$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS134478.roa File: AS134478.roa (raw, json) Hash identifier: lm/iY2OImzQ6wyMPkFlp2lahpF1jYWcRsIjRfbzdG9o= Subject key identifier: 80:CB:0B:15:E3:A6:D0:97:D1:0D:07:57:88:D9:70:36:C6:88:11:0F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 11F4EC127E62F95A13A7BC6A440C75B5B1AC507B Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS134478.roa Signing time: Sun 05 Nov 2023 04:07:04 +0000 ROA not before: Sun 05 Nov 2023 04:02:04 +0000 ROA not after: Sun 03 Nov 2024 04:07:04 +0000 asID: 134478 IP address blocks: 2a0a:6040:7e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f4:ec:12:7e:62:f9:5a:13:a7:bc:6a:44:0c:75:b5:b1:ac:50:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:04 2023 GMT Not After : Nov 3 04:07:04 2024 GMT Subject: CN=80CB0B15E3A6D097D10D075788D97036C688110F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:25:cc:e1:d1:7a:99:84:18:e7:00:bd:e3: 26:ef:a2:0f:5c:35:11:33:d2:1e:fc:a4:2b:50:98: 30:fe:23:c1:6b:35:7b:f0:45:5b:07:69:82:25:45: 01:b6:c1:a8:e8:41:af:81:42:f9:54:61:72:1b:35: f5:f7:76:9e:af:ef:89:60:c4:8b:a4:f7:8b:a6:11: 24:3e:8b:75:dc:bd:60:97:c3:26:c7:91:e8:d0:d3: f6:57:40:9c:d2:b3:1b:47:c9:02:9d:0e:60:8a:02: e3:d1:ee:76:15:b7:f1:cb:30:4b:f8:27:25:c7:52: da:48:02:be:65:b9:6c:a9:cb:76:76:71:13:10:bf: 44:b3:c8:e2:d6:60:f3:1a:0f:04:67:87:46:b5:45: a0:c0:34:b0:65:18:fd:7a:c3:7c:d8:0a:c2:ca:bf: 4b:20:14:93:ba:f0:33:a0:47:aa:26:a0:e0:9d:e8: 56:3d:5b:3f:98:02:1f:11:18:57:e5:ff:da:66:d9: 99:08:37:af:f6:37:88:37:78:35:d3:16:ef:96:d1: 8c:8a:2a:4a:39:1a:3a:54:d9:df:b9:9e:0b:e9:ff: 65:e7:bd:49:f5:53:53:35:09:71:af:d7:ce:9e:03: cc:b8:54:cc:23:d7:33:92:24:00:e2:54:83:a6:ad: f9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:0B:15:E3:A6:D0:97:D1:0D:07:57:88:D9:70:36:C6:88:11:0F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS134478.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7e00::/40 Signature Algorithm: sha256WithRSAEncryption 1c:3d:4e:ab:14:a9:d5:52:d4:e2:4c:b5:1d:76:c2:3c:52:d4: 7f:99:ee:ff:e3:d3:97:5a:98:c3:c1:a2:9e:8c:49:ae:4a:e0: 3a:83:9b:d4:ac:fa:21:5f:8d:8a:03:16:5f:19:76:0d:5f:6c: 48:66:d8:12:8f:4e:3d:3c:ce:87:41:20:ef:2b:40:86:3c:da: f0:d1:43:5e:65:f3:26:50:85:47:95:8b:b2:63:e9:ee:42:d5: dd:c3:e5:33:b3:89:30:c3:55:8d:2e:5c:9a:50:97:c9:f1:0f: fe:d4:fd:91:58:d3:3d:b8:00:b1:10:82:cc:36:6c:63:47:ae: ae:96:db:5b:17:cc:0e:ac:57:c2:87:37:6c:85:b4:cd:34:3d: 64:75:d8:90:57:59:74:e8:24:51:2c:21:7a:5d:ca:7d:e9:3b: 52:4f:24:76:fb:50:5a:48:fc:c4:5b:af:28:b5:7a:ea:b0:a8: 14:82:72:40:30:2b:11:33:45:fd:ee:42:fe:2a:b0:73:f9:db: 4b:01:f0:64:d7:f7:1a:7f:12:94:e4:a5:1d:dc:1b:94:83:d0: b8:dd:4d:33:8c:28:cf:64:46:69:6b:08:03:9f:ac:a2:50:fe: fa:39:ec:01:a3:cf:3c:50:3d:a6:b4:01:83:1f:46:d2:e9:4a: 70:7e:81:fd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEfTsEn5i+VoTp7xqRAx1tbGsUHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDRaFw0yNDExMDMwNDA3MDRaMDMxMTAvBgNV BAMTKDgwQ0IwQjE1RTNBNkQwOTdEMTBEMDc1Nzg4RDk3MDM2QzY4ODExMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ESXM4dF6mYQY5wC94ybvog9c NREz0h78pCtQmDD+I8FrNXvwRVsHaYIlRQG2wajoQa+BQvlUYXIbNfX3dp6v74lg xIuk94umESQ+i3XcvWCXwybHkejQ0/ZXQJzSsxtHyQKdDmCKAuPR7nYVt/HLMEv4 JyXHUtpIAr5luWypy3Z2cRMQv0SzyOLWYPMaDwRnh0a1RaDANLBlGP16w3zYCsLK v0sgFJO68DOgR6omoOCd6FY9Wz+YAh8RGFfl/9pm2ZkIN6/2N4g3eDXTFu+W0YyK Kko5GjpU2d+5ngvp/2XnvUn1U1M1CXGv186eA8y4VMwj1zOSJADiVIOmrflvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUgMsLFeOm0JfRDQdXiNlwNsaIEQ8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM0NDc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH4wDQYJKoZIhvcNAQELBQADggEBABw9 TqsUqdVS1OJMtR12wjxS1H+Z7v/j05damMPBop6MSa5K4DqDm9Ss+iFfjYoDFl8Z dg1fbEhm2BKPTj08zodBIO8rQIY82vDRQ15l8yZQhUeVi7Jj6e5C1d3D5TOziTDD VY0uXJpQl8nxD/7U/ZFY0z24ALEQgsw2bGNHrq6W21sXzA6sV8KHN2yFtM00PWR1 2JBXWXToJFEsIXpdyn3pO1JPJHb7UFpI/MRbryi1euqwqBSCckAwKxEzRf3uQv4q sHP520sB8GTX9xp/EpTkpR3cG5SD0LjdTTOMKM9kRmlrCAOfrKJQ/vo57AGjzzxQ Paa0AYMfRtLpSnB+gf0= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org