$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214909.roa File: AS214909.roa (raw, json) Hash identifier: cDzwC8a3y2szztOXgQtEXvvqkjhpDp1Olm0XKEtdVhc= Subject key identifier: C4:AD:27:39:89:FA:7F:5B:F8:0C:43:25:1E:B6:89:1F:31:CA:AB:02 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 75E886EAF8610B3440D3DCB5B699BA77EBDFCF65 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214909.roa Signing time: Fri 24 May 2024 11:09:14 +0000 ROA not before: Fri 24 May 2024 11:04:14 +0000 ROA not after: Fri 23 May 2025 11:09:14 +0000 asID: 214909 IP address blocks: 2a06:9f81:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Jul 2024 03:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e8:86:ea:f8:61:0b:34:40:d3:dc:b5:b6:99:ba:77:eb:df:cf:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 24 11:04:14 2024 GMT Not After : May 23 11:09:14 2025 GMT Subject: CN=C4AD273989FA7F5BF80C43251EB6891F31CAAB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:83:5a:84:df:93:49:81:c4:fa:3f:3e:06: 29:6c:12:db:8d:09:4e:d0:2f:ef:1c:96:cb:0a:f4: be:a8:bd:ac:f9:33:d4:6a:b6:cd:53:ea:3b:64:69: fa:e5:ca:5f:76:cf:0d:0d:ab:e5:de:91:8a:49:14: 04:53:34:ce:90:d3:6c:09:5c:9a:bd:b2:47:20:05: e9:c0:71:63:8b:9f:4f:b0:4d:44:e2:ce:b3:47:b5: 62:07:20:80:e5:91:32:57:30:5e:4e:e4:ae:52:36: 30:b7:94:c8:b0:24:1f:24:53:16:a9:cc:ce:25:e1: d0:1e:a8:b0:e5:ab:6f:bc:b4:46:1d:dc:00:90:e9: e3:4d:3c:5f:0e:d7:3c:e6:05:a4:fa:6c:bf:94:27: 7d:6c:d1:50:1d:68:af:3f:86:b0:80:5a:69:5b:f9: a4:84:0c:48:63:fa:1c:4d:f5:d8:b4:f6:3c:24:64: 79:f6:3a:78:b0:be:8f:4c:48:52:a0:1f:ea:c1:fd: 8a:ed:6c:dc:ea:bc:89:b0:2f:65:26:5f:e5:78:9b: 93:76:b7:45:58:8a:e5:19:7a:a4:40:c0:88:ba:1c: 9a:88:da:7e:85:70:46:82:35:16:16:11:bf:f9:35: c8:af:11:a1:0b:68:3a:62:d0:b0:20:18:bd:da:15: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AD:27:39:89:FA:7F:5B:F8:0C:43:25:1E:B6:89:1F:31:CA:AB:02 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3800::/40 Signature Algorithm: sha256WithRSAEncryption bb:dc:5e:18:2e:d7:96:0b:11:57:e8:e9:8e:65:b7:3d:0b:ad: 1d:19:a6:b0:3b:4c:c3:c9:2c:60:5f:a4:9d:02:d6:10:42:00: 93:b8:86:1a:a7:ed:49:96:cb:8f:f1:c5:3b:5a:5c:f3:0a:4e: 72:9d:7f:79:0f:10:f7:74:a2:e4:e8:33:b7:ae:f6:99:5c:b7: 58:15:4e:62:73:3f:f8:e1:57:d5:4c:d4:33:db:3a:6e:dd:6c: 79:54:41:5e:c2:7d:ce:96:61:f0:e3:af:31:18:0d:ed:65:63: b8:59:32:60:ba:06:ed:07:95:f2:fd:66:eb:62:7b:1f:66:79: 22:86:72:c4:6e:80:b7:13:22:f9:1f:55:bf:c9:b2:52:ca:6e: bf:ab:a8:09:5f:7a:18:22:71:0b:b4:8b:8e:1b:65:35:32:bb: a0:7f:c5:fe:c4:78:07:b1:95:a2:d2:de:81:b8:b2:b6:d6:10: c8:50:4b:e4:4a:b8:4f:2f:aa:20:42:6f:38:81:17:d4:0d:1b: 1a:94:ae:11:d4:0a:8b:96:75:f7:98:a2:c8:46:9d:83:33:63: db:20:46:86:03:db:12:08:bf:9b:4b:a0:51:66:35:ed:51:f4: bf:7c:23:5e:24:bb:52:d5:ff:06:37:28:55:9d:e4:bb:c0:2b: f5:9e:f7:b1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdeiG6vhhCzRA09y1tpm6d+vfz2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MjQxMTA0MTRaFw0yNTA1MjMxMTA5MTRaMDMxMTAvBgNV BAMTKEM0QUQyNzM5ODlGQTdGNUJGODBDNDMyNTFFQjY4OTFGMzFDQUFCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/oNahN+TSYHE+j8+BilsEtuN CU7QL+8clssK9L6ovaz5M9Rqts1T6jtkafrlyl92zw0Nq+XekYpJFARTNM6Q02wJ XJq9skcgBenAcWOLn0+wTUTizrNHtWIHIIDlkTJXMF5O5K5SNjC3lMiwJB8kUxap zM4l4dAeqLDlq2+8tEYd3ACQ6eNNPF8O1zzmBaT6bL+UJ31s0VAdaK8/hrCAWmlb +aSEDEhj+hxN9di09jwkZHn2Oniwvo9MSFKgH+rB/YrtbNzqvImwL2UmX+V4m5N2 t0VYiuUZeqRAwIi6HJqI2n6FcEaCNRYWEb/5NcivEaELaDpi0LAgGL3aFWlDAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUxK0nOYn6f1v4DEMlHraJHzHKqwIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE0OTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgTgwDQYJKoZIhvcNAQELBQADggEBALvc Xhgu15YLEVfo6Y5ltz0LrR0ZprA7TMPJLGBfpJ0C1hBCAJO4hhqn7UmWy4/xxTta XPMKTnKdf3kPEPd0ouToM7eu9plct1gVTmJzP/jhV9VM1DPbOm7dbHlUQV7Cfc6W YfDjrzEYDe1lY7hZMmC6Bu0HlfL9Zutiex9meSKGcsRugLcTIvkfVb/JslLKbr+r qAlfehgicQu0i44bZTUyu6B/xf7EeAexlaLS3oG4srbWEMhQS+RKuE8vqiBCbziB F9QNGxqUrhHUCouWdfeYoshGnYMzY9sgRoYD2xIIv5tLoFFmNe1R9L98I14ku1LV /wY3KFWd5LvAK/We97E= -----END CERTIFICATE-----Generated at Mon Jul 1 10:01:36 2024 by rpki-client on console-fra.rpki-client.org