$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: 90LhUvlZsroLbCnwz93MoLZKBJbWImT9xqrjYTFI40g= Subject key identifier: 2D:E6:D8:B0:29:D8:65:17:9F:5C:82:8C:C1:D3:CC:6A:B8:79:C3:BC Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5A24E6E8A525AD4799237416EBD53ECD2B4FD43D Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23470.roa Signing time: Fri 15 Dec 2023 01:33:10 +0000 ROA not before: Fri 15 Dec 2023 01:28:10 +0000 ROA not after: Fri 13 Dec 2024 01:33:10 +0000 asID: 23470 IP address blocks: 2a05:dfc1:5800::/40 maxlen: 48 2a0a:6040:3900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 00:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:24:e6:e8:a5:25:ad:47:99:23:74:16:eb:d5:3e:cd:2b:4f:d4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 15 01:28:10 2023 GMT Not After : Dec 13 01:33:10 2024 GMT Subject: CN=2DE6D8B029D865179F5C828CC1D3CC6AB879C3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:86:da:0f:4e:2d:8e:fb:c3:62:50:82:d1: a7:ca:91:e4:41:ca:70:25:38:e9:f3:8a:75:9a:40: 2c:7d:d4:86:b4:5a:a6:ce:fe:17:8e:5c:d4:3b:b7: 04:bf:02:40:4e:cc:7f:a9:16:75:80:bf:c3:4a:16: 0e:11:e5:7f:11:e1:d4:43:6b:23:76:62:0a:06:0c: 5a:9c:19:6f:ba:4c:5b:3b:07:eb:f8:96:6f:78:58: ed:6d:89:3b:66:12:33:60:a1:5f:37:c3:68:9d:b9: 2c:5f:89:0f:56:5d:5b:50:c2:c8:40:70:8d:df:42: 66:33:08:32:dc:08:bd:18:f6:a6:48:a5:80:78:61: 29:b4:65:54:b1:ad:b5:73:46:e1:1d:d3:f0:90:93: 0f:01:28:41:63:73:69:1d:34:0b:19:36:22:09:ee: c7:38:91:d5:21:05:d2:77:5a:70:3f:82:e7:b2:34: a8:d6:d0:43:ca:8e:73:0d:91:2b:99:e7:b7:c4:5c: 00:28:0e:24:2d:47:f4:b1:5b:43:ac:15:1a:a7:05: 9d:2c:59:67:02:2f:37:c3:19:8a:42:73:d8:e3:d6: cc:7a:a4:9d:87:f9:71:dc:0e:15:76:15:b8:2d:6a: a7:29:f2:3c:14:ae:6f:4d:75:7f:36:18:84:b9:84: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E6:D8:B0:29:D8:65:17:9F:5C:82:8C:C1:D3:CC:6A:B8:79:C3:BC X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5800::/40 2a0a:6040:3900::/40 Signature Algorithm: sha256WithRSAEncryption 28:52:5c:cd:41:b4:75:4c:16:ad:a4:6d:54:17:3d:cd:06:ef: fe:90:42:fb:37:e3:83:da:90:d4:2a:1d:dc:8b:98:f4:da:eb: 73:79:af:13:a9:cf:c2:13:a4:3b:ff:b2:c2:59:4f:5f:f1:e1: c0:26:9e:b8:a8:83:58:7c:53:d1:cc:ea:45:b8:d8:a9:19:e0: 90:6c:7e:8a:dc:c6:65:d1:fa:70:17:ca:c3:b5:2d:f6:7a:44: 19:af:3f:1a:27:00:65:9c:99:1b:25:00:80:97:fe:f3:70:51: b8:56:35:1f:78:9d:8d:90:6a:7b:86:90:55:f0:c6:76:8f:45: c0:47:f9:c1:77:66:fc:8e:eb:8b:87:f5:11:7c:24:26:4d:07: 92:63:2a:57:59:a4:b5:27:ad:20:72:f3:b0:32:f4:f7:81:0c: 5d:80:ce:d2:f0:34:41:87:f2:30:a5:c2:9a:7d:fb:46:d9:39: 43:14:54:8c:b3:73:03:1d:6a:c0:d5:98:81:9b:a2:d3:d1:bd: 18:86:aa:2e:0d:02:27:a1:1d:78:3f:91:10:d1:79:2c:e0:ee: 07:90:bd:49:25:24:35:74:a7:2c:be:80:c7:21:79:85:be:6c: 9e:23:e6:7d:32:99:3f:28:31:dc:c5:b7:e0:1f:77:11:7e:2d: 5c:3a:47:3d -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUWiTm6KUlrUeZI3QW69U+zStP1D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEyMTUwMTI4MTBaFw0yNDEyMTMwMTMzMTBaMDMxMTAvBgNV BAMTKDJERTZEOEIwMjlEODY1MTc5RjVDODI4Q0MxRDNDQzZBQjg3OUMzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUU4baD04tjvvDYlCC0afKkeRB ynAlOOnzinWaQCx91Ia0WqbO/heOXNQ7twS/AkBOzH+pFnWAv8NKFg4R5X8R4dRD ayN2YgoGDFqcGW+6TFs7B+v4lm94WO1tiTtmEjNgoV83w2iduSxfiQ9WXVtQwshA cI3fQmYzCDLcCL0Y9qZIpYB4YSm0ZVSxrbVzRuEd0/CQkw8BKEFjc2kdNAsZNiIJ 7sc4kdUhBdJ3WnA/gueyNKjW0EPKjnMNkSuZ57fEXAAoDiQtR/SxW0OsFRqnBZ0s WWcCLzfDGYpCc9jj1sx6pJ2H+XHcDhV2Fbgtaqcp8jwUrm9NdX82GIS5hEo1AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQULebYsCnYZRefXIKMwdPMarh5w7wwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjM0NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqBd/BWAMGACoKYEA5MA0GCSqGSIb3DQEBCwUA A4IBAQAoUlzNQbR1TBatpG1UFz3NBu/+kEL7N+OD2pDUKh3ci5j02utzea8Tqc/C E6Q7/7LCWU9f8eHAJp64qINYfFPRzOpFuNipGeCQbH6K3MZl0fpwF8rDtS32ekQZ rz8aJwBlnJkbJQCAl/7zcFG4VjUfeJ2NkGp7hpBV8MZ2j0XAR/nBd2b8juuLh/UR fCQmTQeSYypXWaS1J60gcvOwMvT3gQxdgM7S8DRBh/IwpcKafftG2TlDFFSMs3MD HWrA1ZiBm6LT0b0YhqouDQInoR14P5EQ0Xks4O4HkL1JJSQ1dKcsvoDHIXmFvmye I+Z9Mpk/KDHcxbfgH3cRfi1cOkc9 -----END CERTIFICATE-----Generated at Wed May 1 13:28:02 2024 by rpki-client on console-fra.rpki-client.org