47:2c:08:54:72:40:af:cc:94:00:a8:
+ 9f:8e:d9:35:64:49:f1:db:69:a8:d5:71:86:41:46:e0:27:62:
+ 50:a4:0a:1e:f5:99:b4:d8:db:1c:4f:8b:af:51:4d:80:2b:af:
+ e3:b6:b0:6b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/14.pem b/scripts/resource-cert-samples/RIR/14.pem
new file mode 100644
index 00000000..430d3895
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/14.pem
@@ -0,0 +1,79 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 20 (0x14)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 00:58:17 2007 GMT
+ Not After : Aug 9 00:58:17 2008 GMT
+ Subject: CN=TEST ENTITY LIR3
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:a3:21:57:61:64:af:11:18:d4:cb:de:a6:dc:ad:
+ d9:2c:0f:0f:58:9f:7e:c8:85:55:11:26:4c:7c:f0:
+ 6b:68:1a:9e:6a:0c:8f:e6:dc:3d:83:58:2a:cc:77:
+ ac:19:73:6f:5a:f3:6e:24:ac:cd:1a:dc:1d:0b:4c:
+ 44:f5:6d:8b:0a:17:3d:86:f9:e8:fe:e6:60:e5:9f:
+ 40:6a:e5:94:e8:9a:56:17:17:1c:ab:c1:8c:37:40:
+ 2b:55:bf:2c:5e:dc:8d:ca:25:7f:8a:5f:ee:fb:16:
+ 86:eb:e0:08:d3:26:e5:e3:70:c5:0c:6b:fb:1b:8f:
+ 6b:5c:f6:e2:4a:58:a5:35:01:ea:05:1b:3e:ce:84:
+ be:b5:3f:6d:18:16:4b:68:e5:79:4c:88:7d:b6:a5:
+ 65:a3:3a:c2:32:dc:ad:8f:8a:05:ee:f6:e9:7a:80:
+ da:12:a9:0f:5a:b5:d2:d3:31:ac:3e:d3:19:25:2d:
+ 28:de:79:6c:ce:fd:77:66:d5:e3:2f:a9:cb:f9:85:
+ 8c:20:bb:a2:86:23:f0:93:95:20:04:78:c7:c7:07:
+ a6:fe:f0:f4:45:bb:cf:78:2b:dd:ce:9c:08:a5:46:
+ 68:10:4c:d7:05:62:6c:86:5a:2d:7f:06:38:c2:4d:
+ bb:44:87:00:43:79:d2:8f:f3:6b:b2:f4:5c:1c:b9:
+ 68:01
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 98:BE:04:FF:80:D1:AB:95:39:AA:3D:F2:0E:67:7D:00:AD:A3:FD:C5
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR3/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 5a:9b:65:02:d5:6c:fc:4f:b2:df:3b:a8:a2:44:3b:fd:bc:4d:
+ 9f:32:30:e7:4f:e6:44:37:3f:35:68:d0:7e:ee:a5:cc:6e:0a:
+ 79:2d:6a:2d:35:45:13:ed:f8:67:fb:5b:41:fa:00:04:f5:28:
+ d4:72:0e:fe:05:d6:76:20:cf:4b:15:13:05:6c:9f:aa:05:8c:
+ 77:eb:e7:1d:57:ed:32:11:45:ba:3e:e8:53:68:85:98:bd:bf:
+ 56:7e:04:85:f1:7f:70:ba:e8:16:03:46:ff:c5:be:df:42:79:
+ 57:01:2f:1a:e2:bc:6b:79:3e:fa:79:ec:08:ca:7d:32:02:0c:
+ 94:47:9e:c8:01:60:de:b9:43:76:be:22:64:89:47:d7:b9:63:
+ 9f:1d:7d:c8:93:e6:48:2a:a6:f7:51:9c:bd:06:8a:c9:01:5d:
+ 51:83:85:09:1a:18:03:49:10:e9:fa:80:0a:d1:7c:2c:69:c0:
+ 6b:53:e6:97:24:cd:f1:ad:e2:b6:5f:ac:72:28:0c:e8:cb:ab:
+ 00:15:29:9e:cb:af:74:1e:dc:3b:c6:24:bc:2d:50:e3:12:fc:
+ 00:63:ec:b6:09:c9:27:33:d6:42:a2:87:d4:35:48:63:16:1a:
+ e0:f7:50:ed:e3:d9:11:d9:f1:1c:cd:a5:21:e0:56:ad:4d:fc:
+ da:a6:97:e9
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/15.pem b/scripts/resource-cert-samples/RIR/15.pem
new file mode 100644
index 00000000..625589ac
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/15.pem
@@ -0,0 +1,79 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 21 (0x15)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 00:58:17 2007 GMT
+ Not After : Aug 9 00:58:17 2008 GMT
+ Subject: CN=TEST ENTITY LIR2
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:f1:18:b6:79:0b:35:c5:83:64:48:83:31:03:9e:
+ e7:72:28:65:b1:ac:61:e1:77:2e:c0:4d:f0:b1:1c:
+ 61:d8:cc:5a:2d:c7:0b:9b:78:7a:3e:fd:37:ad:fa:
+ b0:73:0b:9c:fc:bb:6f:60:ea:38:ef:ae:d1:27:b8:
+ 81:59:0f:b3:e7:d0:67:b2:a2:f5:4f:e2:04:c6:cc:
+ 13:9f:33:28:35:96:7a:db:ce:ac:9d:d3:64:3d:b8:
+ 44:bc:cb:43:22:92:d6:3c:2e:bf:97:6e:39:6a:6e:
+ 68:93:5d:1c:a8:58:b7:a3:7a:26:44:fe:fe:30:ad:
+ e2:05:89:4c:c9:ef:2c:e0:4e:31:69:3f:dd:91:1c:
+ f0:b0:25:4c:3e:84:8a:ea:5e:03:b3:a8:cd:90:1a:
+ 1e:c8:e0:af:fe:11:ed:21:06:bd:3c:5e:08:a1:93:
+ e2:41:43:43:38:d3:21:b3:4c:fa:85:8b:43:57:60:
+ 5d:bb:a0:78:e5:33:47:a8:33:76:be:df:6e:63:61:
+ e3:31:8b:5d:8e:0c:c7:f5:c8:91:0c:be:57:c7:f2:
+ bc:be:0b:ba:7a:1f:f6:19:f1:eb:00:74:c1:12:c2:
+ dc:2b:2e:8d:f0:0a:ff:7f:e8:60:08:90:ba:51:fc:
+ d0:90:11:37:f3:9e:44:b6:64:43:69:5d:61:d3:e1:
+ 8d:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 03:7A:DF:0C:DF:DC:93:3D:F7:A5:CC:27:7B:DC:22:F6:E9:55:97:F0
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR2/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 6f:1a:6a:59:42:4b:0d:64:9e:e4:6e:80:ae:d4:ed:00:cc:52:
+ eb:04:bf:e2:48:2e:24:89:bd:df:a9:cf:93:27:47:80:c5:d6:
+ e1:94:f5:4a:d0:f7:52:48:49:c3:2a:20:de:87:76:e1:a0:11:
+ d5:a0:19:f5:70:df:45:1c:72:47:6b:af:5b:53:5d:1d:49:5a:
+ 62:21:f9:3b:49:18:9d:b1:6c:53:6d:9d:85:2c:fc:83:72:ff:
+ b7:7d:4f:01:36:41:df:a3:03:51:34:e2:5e:25:65:4c:d1:25:
+ f8:e3:92:06:7a:ca:97:42:6c:60:58:05:54:f5:9d:b9:90:fc:
+ ae:32:a3:c5:dc:db:75:55:97:2e:db:1a:32:65:44:e6:ab:81:
+ 14:b2:e1:8c:c5:a5:09:a4:07:2e:ed:ee:44:28:6a:29:0e:6f:
+ a0:08:aa:2a:28:24:e8:cf:7f:22:db:56:b4:fc:45:26:13:9a:
+ 41:55:5c:81:31:b3:6d:d0:3e:cc:62:6d:d1:d8:b9:2a:0f:2b:
+ 58:40:7a:e0:02:d2:31:4c:4f:df:c5:2c:d1:ba:c9:8c:e3:b9:
+ 74:7e:5c:dd:a5:f8:75:93:fe:26:69:52:70:bd:2e:01:1a:37:
+ d1:53:ae:80:d5:5b:56:0c:72:e4:c6:ba:7b:3f:99:2a:bf:a7:
+ b0:d7:3b:ec
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/16.pem b/scripts/resource-cert-samples/RIR/16.pem
new file mode 100644
index 00000000..ebfd1e7b
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/16.pem
@@ -0,0 +1,79 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 22 (0x16)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 00:58:17 2007 GMT
+ Not After : Aug 9 00:58:17 2008 GMT
+ Subject: CN=TEST ENTITY LIR1
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:af:5d:1c:f9:d9:bb:d5:01:e1:5b:36:cc:51:f6:
+ fd:86:57:60:aa:9e:c7:ec:4e:05:af:fb:51:5c:7a:
+ c2:58:c4:a8:57:ae:14:62:e9:bc:b6:72:7d:cf:49:
+ c8:4a:40:82:4a:f4:3e:30:b5:94:25:9e:6c:78:81:
+ 57:43:d6:85:02:8d:d1:9c:b5:d7:34:2f:e2:a9:7d:
+ 18:27:b5:47:9a:42:16:c8:90:7f:96:2c:dd:b8:98:
+ 17:1f:77:62:4a:08:00:2d:e0:73:0c:39:37:ba:0f:
+ a7:59:59:4c:7c:cd:e2:5c:d7:98:36:10:6c:88:3e:
+ 45:99:a6:88:2f:f6:7f:31:49:ba:42:2b:13:79:c2:
+ b2:f1:09:d9:ad:37:a4:41:b6:6d:46:a1:18:05:a0:
+ 53:07:8e:e0:98:b2:d1:fd:67:68:77:64:d5:f3:fe:
+ 1d:22:36:9e:26:5a:1a:aa:18:94:c3:2c:7e:9a:af:
+ be:2c:9d:5e:75:2c:49:d6:37:2b:06:1f:cc:63:97:
+ 7e:ee:2c:5f:67:af:4d:62:3e:7a:1f:0c:e1:1e:02:
+ f2:d2:06:75:ae:3f:11:bc:8e:0f:13:64:38:14:36:
+ 1d:5d:02:ec:af:65:d5:b9:68:f4:22:66:2b:ef:47:
+ 5b:ad:3b:f2:af:b6:71:0c:94:56:8a:7c:01:36:f0:
+ 3a:3f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 8A:94:17:F9:53:F2:5B:94:54:56:DF:76:51:13:29:F6:71:19:A8:B3
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR1/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 45:76:2c:fa:d1:3b:02:23:5f:e3:3f:07:7e:ad:92:c0:7d:ba:
+ 8b:6d:ff:3c:33:c2:d4:06:4d:ca:71:41:6a:36:a2:e3:3a:34:
+ 0c:9e:b1:21:a2:17:91:3b:e9:e3:50:57:25:2e:dc:4f:1a:67:
+ 30:52:3e:36:04:0a:ce:03:84:f6:b0:1b:1c:59:66:4b:d1:68:
+ 5a:cf:3b:7d:f4:28:74:6d:16:ba:7c:ad:5c:f0:6a:39:73:33:
+ fe:c0:8d:d7:55:c0:cb:df:f3:d4:51:34:fe:62:42:97:70:61:
+ bd:cc:bc:1c:c7:37:5f:d4:f1:2b:cb:3b:11:4c:84:77:db:5e:
+ 66:2d:37:71:d5:f5:91:01:be:4e:97:8b:ae:6e:83:9a:9a:e3:
+ d8:47:a9:fc:7f:b3:80:67:c1:60:60:3e:66:64:e8:ae:d8:7a:
+ 72:50:fd:59:75:dd:fd:f0:69:92:ce:f6:c9:cc:49:72:eb:70:
+ 48:28:e7:f7:1c:d4:a0:75:40:ef:50:f4:9f:e4:74:26:e5:90:
+ ae:c4:fb:c5:b9:0a:5f:da:61:c2:78:f4:0d:0b:b8:ed:28:d9:
+ b7:26:6a:8f:1d:43:22:72:f3:a6:3c:36:d8:40:9f:d7:49:68:
+ d0:af:64:48:f8:69:55:98:9c:e9:47:5b:1b:15:06:5f:60:80:
+ e9:e2:72:f7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/17.pem b/scripts/resource-cert-samples/RIR/17.pem
new file mode 100644
index 00000000..08089ed2
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/17.pem
@@ -0,0 +1,100 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 23 (0x17)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:02:31 2007 GMT
+ Not After : Aug 9 01:02:31 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ FB:B8:A7:A3:36:48:0A:A0:9F:F0:2E:DC:8B:68:BC:B3:5C:45:25:D7
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533-64540
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 98:59:33:64:37:e0:05:3f:f1:4a:d6:c3:45:92:92:f4:da:0e:
+ 35:de:70:0a:ab:49:10:c9:a2:74:c6:ad:2b:cb:de:3e:0e:3f:
+ 2e:2d:0d:f1:65:0a:b9:f6:c6:fe:80:8a:d2:a9:fe:41:f7:6d:
+ 8f:92:f4:f6:4a:d0:36:6f:06:de:f6:30:91:ac:1d:c3:a7:d0:
+ 7a:4a:40:9c:88:fd:0f:b8:f7:46:0c:d0:a5:85:48:e7:47:e1:
+ 9a:d2:e7:3e:36:fc:e5:e4:13:98:b2:48:a7:b1:bb:b5:86:11:
+ 35:42:20:97:6a:d6:a1:ae:1b:33:1b:6d:1c:9b:e8:9d:8c:05:
+ 44:e3:d3:7e:53:d6:d8:da:76:85:6d:8f:dc:d1:1b:c4:cd:87:
+ de:73:dd:09:26:eb:ac:49:62:5f:fb:44:42:d5:81:0f:11:eb:
+ 3f:5c:83:2d:ed:51:12:66:e6:ff:2c:83:ac:40:0a:85:01:b4:
+ 08:4b:32:14:ff:a5:a6:33:30:f2:10:ac:bb:55:9c:65:3b:78:
+ 35:0e:45:c6:0d:64:b0:ef:1f:f7:7f:79:43:fd:97:b9:ea:8b:
+ 8e:5d:56:76:fa:cb:39:17:f3:27:b2:b0:1d:87:1f:52:50:54:
+ 55:69:5a:37:f1:42:07:ed:68:90:b0:63:7c:f1:10:19:29:44:
+ f7:58:ee:eb
+-----BEGIN CERTIFICATE-----
+MIIEEDCCAvigAwIBAgIBFzANBgkqhkiG9w0BAQsFADAaMRgwFgYDVQQDEw9URVNU
+IEVOVElUWSBSSVIwHhcNMDcwODEwMDEwMjMxWhcNMDgwODA5MDEwMjMxWjAaMRgw
+FgYDVQQDEw9URVNUIEVOVElUWSBSSVIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
+ggEKAoIBAQCspybEmGiZtvLnxZcFfvnX8uw55iuOwkKIuY8itjxZsA6KHQ74gbHI
+/0qKGkO8eJE+r7KwlWCpPp3C/5mPj7bc2Ea3hjWm9kIFwsWbhBXiWA9wnLxT1yh2
++PIUeSK91otsDisC5djzM/oWQ5uAh/myRau9fRSyJC9BE29FxNz5TX/Y0+GqXFKd
+yXo4t7BDvbdqN0Ps5zTEO0zKzHsfke+r1DV2QoLU9XngEjwkki7colyD8HGKJpYw
+1LiWTQAsGvAPeVLHJ3NUd8GG+YZhzuBpp6g9dznnJO5BjVIZO1eMhMya1QV85oMs
+4xNtZhuHIIJH4QUm8DspaW28r0iRxEDxAgMBAAGjggFfMIIBWzAPBgNVHRMBAf8E
+BTADAQH/MB0GA1UdDgQWBBT7uKejNkgKoJ/wLtyLaLyzXEUl1zAOBgNVHQ8BAf8E
+BAMCAQYwQAYIKwYBBQUHAQsENDAyMDAGCCsGAQUFBzAFhiRyc3luYzovL3dvbWJh
+dHMtci11cy5oYWN0cm4ubmV0L1JJUi8wJgYIKwYBBQUHAQgBAf8EFzAVoBMwETAK
+AgMA/BUCAwD8HAIDAPwgMIGuBggrBgEFBQcBBwEB/wSBnjCBmzAyBAIAATAsAwQA
+CgAAAwQACgMAMA4DBQDAAAIBAwUBwAACIDAOAwUCwAACLAMFAMAAAmQwZQQCAAIw
+XzAmAxECIAENuAAAAAAAAAAAAAAARAMRACABDbgAAAAAAAAAAAAAAQADEAAgAQ24
+AAAAAAAAAAAKAAADEAAgAQ24AAAAAAAAAAAKAwADEQAgAQ24AAAAAAAAABAAAABE
+MA0GCSqGSIb3DQEBCwUAA4IBAQCYWTNkN+AFP/FK1sNFkpL02g413nAKq0kQyaJ0
+xq0ry94+Dj8uLQ3xZQq59sb+gIrSqf5B922PkvT2StA2bwbe9jCRrB3Dp9B6SkCc
+iP0PuPdGDNClhUjnR+Ga0uc+Nvzl5BOYskinsbu1hhE1QiCXatahrhszG20cm+id
+jAVE49N+U9bY2naFbY/c0RvEzYfec90JJuusSWJf+0RC1YEPEes/XIMt7VESZub/
+LIOsQAqFAbQISzIU/6WmMzDyEKy7VZxlO3g1DkXGDWSw7x/3f3lD/Ze56ouOXVZ2
++ss5F/MnsrAdhx9SUFRVaVo38UIH7WiQsGN88RAZKUT3WO7r
+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/18.pem b/scripts/resource-cert-samples/RIR/18.pem
new file mode 100644
index 00000000..61f31504
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/18.pem
@@ -0,0 +1,98 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 24 (0x18)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:02:31 2007 GMT
+ Not After : Aug 9 01:02:31 2008 GMT
+ Subject: CN=TEST ENTITY LIR3
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:a3:21:57:61:64:af:11:18:d4:cb:de:a6:dc:ad:
+ d9:2c:0f:0f:58:9f:7e:c8:85:55:11:26:4c:7c:f0:
+ 6b:68:1a:9e:6a:0c:8f:e6:dc:3d:83:58:2a:cc:77:
+ ac:19:73:6f:5a:f3:6e:24:ac:cd:1a:dc:1d:0b:4c:
+ 44:f5:6d:8b:0a:17:3d:86:f9:e8:fe:e6:60:e5:9f:
+ 40:6a:e5:94:e8:9a:56:17:17:1c:ab:c1:8c:37:40:
+ 2b:55:bf:2c:5e:dc:8d:ca:25:7f:8a:5f:ee:fb:16:
+ 86:eb:e0:08:d3:26:e5:e3:70:c5:0c:6b:fb:1b:8f:
+ 6b:5c:f6:e2:4a:58:a5:35:01:ea:05:1b:3e:ce:84:
+ be:b5:3f:6d:18:16:4b:68:e5:79:4c:88:7d:b6:a5:
+ 65:a3:3a:c2:32:dc:ad:8f:8a:05:ee:f6:e9:7a:80:
+ da:12:a9:0f:5a:b5:d2:d3:31:ac:3e:d3:19:25:2d:
+ 28:de:79:6c:ce:fd:77:66:d5:e3:2f:a9:cb:f9:85:
+ 8c:20:bb:a2:86:23:f0:93:95:20:04:78:c7:c7:07:
+ a6:fe:f0:f4:45:bb:cf:78:2b:dd:ce:9c:08:a5:46:
+ 68:10:4c:d7:05:62:6c:86:5a:2d:7f:06:38:c2:4d:
+ bb:44:87:00:43:79:d2:8f:f3:6b:b2:f4:5c:1c:b9:
+ 68:01
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 98:BE:04:FF:80:D1:AB:95:39:AA:3D:F2:0E:67:7D:00:AD:A3:FD:C5
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR3/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64534-64540
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ IPv6:
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 48:75:33:bf:1e:19:3b:50:a8:af:35:67:af:b3:e9:f5:53:68:
+ ea:41:f9:cf:21:a6:cb:ad:f3:ac:20:2b:79:c9:15:7a:9b:7f:
+ 88:70:ac:34:64:44:92:7f:56:41:f1:8e:af:9f:e6:28:6f:74:
+ d5:d3:d3:7b:99:1f:92:8f:58:9d:03:b3:f9:b1:9f:c4:8e:b1:
+ ea:bb:cf:11:02:70:7b:9c:0e:36:f9:13:41:fb:3f:94:aa:95:
+ 33:25:f4:4b:4c:cf:11:c4:39:1b:74:fc:98:92:84:4a:58:09:
+ f3:e5:d2:1c:06:cf:73:79:98:68:ec:17:c2:4f:24:38:7d:47:
+ b9:6d:62:c6:70:69:2e:83:0c:d1:77:e1:78:a2:b5:ea:0e:17:
+ d4:93:7b:9c:c1:1d:48:aa:ba:95:03:9d:0f:1a:d8:65:36:84:
+ 5b:2b:57:44:af:ef:0e:56:f8:3f:63:34:79:d4:98:8d:c6:7c:
+ 3c:b5:cc:26:ab:5c:04:01:aa:ff:c7:00:2c:12:4c:e4:9e:29:
+ f4:30:95:ab:28:d5:f0:91:b1:4b:cc:a9:43:58:d1:81:45:7b:
+ 48:50:7e:b8:21:25:2a:58:d7:65:e7:1f:09:30:25:09:08:83:
+ 5b:fd:c4:42:bd:d7:a1:72:e4:97:ce:f6:c9:72:38:59:2f:e6:
+ e4:06:a4:99
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/19.pem b/scripts/resource-cert-samples/RIR/19.pem
new file mode 100644
index 00000000..e258d4d7
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/19.pem
@@ -0,0 +1,95 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 25 (0x19)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:02:31 2007 GMT
+ Not After : Aug 9 01:02:31 2008 GMT
+ Subject: CN=TEST ENTITY LIR2
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:f1:18:b6:79:0b:35:c5:83:64:48:83:31:03:9e:
+ e7:72:28:65:b1:ac:61:e1:77:2e:c0:4d:f0:b1:1c:
+ 61:d8:cc:5a:2d:c7:0b:9b:78:7a:3e:fd:37:ad:fa:
+ b0:73:0b:9c:fc:bb:6f:60:ea:38:ef:ae:d1:27:b8:
+ 81:59:0f:b3:e7:d0:67:b2:a2:f5:4f:e2:04:c6:cc:
+ 13:9f:33:28:35:96:7a:db:ce:ac:9d:d3:64:3d:b8:
+ 44:bc:cb:43:22:92:d6:3c:2e:bf:97:6e:39:6a:6e:
+ 68:93:5d:1c:a8:58:b7:a3:7a:26:44:fe:fe:30:ad:
+ e2:05:89:4c:c9:ef:2c:e0:4e:31:69:3f:dd:91:1c:
+ f0:b0:25:4c:3e:84:8a:ea:5e:03:b3:a8:cd:90:1a:
+ 1e:c8:e0:af:fe:11:ed:21:06:bd:3c:5e:08:a1:93:
+ e2:41:43:43:38:d3:21:b3:4c:fa:85:8b:43:57:60:
+ 5d:bb:a0:78:e5:33:47:a8:33:76:be:df:6e:63:61:
+ e3:31:8b:5d:8e:0c:c7:f5:c8:91:0c:be:57:c7:f2:
+ bc:be:0b:ba:7a:1f:f6:19:f1:eb:00:74:c1:12:c2:
+ dc:2b:2e:8d:f0:0a:ff:7f:e8:60:08:90:ba:51:fc:
+ d0:90:11:37:f3:9e:44:b6:64:43:69:5d:61:d3:e1:
+ 8d:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 03:7A:DF:0C:DF:DC:93:3D:F7:A5:CC:27:7B:DC:22:F6:E9:55:97:F0
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR2/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ ab:e6:eb:32:dd:27:9e:57:ba:21:b7:f2:7f:38:ba:b9:35:c6:
+ fb:73:c8:70:83:63:80:8f:10:99:56:fc:27:66:d3:19:36:61:
+ 0d:96:f5:aa:1e:2b:8d:75:3f:cf:9a:5e:8c:17:51:21:31:6f:
+ ac:ce:d7:18:21:03:3e:b9:b5:4b:50:23:3a:1c:45:5e:51:d9:
+ 91:73:84:19:98:bd:52:3f:77:f9:c1:ae:94:e0:be:5a:70:20:
+ 1b:68:55:4a:9b:02:7b:7f:a0:4c:86:d8:41:54:58:f0:65:b9:
+ 18:03:9e:92:d0:5e:bf:6b:d9:42:b3:20:fe:f8:87:65:54:17:
+ 88:69:cd:e1:b7:73:37:2b:bf:e0:10:52:0a:4f:72:e7:3e:c8:
+ 6c:91:37:cb:16:6b:e3:76:45:4d:68:80:92:45:7d:0f:7d:46:
+ 11:6d:5a:e9:63:38:c3:7f:84:87:4c:66:28:11:d9:a3:db:75:
+ d8:72:5e:a6:46:3a:14:28:9d:86:e3:bc:a5:15:4c:8c:0c:54:
+ 8c:9a:0b:4a:ad:72:9a:c5:60:f5:92:ef:9e:ef:be:38:c4:28:
+ 44:a8:26:80:dc:26:4a:27:4c:d0:ba:f6:ba:fb:9c:5c:7c:3b:
+ 80:7a:37:3f:bd:eb:8f:f5:21:db:b4:80:77:a8:bb:b0:19:07:
+ 00:65:9a:82
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/1A.pem b/scripts/resource-cert-samples/RIR/1A.pem
new file mode 100644
index 00000000..9b92b771
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/1A.pem
@@ -0,0 +1,94 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 26 (0x1a)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:02:31 2007 GMT
+ Not After : Aug 9 01:02:31 2008 GMT
+ Subject: CN=TEST ENTITY LIR1
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:af:5d:1c:f9:d9:bb:d5:01:e1:5b:36:cc:51:f6:
+ fd:86:57:60:aa:9e:c7:ec:4e:05:af:fb:51:5c:7a:
+ c2:58:c4:a8:57:ae:14:62:e9:bc:b6:72:7d:cf:49:
+ c8:4a:40:82:4a:f4:3e:30:b5:94:25:9e:6c:78:81:
+ 57:43:d6:85:02:8d:d1:9c:b5:d7:34:2f:e2:a9:7d:
+ 18:27:b5:47:9a:42:16:c8:90:7f:96:2c:dd:b8:98:
+ 17:1f:77:62:4a:08:00:2d:e0:73:0c:39:37:ba:0f:
+ a7:59:59:4c:7c:cd:e2:5c:d7:98:36:10:6c:88:3e:
+ 45:99:a6:88:2f:f6:7f:31:49:ba:42:2b:13:79:c2:
+ b2:f1:09:d9:ad:37:a4:41:b6:6d:46:a1:18:05:a0:
+ 53:07:8e:e0:98:b2:d1:fd:67:68:77:64:d5:f3:fe:
+ 1d:22:36:9e:26:5a:1a:aa:18:94:c3:2c:7e:9a:af:
+ be:2c:9d:5e:75:2c:49:d6:37:2b:06:1f:cc:63:97:
+ 7e:ee:2c:5f:67:af:4d:62:3e:7a:1f:0c:e1:1e:02:
+ f2:d2:06:75:ae:3f:11:bc:8e:0f:13:64:38:14:36:
+ 1d:5d:02:ec:af:65:d5:b9:68:f4:22:66:2b:ef:47:
+ 5b:ad:3b:f2:af:b6:71:0c:94:56:8a:7c:01:36:f0:
+ 3a:3f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 8A:94:17:F9:53:F2:5B:94:54:56:DF:76:51:13:29:F6:71:19:A8:B3
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR1/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 1f:83:71:23:e8:ef:c9:a9:7f:c1:a3:c3:73:64:67:f3:0a:c0:
+ b8:1f:17:71:b0:f6:97:be:db:5d:bf:79:ea:d8:af:cc:16:f4:
+ ee:f1:01:e3:df:a4:f5:a7:d9:d0:12:28:fc:02:69:91:eb:1f:
+ e5:fa:b3:3c:ba:9a:34:20:ce:0a:68:73:b8:aa:62:dd:b1:54:
+ f9:b6:ab:70:23:e0:c6:55:d5:a7:ad:ab:5b:bf:12:38:44:7b:
+ b1:36:20:6e:1b:d1:30:5e:c2:a3:c6:db:19:4e:f1:e8:71:32:
+ 1a:04:b4:96:31:9b:5e:c8:25:94:72:05:f1:96:a4:82:69:62:
+ c6:67:7f:53:b6:71:b1:72:7f:9b:94:f4:04:fe:32:ed:7b:ee:
+ 4e:4a:6a:6c:b8:70:db:2d:4a:7c:b9:23:8b:d0:39:b1:a5:9f:
+ c8:ee:51:95:3d:e0:e6:d2:45:0b:8a:83:d0:41:13:f6:39:ce:
+ 5f:a6:91:00:6c:e1:dc:51:e0:b8:7c:6c:e4:a7:54:b8:26:04:
+ 8c:bb:5a:35:0b:d9:4f:dd:52:78:21:e2:a7:ca:ef:a7:10:cf:
+ 44:27:2b:f4:88:d8:18:c3:e1:5a:42:12:a3:05:1e:08:7a:06:
+ 1f:24:64:05:14:d9:b2:2d:92:4e:cd:45:8b:45:c6:9e:ca:10:
+ 72:0d:43:09
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/1B.pem b/scripts/resource-cert-samples/RIR/1B.pem
new file mode 100644
index 00000000..300059d2
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/1B.pem
@@ -0,0 +1,100 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 27 (0x1b)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:07:08 2007 GMT
+ Not After : Aug 9 01:07:08 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ FB:B8:A7:A3:36:48:0A:A0:9F:F0:2E:DC:8B:68:BC:B3:5C:45:25:D7
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533-64540
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 7c:1c:ce:a8:d1:0f:62:6e:a9:c2:b1:1a:5d:12:64:0b:07:3f:
+ 32:63:9e:f5:0c:29:f6:5a:72:40:7d:a2:02:a0:cb:2a:c0:e0:
+ 66:d7:bd:0a:1e:c4:59:ee:99:33:f8:c3:a7:4b:56:8c:1d:62:
+ f5:c3:ee:12:45:3e:2f:29:ed:11:29:ae:1f:c0:8f:d6:ac:dd:
+ f4:74:21:07:b0:54:cc:6b:ca:37:38:82:7b:d4:e1:1f:00:b4:
+ ac:be:b4:71:5f:74:96:1b:39:ef:fc:ae:0c:b5:b2:7b:be:e5:
+ 16:66:21:2f:aa:ba:1a:52:63:d3:3f:38:91:7b:2d:c8:fd:f6:
+ aa:f0:f1:c5:39:4f:7d:79:b3:e3:e6:a0:95:6b:a3:66:10:dd:
+ d4:0f:93:0f:34:13:b0:1c:a3:b4:88:ba:ba:b6:f5:55:ba:f2:
+ 1c:6c:1c:9d:1d:fe:e7:49:c9:10:9a:c7:68:b0:2c:d7:0e:c1:
+ 73:93:07:65:2b:3f:ed:98:ff:4d:f4:6b:b6:c0:4b:25:40:43:
+ 33:b6:44:b9:de:62:27:bf:cd:6d:36:9d:60:a8:bd:25:67:21:
+ 53:a4:64:d7:67:7b:0b:ff:a2:22:72:cd:8a:b2:57:7c:13:02:
+ 97:93:96:cc:3b:61:40:6d:5c:da:d6:79:b6:ac:e0:05:fe:dd:
+ f9:7f:24:2c
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/1C.pem b/scripts/resource-cert-samples/RIR/1C.pem
new file mode 100644
index 00000000..786dc6b4
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/1C.pem
@@ -0,0 +1,98 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 28 (0x1c)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:07:08 2007 GMT
+ Not After : Aug 9 01:07:08 2008 GMT
+ Subject: CN=TEST ENTITY LIR3
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:a3:21:57:61:64:af:11:18:d4:cb:de:a6:dc:ad:
+ d9:2c:0f:0f:58:9f:7e:c8:85:55:11:26:4c:7c:f0:
+ 6b:68:1a:9e:6a:0c:8f:e6:dc:3d:83:58:2a:cc:77:
+ ac:19:73:6f:5a:f3:6e:24:ac:cd:1a:dc:1d:0b:4c:
+ 44:f5:6d:8b:0a:17:3d:86:f9:e8:fe:e6:60:e5:9f:
+ 40:6a:e5:94:e8:9a:56:17:17:1c:ab:c1:8c:37:40:
+ 2b:55:bf:2c:5e:dc:8d:ca:25:7f:8a:5f:ee:fb:16:
+ 86:eb:e0:08:d3:26:e5:e3:70:c5:0c:6b:fb:1b:8f:
+ 6b:5c:f6:e2:4a:58:a5:35:01:ea:05:1b:3e:ce:84:
+ be:b5:3f:6d:18:16:4b:68:e5:79:4c:88:7d:b6:a5:
+ 65:a3:3a:c2:32:dc:ad:8f:8a:05:ee:f6:e9:7a:80:
+ da:12:a9:0f:5a:b5:d2:d3:31:ac:3e:d3:19:25:2d:
+ 28:de:79:6c:ce:fd:77:66:d5:e3:2f:a9:cb:f9:85:
+ 8c:20:bb:a2:86:23:f0:93:95:20:04:78:c7:c7:07:
+ a6:fe:f0:f4:45:bb:cf:78:2b:dd:ce:9c:08:a5:46:
+ 68:10:4c:d7:05:62:6c:86:5a:2d:7f:06:38:c2:4d:
+ bb:44:87:00:43:79:d2:8f:f3:6b:b2:f4:5c:1c:b9:
+ 68:01
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 98:BE:04:FF:80:D1:AB:95:39:AA:3D:F2:0E:67:7D:00:AD:A3:FD:C5
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR3/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64534-64540
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ IPv6:
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 59:02:31:4f:92:0b:01:2d:98:ab:45:b8:7b:a9:b8:60:88:a1:
+ 8c:e3:84:e7:0b:20:a7:9c:e1:a2:7c:aa:9f:e3:a2:f2:5c:0e:
+ 55:bd:a7:1d:96:e1:fb:0c:16:7d:85:07:42:95:bf:e9:14:c5:
+ 6f:e5:91:84:88:b7:e7:3b:16:7a:77:08:8e:68:ff:da:44:65:
+ 04:65:3e:7e:18:5f:ed:56:62:57:fb:b6:da:b4:08:c9:cf:17:
+ bb:83:34:7a:49:f6:22:02:a4:49:d7:55:c5:d1:22:df:92:f3:
+ 65:5d:2c:de:ac:0e:f3:9c:18:36:f9:b7:8a:5f:df:d6:5d:84:
+ 31:7f:76:95:e2:59:53:4a:40:8e:99:6d:ae:3b:9d:86:ce:2a:
+ 75:1d:49:7c:26:3e:90:2b:34:87:c9:4a:7a:aa:70:59:68:d3:
+ 81:7f:1b:ee:fc:ea:72:65:60:c9:9e:94:50:8d:62:93:d5:7e:
+ 52:68:06:c9:d8:e5:bf:a0:db:cd:c2:90:93:0e:9f:1a:66:2f:
+ 14:16:4a:57:4a:15:bb:0e:d4:73:96:91:1b:a6:00:5f:77:13:
+ 03:a7:93:65:9a:df:03:42:a8:7c:4e:dc:89:32:ae:80:94:f7:
+ c3:d7:ed:33:7c:45:ea:34:4d:ea:fe:bd:31:50:c3:81:3f:12:
+ c8:1f:f8:63
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/1D.pem b/scripts/resource-cert-samples/RIR/1D.pem
new file mode 100644
index 00000000..ef7eb793
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/1D.pem
@@ -0,0 +1,95 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 29 (0x1d)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:07:08 2007 GMT
+ Not After : Aug 9 01:07:08 2008 GMT
+ Subject: CN=TEST ENTITY LIR2
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:f1:18:b6:79:0b:35:c5:83:64:48:83:31:03:9e:
+ e7:72:28:65:b1:ac:61:e1:77:2e:c0:4d:f0:b1:1c:
+ 61:d8:cc:5a:2d:c7:0b:9b:78:7a:3e:fd:37:ad:fa:
+ b0:73:0b:9c:fc:bb:6f:60:ea:38:ef:ae:d1:27:b8:
+ 81:59:0f:b3:e7:d0:67:b2:a2:f5:4f:e2:04:c6:cc:
+ 13:9f:33:28:35:96:7a:db:ce:ac:9d:d3:64:3d:b8:
+ 44:bc:cb:43:22:92:d6:3c:2e:bf:97:6e:39:6a:6e:
+ 68:93:5d:1c:a8:58:b7:a3:7a:26:44:fe:fe:30:ad:
+ e2:05:89:4c:c9:ef:2c:e0:4e:31:69:3f:dd:91:1c:
+ f0:b0:25:4c:3e:84:8a:ea:5e:03:b3:a8:cd:90:1a:
+ 1e:c8:e0:af:fe:11:ed:21:06:bd:3c:5e:08:a1:93:
+ e2:41:43:43:38:d3:21:b3:4c:fa:85:8b:43:57:60:
+ 5d:bb:a0:78:e5:33:47:a8:33:76:be:df:6e:63:61:
+ e3:31:8b:5d:8e:0c:c7:f5:c8:91:0c:be:57:c7:f2:
+ bc:be:0b:ba:7a:1f:f6:19:f1:eb:00:74:c1:12:c2:
+ dc:2b:2e:8d:f0:0a:ff:7f:e8:60:08:90:ba:51:fc:
+ d0:90:11:37:f3:9e:44:b6:64:43:69:5d:61:d3:e1:
+ 8d:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 03:7A:DF:0C:DF:DC:93:3D:F7:A5:CC:27:7B:DC:22:F6:E9:55:97:F0
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR2/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 0c:51:a0:58:12:e3:9e:03:0a:45:a2:db:eb:7b:98:b1:32:a8:
+ 87:e2:0a:79:4d:a6:56:83:7c:a3:14:78:98:ba:4d:8f:e4:59:
+ 06:15:f6:3a:01:6c:5c:21:a5:1e:97:09:42:24:7c:11:a0:4e:
+ f3:9a:de:50:c2:88:2b:1b:59:6c:12:0e:26:10:40:21:16:e1:
+ 60:96:bb:4d:53:0f:79:47:28:e0:10:cf:61:f3:82:5f:3a:7f:
+ ec:e2:3f:f5:60:70:d8:ca:05:ce:cb:f9:49:f8:15:be:0e:18:
+ e2:f4:3c:f3:1f:5a:31:77:9d:e4:69:17:4a:4f:4d:d6:eb:58:
+ d6:c7:28:87:15:7c:d0:51:69:59:02:a9:e7:14:a8:d6:5f:6e:
+ 25:b3:2c:8b:ed:58:f7:84:40:ae:95:4d:67:f5:86:d8:2e:9b:
+ 1f:29:3a:38:a9:7b:8c:6f:62:df:31:a6:a3:17:ec:19:94:93:
+ c9:17:36:9b:51:6c:79:c7:4a:4a:08:25:ef:db:13:d8:de:95:
+ 80:87:28:aa:ae:3d:fb:d8:80:54:cb:31:f3:40:49:28:8f:08:
+ c9:dc:c3:6d:1d:de:16:57:11:f5:56:89:1d:5a:b9:54:d1:f0:
+ c4:48:c6:39:05:53:26:15:be:1a:dc:6c:70:6c:f9:71:59:d8:
+ 2f:f4:b4:81
+-----BEGIN CERTIFICATE-----
+MIID8DCCAtigAwIBAgIBHTANBgkqhkiG9w0BAQsFADAaMRgwFgYDVQQDEw9URVNU
+IEVOVElUWSBSSVIwHhcNMDcwODEwMDEwNzA4WhcNMDgwODA5MDEwNzA4WjAbMRkw
+FwYDVQQDExBURVNUIEVOVElUWSBMSVIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEA8Ri2eQs1xYNkSIMxA57ncihlsaxh4XcuwE3wsRxh2MxaLccLm3h6
+Pv03rfqwcwuc/LtvYOo4767RJ7iBWQ+z59BnsqL1T+IExswTnzMoNZZ6286sndNk
+PbhEvMtDIpLWPC6/l245am5ok10cqFi3o3omRP7+MK3iBYlMye8s4E4xaT/dkRzw
+sCVMPoSK6l4Ds6jNkBoeyOCv/hHtIQa9PF4IoZPiQUNDONMhs0z6hYtDV2Bdu6B4
+5TNHqDN2vt9uY2HjMYtdjgzH9ciRDL5Xx/K8vgu6eh/2GfHrAHTBEsLcKy6N8Ar/
+f+hgCJC6UfzQkBE3855EtmRDaV1h0+GNdwIDAQABo4IBPjCCATowDwYDVR0TAQH/
+BAUwAwEB/zAdBgNVHQ4EFgQUA3rfDN/ckz33pcwne9wi9ulVl/AwDgYDVR0PAQH/
+BAQDAgEGMEEGCCsGAQUFBwELBDUwMzAxBggrBgEFBQcwBYYlcnN5bmM6Ly93b21i
+YXRzLXItdXMuaGFjdHJuLm5ldC9MSVIyLzBDBggrBgEFBQcBAQQ3MDUwMwYIKwYB
+BQUHMAKGJ3JzeW5jOi8vd29tYmF0cy1yLXVzLmhhY3Rybi5uZXQvUklSLmNlcjAa
+BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA/CAwVAYIKwYBBQUHAQcBAf8ERTBDMEEE
+AgACMDswJgMRAiABDbgAAAAAAAAAAAAAAEQDEQAgAQ24AAAAAAAAAAAAAAEAAxEA
+IAENuAAAAAAAAAAQAAAARDANBgkqhkiG9w0BAQsFAAOCAQEADFGgWBLjngMKRaLb
+63uYsTKoh+IKeU2mVoN8oxR4mLpNj+RZBhX2OgFsXCGlHpcJQiR8EaBO85reUMKI
+KxtZbBIOJhBAIRbhYJa7TVMPeUco4BDPYfOCXzp/7OI/9WBw2MoFzsv5SfgVvg4Y
+4vQ88x9aMXed5GkXSk9N1utY1scohxV80FFpWQKp5xSo1l9uJbMsi+1Y94RArpVN
+Z/WG2C6bHyk6OKl7jG9i3zGmoxfsGZSTyRc2m1FsecdKSggl79sT2N6VgIcoqq49
++9iAVMsx80BJKI8IydzDbR3eFlcR9VaJHVq5VNHwxEjGOQVTJhW+GtxscGz5cVnY
+L/S0gQ==
+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/1E.pem b/scripts/resource-cert-samples/RIR/1E.pem
new file mode 100644
index 00000000..93d846b8
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/1E.pem
@@ -0,0 +1,94 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 30 (0x1e)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:07:08 2007 GMT
+ Not After : Aug 9 01:07:08 2008 GMT
+ Subject: CN=TEST ENTITY LIR1
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:af:5d:1c:f9:d9:bb:d5:01:e1:5b:36:cc:51:f6:
+ fd:86:57:60:aa:9e:c7:ec:4e:05:af:fb:51:5c:7a:
+ c2:58:c4:a8:57:ae:14:62:e9:bc:b6:72:7d:cf:49:
+ c8:4a:40:82:4a:f4:3e:30:b5:94:25:9e:6c:78:81:
+ 57:43:d6:85:02:8d:d1:9c:b5:d7:34:2f:e2:a9:7d:
+ 18:27:b5:47:9a:42:16:c8:90:7f:96:2c:dd:b8:98:
+ 17:1f:77:62:4a:08:00:2d:e0:73:0c:39:37:ba:0f:
+ a7:59:59:4c:7c:cd:e2:5c:d7:98:36:10:6c:88:3e:
+ 45:99:a6:88:2f:f6:7f:31:49:ba:42:2b:13:79:c2:
+ b2:f1:09:d9:ad:37:a4:41:b6:6d:46:a1:18:05:a0:
+ 53:07:8e:e0:98:b2:d1:fd:67:68:77:64:d5:f3:fe:
+ 1d:22:36:9e:26:5a:1a:aa:18:94:c3:2c:7e:9a:af:
+ be:2c:9d:5e:75:2c:49:d6:37:2b:06:1f:cc:63:97:
+ 7e:ee:2c:5f:67:af:4d:62:3e:7a:1f:0c:e1:1e:02:
+ f2:d2:06:75:ae:3f:11:bc:8e:0f:13:64:38:14:36:
+ 1d:5d:02:ec:af:65:d5:b9:68:f4:22:66:2b:ef:47:
+ 5b:ad:3b:f2:af:b6:71:0c:94:56:8a:7c:01:36:f0:
+ 3a:3f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 8A:94:17:F9:53:F2:5B:94:54:56:DF:76:51:13:29:F6:71:19:A8:B3
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR1/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 1e:aa:13:82:d7:ac:b4:cf:87:8f:61:5e:f4:b5:0a:2c:36:5f:
+ 6c:ae:a2:65:46:06:b2:f7:86:f5:81:a7:15:51:87:a8:f1:9d:
+ b8:37:e8:5a:27:9a:27:a6:c4:fc:eb:64:03:b1:b9:ee:93:e4:
+ 6f:b6:b8:d7:40:47:20:91:a2:ba:50:f0:c4:98:a6:96:14:3f:
+ 79:1a:8c:de:3e:b2:57:6a:7a:83:22:9d:8c:05:4e:22:46:4a:
+ de:98:7f:9d:78:9e:e4:43:10:8c:29:4f:9f:d0:51:a4:70:e4:
+ ed:ef:b6:72:99:08:8c:5d:c3:4e:60:82:66:05:ae:a0:b8:31:
+ 4f:77:33:c9:57:9a:7d:bc:d2:8c:1f:60:10:58:8d:db:0a:c0:
+ 96:f4:29:a7:e1:54:d5:fa:a7:50:93:fa:18:3d:e3:98:14:c4:
+ 9d:d5:61:af:31:79:f6:af:eb:07:ae:ce:58:e6:62:ed:a0:2a:
+ c3:4a:93:8b:03:06:6a:e8:2a:ef:c9:82:c7:ae:49:25:65:94:
+ 85:e6:94:d6:6f:71:17:c7:e6:ab:50:60:a3:c8:7e:e6:51:05:
+ de:e8:bf:d5:9d:90:9d:b6:a7:eb:97:4d:47:99:b0:d9:de:ae:
+ d9:de:fb:36:3c:c2:7b:f5:25:ed:72:1a:c4:6b:eb:7c:ad:37:
+ 34:04:c5:cb
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/1F.pem b/scripts/resource-cert-samples/RIR/1F.pem
new file mode 100644
index 00000000..9dd25967
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/1F.pem
@@ -0,0 +1,76 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 31 (0x1f)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:13:39 2007 GMT
+ Not After : Aug 9 01:13:39 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 4f:b2:00:11:14:e9:a9:dc:f3:20:a2:78:94:b7:c5:dd:0c:ff:
+ fc:e1:68:13:24:a6:e1:f5:32:47:b2:3a:d4:4c:90:e2:cd:64:
+ ef:6d:7d:5c:35:01:96:8f:68:69:dd:be:ff:fa:a2:33:a4:23:
+ 28:e5:8d:2e:f6:05:fd:54:85:84:86:2f:01:ba:71:cd:b0:ea:
+ d5:ab:06:8a:55:15:1e:1e:55:e5:c2:f5:93:0d:43:fc:c8:2d:
+ f6:d7:57:8b:d9:71:9a:e6:8b:5a:ce:ea:5d:3c:e8:ae:66:7d:
+ 69:3f:6d:1e:bd:5d:f4:7b:69:90:bb:72:4a:f3:7c:8e:08:33:
+ 75:c9:48:53:20:16:ca:02:71:0f:6d:e7:bd:14:73:60:42:69:
+ 8f:2e:b9:f5:fb:39:e5:5d:51:94:7b:3f:d3:6d:25:64:f8:0c:
+ 68:e6:cd:d5:e1:10:da:d5:24:00:b0:3c:97:b1:69:e5:67:0b:
+ 05:1b:46:86:d1:d7:2f:17:0e:17:98:bb:54:9f:4e:60:40:0f:
+ 7a:77:9e:f0:33:d4:0a:8e:56:f9:57:30:a0:cf:b1:86:41:35:
+ dd:d3:f3:b3:35:56:4b:e1:83:ba:a0:9d:40:8d:d0:70:dc:ff:
+ 60:9d:73:15:84:c5:8a:20:2b:28:02:16:5a:dd:b0:19:ee:cb:
+ bd:ea:1f:9b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/20.pem b/scripts/resource-cert-samples/RIR/20.pem
new file mode 100644
index 00000000..fe5d4fc2
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/20.pem
@@ -0,0 +1,76 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 32 (0x20)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:13:39 2007 GMT
+ Not After : Aug 9 01:13:39 2008 GMT
+ Subject: CN=TEST ENTITY LIR3
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:a3:21:57:61:64:af:11:18:d4:cb:de:a6:dc:ad:
+ d9:2c:0f:0f:58:9f:7e:c8:85:55:11:26:4c:7c:f0:
+ 6b:68:1a:9e:6a:0c:8f:e6:dc:3d:83:58:2a:cc:77:
+ ac:19:73:6f:5a:f3:6e:24:ac:cd:1a:dc:1d:0b:4c:
+ 44:f5:6d:8b:0a:17:3d:86:f9:e8:fe:e6:60:e5:9f:
+ 40:6a:e5:94:e8:9a:56:17:17:1c:ab:c1:8c:37:40:
+ 2b:55:bf:2c:5e:dc:8d:ca:25:7f:8a:5f:ee:fb:16:
+ 86:eb:e0:08:d3:26:e5:e3:70:c5:0c:6b:fb:1b:8f:
+ 6b:5c:f6:e2:4a:58:a5:35:01:ea:05:1b:3e:ce:84:
+ be:b5:3f:6d:18:16:4b:68:e5:79:4c:88:7d:b6:a5:
+ 65:a3:3a:c2:32:dc:ad:8f:8a:05:ee:f6:e9:7a:80:
+ da:12:a9:0f:5a:b5:d2:d3:31:ac:3e:d3:19:25:2d:
+ 28:de:79:6c:ce:fd:77:66:d5:e3:2f:a9:cb:f9:85:
+ 8c:20:bb:a2:86:23:f0:93:95:20:04:78:c7:c7:07:
+ a6:fe:f0:f4:45:bb:cf:78:2b:dd:ce:9c:08:a5:46:
+ 68:10:4c:d7:05:62:6c:86:5a:2d:7f:06:38:c2:4d:
+ bb:44:87:00:43:79:d2:8f:f3:6b:b2:f4:5c:1c:b9:
+ 68:01
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR3/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 21:11:08:a5:7c:20:fa:f3:da:ce:31:cd:f4:f4:e2:dc:46:9c:
+ 7c:3f:b0:02:04:9c:f8:2e:63:c9:d6:2d:8c:01:44:ea:99:5e:
+ 50:e2:33:f0:20:0b:df:3d:a5:59:2d:16:d7:e7:8f:3b:f0:84:
+ 57:d0:23:a3:52:7c:27:34:af:62:b3:97:aa:c4:21:93:8d:34:
+ 8d:56:9b:8e:b5:b7:da:24:46:e8:2f:e7:b5:f3:92:2b:46:21:
+ b2:b2:1f:7a:c2:be:f4:af:5d:1b:18:bb:39:3c:ee:e3:18:25:
+ 22:b4:fd:72:0c:4c:5a:e2:99:75:28:9b:9c:81:a1:da:64:83:
+ cf:26:22:99:d8:77:b4:6a:80:84:5d:cc:cb:62:5c:f5:00:dc:
+ 72:14:33:20:90:06:20:01:ed:3a:08:28:a4:7c:e4:51:00:33:
+ 8b:09:8a:bc:8a:fa:f0:81:a9:ae:69:a6:e6:df:4c:4d:08:47:
+ cf:46:6f:03:eb:7e:85:86:34:9a:0d:18:51:24:39:cf:47:23:
+ 25:b3:6e:27:3f:f9:59:7e:da:e0:bf:08:e5:8f:55:f0:cf:e4:
+ c5:c1:f4:a9:91:ae:09:3e:41:1b:f0:76:2d:0f:a8:4d:05:8d:
+ 3c:3e:81:81:ec:6c:62:2d:3a:63:81:12:b2:36:23:ed:25:8c:
+ b5:f4:3d:e1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/21.pem b/scripts/resource-cert-samples/RIR/21.pem
new file mode 100644
index 00000000..0465b7a4
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/21.pem
@@ -0,0 +1,76 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 33 (0x21)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:13:39 2007 GMT
+ Not After : Aug 9 01:13:39 2008 GMT
+ Subject: CN=TEST ENTITY LIR2
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:f1:18:b6:79:0b:35:c5:83:64:48:83:31:03:9e:
+ e7:72:28:65:b1:ac:61:e1:77:2e:c0:4d:f0:b1:1c:
+ 61:d8:cc:5a:2d:c7:0b:9b:78:7a:3e:fd:37:ad:fa:
+ b0:73:0b:9c:fc:bb:6f:60:ea:38:ef:ae:d1:27:b8:
+ 81:59:0f:b3:e7:d0:67:b2:a2:f5:4f:e2:04:c6:cc:
+ 13:9f:33:28:35:96:7a:db:ce:ac:9d:d3:64:3d:b8:
+ 44:bc:cb:43:22:92:d6:3c:2e:bf:97:6e:39:6a:6e:
+ 68:93:5d:1c:a8:58:b7:a3:7a:26:44:fe:fe:30:ad:
+ e2:05:89:4c:c9:ef:2c:e0:4e:31:69:3f:dd:91:1c:
+ f0:b0:25:4c:3e:84:8a:ea:5e:03:b3:a8:cd:90:1a:
+ 1e:c8:e0:af:fe:11:ed:21:06:bd:3c:5e:08:a1:93:
+ e2:41:43:43:38:d3:21:b3:4c:fa:85:8b:43:57:60:
+ 5d:bb:a0:78:e5:33:47:a8:33:76:be:df:6e:63:61:
+ e3:31:8b:5d:8e:0c:c7:f5:c8:91:0c:be:57:c7:f2:
+ bc:be:0b:ba:7a:1f:f6:19:f1:eb:00:74:c1:12:c2:
+ dc:2b:2e:8d:f0:0a:ff:7f:e8:60:08:90:ba:51:fc:
+ d0:90:11:37:f3:9e:44:b6:64:43:69:5d:61:d3:e1:
+ 8d:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR2/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 69:44:b7:68:fa:e8:4a:16:7e:93:63:18:39:f4:3b:12:19:62:
+ 6b:9a:b8:2e:cf:b4:26:a7:fc:e1:01:9a:c9:33:00:34:47:76:
+ 24:1d:c3:09:65:fb:d4:68:31:47:ca:e8:07:20:6f:af:fe:ad:
+ 28:19:d5:12:31:d7:dd:60:3f:35:6d:fd:02:7a:a6:99:42:d5:
+ f4:c7:42:34:8f:53:20:a2:fb:8c:f6:87:97:c9:81:95:09:02:
+ a5:60:ad:0c:2d:01:15:8a:92:16:34:d6:5b:2e:ac:95:4f:93:
+ 04:27:ac:47:d8:f4:48:53:36:bc:2a:77:4b:16:f9:21:be:a4:
+ 85:65:62:9d:75:68:dd:95:fb:0f:74:2d:e0:be:4a:8b:86:88:
+ 03:fa:e4:58:a9:46:51:26:b4:d7:5c:a8:cf:6a:29:86:be:68:
+ 66:46:e0:92:b2:18:9a:14:e9:c0:02:51:68:31:9c:17:75:ac:
+ 86:b1:e1:41:d7:22:4d:9c:ef:55:4d:2a:85:0b:62:e6:b2:5c:
+ 04:8e:09:21:0a:a7:f6:cd:1e:f3:00:20:71:01:55:cf:7d:a0:
+ 03:85:82:49:7e:7a:e0:ba:a8:c8:e7:43:a7:29:08:f7:b6:ad:
+ fe:f7:4a:69:a5:03:47:87:c5:87:bd:f1:86:6e:ea:5b:34:51:
+ fe:00:a9:a7
+-----BEGIN CERTIFICATE-----
+MIIDFjCCAf6gAwIBAgIBITANBgkqhkiG9w0BAQsFADAaMRgwFgYDVQQDEw9URVNU
+IEVOVElUWSBSSVIwHhcNMDcwODEwMDExMzM5WhcNMDgwODA5MDExMzM5WjAbMRkw
+FwYDVQQDExBURVNUIEVOVElUWSBMSVIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEA8Ri2eQs1xYNkSIMxA57ncihlsaxh4XcuwE3wsRxh2MxaLccLm3h6
+Pv03rfqwcwuc/LtvYOo4767RJ7iBWQ+z59BnsqL1T+IExswTnzMoNZZ6286sndNk
+PbhEvMtDIpLWPC6/l245am5ok10cqFi3o3omRP7+MK3iBYlMye8s4E4xaT/dkRzw
+sCVMPoSK6l4Ds6jNkBoeyOCv/hHtIQa9PF4IoZPiQUNDONMhs0z6hYtDV2Bdu6B4
+5TNHqDN2vt9uY2HjMYtdjgzH9ciRDL5Xx/K8vgu6eh/2GfHrAHTBEsLcKy6N8Ar/
+f+hgCJC6UfzQkBE3855EtmRDaV1h0+GNdwIDAQABo2YwZDAPBgNVHRMBAf8EBTAD
+AQH/MA4GA1UdDwEB/wQEAwIBBjBBBggrBgEFBQcBCwQ1MDMwMQYIKwYBBQUHMAWG
+JXJzeW5jOi8vd29tYmF0cy1yLXVzLmhhY3Rybi5uZXQvTElSMi8wDQYJKoZIhvcN
+AQELBQADggEBAGlEt2j66EoWfpNjGDn0OxIZYmuauC7PtCan/OEBmskzADRHdiQd
+wwll+9RoMUfK6Acgb6/+rSgZ1RIx191gPzVt/QJ6pplC1fTHQjSPUyCi+4z2h5fJ
+gZUJAqVgrQwtARWKkhY01lsurJVPkwQnrEfY9EhTNrwqd0sW+SG+pIVlYp11aN2V
++w90LeC+SouGiAP65FipRlEmtNdcqM9qKYa+aGZG4JKyGJoU6cACUWgxnBd1rIax
+4UHXIk2c71VNKoULYuayXASOCSEKp/bNHvMAIHEBVc99oAOFgkl+euC6qMjnQ6cp
+CPe2rf73SmmlA0eHxYe98YZu6ls0Uf4Aqac=
+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/22.pem b/scripts/resource-cert-samples/RIR/22.pem
new file mode 100644
index 00000000..f46564dd
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/22.pem
@@ -0,0 +1,76 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 34 (0x22)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:13:39 2007 GMT
+ Not After : Aug 9 01:13:39 2008 GMT
+ Subject: CN=TEST ENTITY LIR1
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:af:5d:1c:f9:d9:bb:d5:01:e1:5b:36:cc:51:f6:
+ fd:86:57:60:aa:9e:c7:ec:4e:05:af:fb:51:5c:7a:
+ c2:58:c4:a8:57:ae:14:62:e9:bc:b6:72:7d:cf:49:
+ c8:4a:40:82:4a:f4:3e:30:b5:94:25:9e:6c:78:81:
+ 57:43:d6:85:02:8d:d1:9c:b5:d7:34:2f:e2:a9:7d:
+ 18:27:b5:47:9a:42:16:c8:90:7f:96:2c:dd:b8:98:
+ 17:1f:77:62:4a:08:00:2d:e0:73:0c:39:37:ba:0f:
+ a7:59:59:4c:7c:cd:e2:5c:d7:98:36:10:6c:88:3e:
+ 45:99:a6:88:2f:f6:7f:31:49:ba:42:2b:13:79:c2:
+ b2:f1:09:d9:ad:37:a4:41:b6:6d:46:a1:18:05:a0:
+ 53:07:8e:e0:98:b2:d1:fd:67:68:77:64:d5:f3:fe:
+ 1d:22:36:9e:26:5a:1a:aa:18:94:c3:2c:7e:9a:af:
+ be:2c:9d:5e:75:2c:49:d6:37:2b:06:1f:cc:63:97:
+ 7e:ee:2c:5f:67:af:4d:62:3e:7a:1f:0c:e1:1e:02:
+ f2:d2:06:75:ae:3f:11:bc:8e:0f:13:64:38:14:36:
+ 1d:5d:02:ec:af:65:d5:b9:68:f4:22:66:2b:ef:47:
+ 5b:ad:3b:f2:af:b6:71:0c:94:56:8a:7c:01:36:f0:
+ 3a:3f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR1/
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 64:a2:b2:a2:9e:50:69:0e:9f:15:f1:85:10:e8:5e:bf:22:c0:
+ 2e:4c:58:1c:43:c8:ba:7d:3d:67:8c:a6:94:99:b0:fc:ec:2c:
+ e2:0c:69:a7:d6:9e:35:b7:06:bd:d0:30:9a:ba:c9:1c:49:96:
+ ee:06:68:45:e3:ed:48:4d:7a:c0:68:4f:57:52:e6:e7:f1:1c:
+ 14:58:d5:a2:da:d0:19:c5:e9:c4:63:4f:bc:3b:10:8b:2e:fe:
+ b7:95:8a:f4:7e:00:ac:f8:5b:dc:4e:70:81:d7:9e:d8:4b:e8:
+ 89:03:05:3e:11:dc:8f:7a:45:a3:14:78:5f:9d:dc:fe:7f:fd:
+ 4a:b0:bb:33:e0:7c:46:f4:e3:df:f7:2b:9e:64:44:ba:39:b0:
+ d4:72:a3:cf:35:55:ae:04:29:ed:d8:23:22:b0:a3:16:d2:5d:
+ 69:b9:c6:5a:e5:53:42:71:2b:5e:37:e1:1e:26:42:ce:29:23:
+ 64:2e:51:fd:a9:e4:9b:20:65:b1:f1:c2:ce:14:56:10:68:2f:
+ fc:f3:eb:55:6d:d7:a0:0e:1a:0c:52:4a:81:47:e6:34:1f:9e:
+ 3a:c5:38:2e:e6:f2:43:bf:f8:e3:cb:cd:44:83:4f:7c:fb:69:
+ a9:41:96:d6:50:22:b7:3c:06:e0:09:ff:34:cb:41:f6:17:97:
+ 86:7d:f0:c5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/23.pem b/scripts/resource-cert-samples/RIR/23.pem
new file mode 100644
index 00000000..62954cf1
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/23.pem
@@ -0,0 +1,100 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 35 (0x23)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:15:09 2007 GMT
+ Not After : Aug 9 01:15:09 2008 GMT
+ Subject: CN=TEST ENTITY RIR
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ac:a7:26:c4:98:68:99:b6:f2:e7:c5:97:05:7e:
+ f9:d7:f2:ec:39:e6:2b:8e:c2:42:88:b9:8f:22:b6:
+ 3c:59:b0:0e:8a:1d:0e:f8:81:b1:c8:ff:4a:8a:1a:
+ 43:bc:78:91:3e:af:b2:b0:95:60:a9:3e:9d:c2:ff:
+ 99:8f:8f:b6:dc:d8:46:b7:86:35:a6:f6:42:05:c2:
+ c5:9b:84:15:e2:58:0f:70:9c:bc:53:d7:28:76:f8:
+ f2:14:79:22:bd:d6:8b:6c:0e:2b:02:e5:d8:f3:33:
+ fa:16:43:9b:80:87:f9:b2:45:ab:bd:7d:14:b2:24:
+ 2f:41:13:6f:45:c4:dc:f9:4d:7f:d8:d3:e1:aa:5c:
+ 52:9d:c9:7a:38:b7:b0:43:bd:b7:6a:37:43:ec:e7:
+ 34:c4:3b:4c:ca:cc:7b:1f:91:ef:ab:d4:35:76:42:
+ 82:d4:f5:79:e0:12:3c:24:92:2e:dc:a2:5c:83:f0:
+ 71:8a:26:96:30:d4:b8:96:4d:00:2c:1a:f0:0f:79:
+ 52:c7:27:73:54:77:c1:86:f9:86:61:ce:e0:69:a7:
+ a8:3d:77:39:e7:24:ee:41:8d:52:19:3b:57:8c:84:
+ cc:9a:d5:05:7c:e6:83:2c:e3:13:6d:66:1b:87:20:
+ 82:47:e1:05:26:f0:3b:29:69:6d:bc:af:48:91:c4:
+ 40:f1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ FB:B8:A7:A3:36:48:0A:A0:9F:F0:2E:DC:8B:68:BC:B3:5C:45:25:D7
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/RIR/
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533-64540
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 6b:3e:b4:ef:05:b1:6c:d0:7f:e1:86:49:86:64:44:10:16:65:
+ d2:ae:52:cf:da:08:79:bd:08:a2:fc:3b:90:bf:ec:6a:a3:cc:
+ 78:51:cf:f9:c7:9a:65:5e:a9:11:b3:db:76:0a:2d:14:96:c5:
+ d0:21:22:f1:64:b3:2c:ea:2e:20:f1:52:32:8d:c9:9a:3c:eb:
+ d1:82:53:e9:57:c9:01:ed:4f:c7:0f:b5:1f:a7:8f:1a:9d:9b:
+ 42:b2:c8:fa:c0:e9:24:7c:ea:b3:26:55:54:6c:fb:fc:36:3d:
+ 42:84:e1:b1:40:62:d9:d8:59:fd:02:9d:c9:eb:69:54:47:1a:
+ d6:b8:0a:ee:27:0c:59:ea:a4:e7:73:a8:cd:47:14:e0:2e:68:
+ f3:46:79:a9:7c:d6:07:8c:06:26:d1:66:7a:a5:e8:56:f8:5e:
+ f8:37:49:0a:f1:52:5c:78:c0:92:90:81:05:a5:4a:a7:60:0f:
+ 4b:d3:62:14:70:be:5f:90:5b:54:9f:79:d9:a8:c9:50:bc:ab:
+ ed:17:e6:a2:e0:25:b8:74:56:8c:12:66:19:41:fc:ed:eb:37:
+ 21:e5:3f:56:d0:d5:ee:f2:e6:d4:53:4e:ae:78:d4:50:fd:dd:
+ 03:6a:e3:29:72:5a:40:d5:3c:90:8e:d2:77:d2:28:9e:cb:77:
+ 85:8c:c3:e1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/24.pem b/scripts/resource-cert-samples/RIR/24.pem
new file mode 100644
index 00000000..419b192d
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/24.pem
@@ -0,0 +1,98 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 36 (0x24)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:15:10 2007 GMT
+ Not After : Aug 9 01:15:10 2008 GMT
+ Subject: CN=TEST ENTITY LIR3
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:a3:21:57:61:64:af:11:18:d4:cb:de:a6:dc:ad:
+ d9:2c:0f:0f:58:9f:7e:c8:85:55:11:26:4c:7c:f0:
+ 6b:68:1a:9e:6a:0c:8f:e6:dc:3d:83:58:2a:cc:77:
+ ac:19:73:6f:5a:f3:6e:24:ac:cd:1a:dc:1d:0b:4c:
+ 44:f5:6d:8b:0a:17:3d:86:f9:e8:fe:e6:60:e5:9f:
+ 40:6a:e5:94:e8:9a:56:17:17:1c:ab:c1:8c:37:40:
+ 2b:55:bf:2c:5e:dc:8d:ca:25:7f:8a:5f:ee:fb:16:
+ 86:eb:e0:08:d3:26:e5:e3:70:c5:0c:6b:fb:1b:8f:
+ 6b:5c:f6:e2:4a:58:a5:35:01:ea:05:1b:3e:ce:84:
+ be:b5:3f:6d:18:16:4b:68:e5:79:4c:88:7d:b6:a5:
+ 65:a3:3a:c2:32:dc:ad:8f:8a:05:ee:f6:e9:7a:80:
+ da:12:a9:0f:5a:b5:d2:d3:31:ac:3e:d3:19:25:2d:
+ 28:de:79:6c:ce:fd:77:66:d5:e3:2f:a9:cb:f9:85:
+ 8c:20:bb:a2:86:23:f0:93:95:20:04:78:c7:c7:07:
+ a6:fe:f0:f4:45:bb:cf:78:2b:dd:ce:9c:08:a5:46:
+ 68:10:4c:d7:05:62:6c:86:5a:2d:7f:06:38:c2:4d:
+ bb:44:87:00:43:79:d2:8f:f3:6b:b2:f4:5c:1c:b9:
+ 68:01
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 98:BE:04:FF:80:D1:AB:95:39:AA:3D:F2:0E:67:7D:00:AD:A3:FD:C5
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR3/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64534-64540
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 10.0.0.0/24
+ 10.3.0.0/24
+ IPv6:
+ 2001:db8:0:0:0:0:a00::/120
+ 2001:db8:0:0:0:0:a03::/120
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 2a:bc:5b:b8:bc:0a:4f:52:b5:d5:01:bd:97:c3:79:df:8f:fd:
+ 7b:d7:0f:fd:fc:0c:8c:3f:69:b0:24:c0:b0:65:63:bf:ca:62:
+ 41:29:04:0a:52:73:b3:e1:c8:18:89:77:ba:b8:7c:6a:b7:19:
+ d7:b7:93:fa:dc:62:78:f9:bd:67:45:be:cd:97:bc:b7:f0:47:
+ 95:9b:97:92:70:ae:9c:58:04:49:d7:fa:af:2e:9e:d1:57:22:
+ 5b:10:c3:38:68:94:bf:0f:a8:a6:f4:1f:06:59:49:57:30:11:
+ 77:66:2a:f4:64:65:13:40:6b:e4:a9:6b:4d:75:4a:11:53:ab:
+ 28:44:67:b5:be:45:48:47:bf:67:61:4f:83:63:bf:33:3a:68:
+ 88:4e:0e:3a:60:79:86:52:65:a0:43:c6:0a:b8:ce:bc:37:eb:
+ 3c:7e:ed:11:f7:e6:42:c0:64:52:70:b3:5c:4c:dc:ed:49:96:
+ 64:2d:a6:19:27:87:11:ed:2d:10:96:c1:7f:ae:2d:a7:98:31:
+ 70:9b:35:1d:87:b9:ec:33:0a:f3:c3:d4:47:b6:7b:ff:7a:9f:
+ 04:a8:b6:bd:9d:10:12:e1:24:5a:44:5c:5b:68:c4:9a:09:64:
+ 27:21:aa:f1:d4:05:42:37:41:4f:8d:f9:0a:e2:c6:3b:94:76:
+ d9:d7:97:66
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/25.pem b/scripts/resource-cert-samples/RIR/25.pem
new file mode 100644
index 00000000..06ca26ad
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/25.pem
@@ -0,0 +1,95 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 37 (0x25)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:15:10 2007 GMT
+ Not After : Aug 9 01:15:10 2008 GMT
+ Subject: CN=TEST ENTITY LIR2
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:f1:18:b6:79:0b:35:c5:83:64:48:83:31:03:9e:
+ e7:72:28:65:b1:ac:61:e1:77:2e:c0:4d:f0:b1:1c:
+ 61:d8:cc:5a:2d:c7:0b:9b:78:7a:3e:fd:37:ad:fa:
+ b0:73:0b:9c:fc:bb:6f:60:ea:38:ef:ae:d1:27:b8:
+ 81:59:0f:b3:e7:d0:67:b2:a2:f5:4f:e2:04:c6:cc:
+ 13:9f:33:28:35:96:7a:db:ce:ac:9d:d3:64:3d:b8:
+ 44:bc:cb:43:22:92:d6:3c:2e:bf:97:6e:39:6a:6e:
+ 68:93:5d:1c:a8:58:b7:a3:7a:26:44:fe:fe:30:ad:
+ e2:05:89:4c:c9:ef:2c:e0:4e:31:69:3f:dd:91:1c:
+ f0:b0:25:4c:3e:84:8a:ea:5e:03:b3:a8:cd:90:1a:
+ 1e:c8:e0:af:fe:11:ed:21:06:bd:3c:5e:08:a1:93:
+ e2:41:43:43:38:d3:21:b3:4c:fa:85:8b:43:57:60:
+ 5d:bb:a0:78:e5:33:47:a8:33:76:be:df:6e:63:61:
+ e3:31:8b:5d:8e:0c:c7:f5:c8:91:0c:be:57:c7:f2:
+ bc:be:0b:ba:7a:1f:f6:19:f1:eb:00:74:c1:12:c2:
+ dc:2b:2e:8d:f0:0a:ff:7f:e8:60:08:90:ba:51:fc:
+ d0:90:11:37:f3:9e:44:b6:64:43:69:5d:61:d3:e1:
+ 8d:77
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 03:7A:DF:0C:DF:DC:93:3D:F7:A5:CC:27:7B:DC:22:F6:E9:55:97:F0
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR2/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64544
+
+ sbgp-ipAddrBlock: critical
+ IPv6:
+ 2001:db8:0:0:0:0:0:44-2001:db8:0:0:0:0:0:100
+ 2001:db8:0:0:0:10:0:44/128
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 13:0b:5a:02:21:8a:26:5a:fd:8a:66:9c:ff:7c:61:aa:43:72:
+ d0:ac:b7:9f:91:85:a9:3d:97:2b:4c:cb:5b:c1:69:0d:d2:32:
+ 28:2b:5e:e6:fe:2b:71:1f:62:72:b0:ea:fd:5b:86:b0:86:09:
+ e8:a1:53:86:5a:7c:58:3d:b1:74:6d:9a:40:08:b6:33:46:7d:
+ 03:43:13:03:d3:c3:13:8c:71:92:5d:c0:76:bb:e0:08:95:4b:
+ ca:ac:0a:c5:3d:d2:50:f5:96:8a:db:c2:ea:d0:f7:a2:00:fa:
+ 10:19:44:1e:5b:93:30:ff:0f:e9:af:81:a2:6d:c4:46:d7:af:
+ e9:a7:42:7c:ba:db:9f:b9:46:3d:f5:b2:19:81:2c:a7:c6:56:
+ d1:37:3e:50:f1:93:0a:8a:0a:81:42:c6:f1:7f:e0:63:fa:a1:
+ 7b:74:c6:ea:be:d7:37:5c:df:c1:8f:46:81:d8:a2:ce:d9:ee:
+ d9:03:71:8c:cb:1c:69:2a:29:8e:09:58:de:09:7b:93:ab:7b:
+ b6:56:a0:22:1c:31:e9:4d:13:19:ae:ab:f5:fa:19:5a:ad:54:
+ 46:d1:6b:b3:48:7c:ac:41:75:9b:87:10:bd:ab:fa:df:37:a8:
+ 29:37:65:8b:f4:90:81:85:0f:e8:e4:6e:df:84:ab:4f:99:ae:
+ 67:b9:8c:db
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/26.pem b/scripts/resource-cert-samples/RIR/26.pem
new file mode 100644
index 00000000..77486c96
--- /dev/null
+++ b/scripts/resource-cert-samples/RIR/26.pem
@@ -0,0 +1,94 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 38 (0x26)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=TEST ENTITY RIR
+ Validity
+ Not Before: Aug 10 01:15:10 2007 GMT
+ Not After : Aug 9 01:15:10 2008 GMT
+ Subject: CN=TEST ENTITY LIR1
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:af:5d:1c:f9:d9:bb:d5:01:e1:5b:36:cc:51:f6:
+ fd:86:57:60:aa:9e:c7:ec:4e:05:af:fb:51:5c:7a:
+ c2:58:c4:a8:57:ae:14:62:e9:bc:b6:72:7d:cf:49:
+ c8:4a:40:82:4a:f4:3e:30:b5:94:25:9e:6c:78:81:
+ 57:43:d6:85:02:8d:d1:9c:b5:d7:34:2f:e2:a9:7d:
+ 18:27:b5:47:9a:42:16:c8:90:7f:96:2c:dd:b8:98:
+ 17:1f:77:62:4a:08:00:2d:e0:73:0c:39:37:ba:0f:
+ a7:59:59:4c:7c:cd:e2:5c:d7:98:36:10:6c:88:3e:
+ 45:99:a6:88:2f:f6:7f:31:49:ba:42:2b:13:79:c2:
+ b2:f1:09:d9:ad:37:a4:41:b6:6d:46:a1:18:05:a0:
+ 53:07:8e:e0:98:b2:d1:fd:67:68:77:64:d5:f3:fe:
+ 1d:22:36:9e:26:5a:1a:aa:18:94:c3:2c:7e:9a:af:
+ be:2c:9d:5e:75:2c:49:d6:37:2b:06:1f:cc:63:97:
+ 7e:ee:2c:5f:67:af:4d:62:3e:7a:1f:0c:e1:1e:02:
+ f2:d2:06:75:ae:3f:11:bc:8e:0f:13:64:38:14:36:
+ 1d:5d:02:ec:af:65:d5:b9:68:f4:22:66:2b:ef:47:
+ 5b:ad:3b:f2:af:b6:71:0c:94:56:8a:7c:01:36:f0:
+ 3a:3f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+ 8A:94:17:F9:53:F2:5B:94:54:56:DF:76:51:13:29:F6:71:19:A8:B3
+ X509v3 Key Usage: critical
+ Certificate Sign, CRL Sign
+ Subject Information Access:
+ 1.3.6.1.5.5.7.48.5 - URI:rsync://wombats-r-us.hactrn.net/LIR1/
+
+ Authority Information Access:
+ CA Issuers - URI:rsync://wombats-r-us.hactrn.net/RIR.cer
+
+ sbgp-autonomousSysNum: critical
+ Autonomous System Numbers:
+ 64533
+
+ sbgp-ipAddrBlock: critical
+ IPv4:
+ 192.0.2.1-192.0.2.33
+ 192.0.2.44-192.0.2.100
+
+ Signature Algorithm: sha256WithRSAEncryption
+ 5d:4b:e6:c3:ad:38:f8:49:32:34:7c:6a:06:ed:d0:7a:cf:9a:
+ c8:a9:22:e5:46:93:37:f1:ec:4d:cd:26:43:f6:e8:ea:7a:5c:
+ 08:2a:7d:e3:37:e4:98:45:16:d2:a8:0b:eb:df:d4:a0:91:04:
+ 35:40:a8:c7:a5:c9:db:86:03:e3:e0:c4:17:6a:27:49:e6:4b:
+ 63:68:84:0c:57:5a:ac:43:79:4e:05:41:05:e5:fc:89:f7:f4:
+ 03:95:7c:b2:9e:d8:aa:a4:b5:35:26:58:96:e0:f6:70:08:f2:
+ de:5c:f5:0a:c9:6a:21:3a:e6:c7:19:af:e3:d9:b1:50:e2:bf:
+ db:28:df:3c:ae:e3:29:8f:22:b6:7a:a9:f6:f4:f3:7f:48:92:
+ da:f4:f5:19:4d:50:63:e0:87:f6:9e:fc:8f:5e:3a:d0:81:3b:
+ 8d:8a:7a:8a:0c:e9:24:a3:83:16:ca:24:4e:ef:80:7a:61:1e:
+ 96:ee:5f:8d:07:68:e5:c2:13:44:30:60:02:71:9b:ef:5b:df:
+ cc:a6:62:60:95:38:41:ff:93:e9:9f:c7:b8:60:34:93:db:55:
+ 2b:e7:27:91:d9:06:56:8e:a4:38:28:ae:dc:02:b4:fd:33:d0:
+ 17:4a:29:0f:86:19:ed:48:dc:5a:b4:e4:7a:8d:de:bc:10:c1:
+ 14:d5:b2:59
+-----BEGIN CERTIFICATE-----
+MIID1TCCAr2gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAaMRgwFgYDVQQDEw9URVNU
+IEVOVElUWSBSSVIwHhcNMDcwODEwMDExNTEwWhcNMDgwODA5MDExNTEwWjAbMRkw
+FwYDVQQDExBURVNUIEVOVElUWSBMSVIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
+MIIBCgKCAQEAr10c+dm71QHhWzbMUfb9hldgqp7H7E4Fr/tRXHrCWMSoV64UYum8
+tnJ9z0nISkCCSvQ+MLWUJZ5seIFXQ9aFAo3RnLXXNC/iqX0YJ7VHmkIWyJB/lizd
+uJgXH3diSggALeBzDDk3ug+nWVlMfM3iXNeYNhBsiD5FmaaIL/Z/MUm6QisTecKy
+8QnZrTekQbZtRqEYBaBTB47gmLLR/Wdod2TV8/4dIjaeJloaqhiUwyx+mq++LJ1e
+dSxJ1jcrBh/MY5d+7ixfZ69NYj56HwzhHgLy0gZ1rj8RvI4PE2Q4FDYdXQLsr2XV
+uWj0ImYr70dbrTvyr7ZxDJRWinwBNvA6PwIDAQABo4IBIzCCAR8wDwYDVR0TAQH/
+BAUwAwEB/zAdBgNVHQ4EFgQUipQX+VPyW5RUVt92URMp9nEZqLMwDgYDVR0PAQH/
+BAQDAgEGMEEGCCsGAQUFBwELBDUwMzAxBggrBgEFBQcwBYYlcnN5bmM6Ly93b21i
+YXRzLXItdXMuaGFjdHJuLm5ldC9MSVIxLzBDBggrBgEFBQcBAQQ3MDUwMwYIKwYB
+BQUHMAKGJ3JzeW5jOi8vd29tYmF0cy1yLXVzLmhhY3Rybi5uZXQvUklSLmNlcjAa
+BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA/BUwOQYIKwYBBQUHAQcBAf8EKjAoMCYE
+AgABMCAwDgMFAMAAAgEDBQHAAAIgMA4DBQLAAAIsAwUAwAACZDANBgkqhkiG9w0B
+AQsFAAOCAQEAXUvmw604+EkyNHxqBu3Qes+ayKki5UaTN/HsTc0mQ/bo6npcCCp9
+4zfkmEUW0qgL69/UoJEENUCox6XJ24YD4+DEF2onSeZLY2iEDFdarEN5TgVBBeX8
+iff0A5V8sp7YqqS1NSZYluD2cAjy3lz1CslqITrmxxmv49mxUOK/2yjfPK7jKY8i
+tnqp9vTzf0iS2vT1GU1QY+CH9p78j1460IE7jYp6igzpJKODFsokTu+AemEelu5f
+jQdo5cITRDBgAnGb71vfzKZiYJU4Qf+T6Z/HuGA0k9tVK+cnkdkGVo6kOCiu3AK0
+/TPQF0opD4YZ7UjcWrTkeo3evBDBFNWyWQ==
+-----END CERTIFICATE-----
diff --git a/scripts/resource-cert-samples/RIR/index b/scripts/resource-cert-samples/RIR/index
index 754becc3..c4154d2c 100644
--- a/scripts/resource-cert-samples/RIR/index
+++ b/scripts/resource-cert-samples/RIR/index
@@ -14,3 +14,25 @@ V 080731144816Z 0D unknown /CN=TEST ENTITY RIR
V 080731144818Z 0E unknown /CN=TEST ENTITY LIR3
V 080731144818Z 0F unknown /CN=TEST ENTITY LIR2
V 080731144818Z 10 unknown /CN=TEST ENTITY LIR1
+V 080808233059Z 11 unknown /CN=TEST ENTITY RIR
+V 080808233548Z 12 unknown /CN=TEST ENTITY RIR
+V 080809005817Z 13 unknown /CN=TEST ENTITY RIR
+V 080809005817Z 14 unknown /CN=TEST ENTITY LIR3
+V 080809005817Z 15 unknown /CN=TEST ENTITY LIR2
+V 080809005817Z 16 unknown /CN=TEST ENTITY LIR1
+V 080809010231Z 17 unknown /CN=TEST ENTITY RIR
+V 080809010231Z 18 unknown /CN=TEST ENTITY LIR3
+V 080809010231Z 19 unknown /CN=TEST ENTITY LIR2
+V 080809010231Z 1A unknown /CN=TEST ENTITY LIR1
+V 080809010708Z 1B unknown /CN=TEST ENTITY RIR
+V 080809010708Z 1C unknown /CN=TEST ENTITY LIR3
+V 080809010708Z 1D unknown /CN=TEST ENTITY LIR2
+V 080809010708Z 1E unknown /CN=TEST ENTITY LIR1
+V 080809011339Z 1F unknown /CN=TEST ENTITY RIR
+V 080809011339Z 20 unknown /CN=TEST ENTITY LIR3
+V 080809011339Z 21 unknown /CN=TEST ENTITY LIR2
+V 080809011339Z 22 unknown /CN=TEST ENTITY LIR1
+V 080809011509Z 23 unknown /CN=TEST ENTITY RIR
+V 080809011510Z 24 unknown /CN=TEST ENTITY LIR3
+V 080809011510Z 25 unknown /CN=TEST ENTITY LIR2
+V 080809011510Z 26 unknown /CN=TEST ENTITY LIR1
diff --git a/scripts/resource-cert-samples/RIR/index.old b/scripts/resource-cert-samples/RIR/index.old
index 6ed26aac..67898d16 100644
--- a/scripts/resource-cert-samples/RIR/index.old
+++ b/scripts/resource-cert-samples/RIR/index.old
@@ -13,3 +13,25 @@ V 080731140934Z 0C unknown /CN=TEST ENTITY LIR1
V 080731144816Z 0D unknown /CN=TEST ENTITY RIR
V 080731144818Z 0E unknown /CN=TEST ENTITY LIR3
V 080731144818Z 0F unknown /CN=TEST ENTITY LIR2
+V 080731144818Z 10 unknown /CN=TEST ENTITY LIR1
+V 080808233059Z 11 unknown /CN=TEST ENTITY RIR
+V 080808233548Z 12 unknown /CN=TEST ENTITY RIR
+V 080809005817Z 13 unknown /CN=TEST ENTITY RIR
+V 080809005817Z 14 unknown /CN=TEST ENTITY LIR3
+V 080809005817Z 15 unknown /CN=TEST ENTITY LIR2
+V 080809005817Z 16 unknown /CN=TEST ENTITY LIR1
+V 080809010231Z 17 unknown /CN=TEST ENTITY RIR
+V 080809010231Z 18 unknown /CN=TEST ENTITY LIR3
+V 080809010231Z 19 unknown /CN=TEST ENTITY LIR2
+V 080809010231Z 1A unknown /CN=TEST ENTITY LIR1
+V 080809010708Z 1B unknown /CN=TEST ENTITY RIR
+V 080809010708Z 1C unknown /CN=TEST ENTITY LIR3
+V 080809010708Z 1D unknown /CN=TEST ENTITY LIR2
+V 080809010708Z 1E unknown /CN=TEST ENTITY LIR1
+V 080809011339Z 1F unknown /CN=TEST ENTITY RIR
+V 080809011339Z 20 unknown /CN=TEST ENTITY LIR3
+V 080809011339Z 21 unknown /CN=TEST ENTITY LIR2
+V 080809011339Z 22 unknown /CN=TEST ENTITY LIR1
+V 080809011509Z 23 unknown /CN=TEST ENTITY RIR
+V 080809011510Z 24 unknown /CN=TEST ENTITY LIR3
+V 080809011510Z 25 unknown /CN=TEST ENTITY LIR2
diff --git a/scripts/resource-cert-samples/RIR/serial b/scripts/resource-cert-samples/RIR/serial
index b4de3947..f64f5d8d 100644
--- a/scripts/resource-cert-samples/RIR/serial
+++ b/scripts/resource-cert-samples/RIR/serial
@@ -1 +1 @@
-11
+27
diff --git a/scripts/resource-cert-samples/RIR/serial.old b/scripts/resource-cert-samples/RIR/serial.old
index f599e28b..6f4247a6 100644
--- a/scripts/resource-cert-samples/RIR/serial.old
+++ b/scripts/resource-cert-samples/RIR/serial.old
@@ -1 +1 @@
-10
+26