$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS135330.roa File: AS135330.roa (raw, json) Hash identifier: 6kWM4g6Mg4T2ySmJzcb+srEJm31FAlGABkVobEfJMac= Subject key identifier: 43:61:DA:5E:57:C6:85:DB:35:24:2E:06:F1:21:ED:E8:0D:10:B9:4A Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7388DB49B136B62446A7500AD6662DFEDD09DC00 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS135330.roa Signing time: Sat 12 Oct 2024 08:45:22 +0000 ROA not before: Sat 12 Oct 2024 08:40:22 +0000 ROA not after: Sat 11 Oct 2025 08:45:22 +0000 asID: 135330 IP address blocks: 2a05:dfc1:6e00::/40 maxlen: 48 2a05:dfc1:6e00::/48 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:88:db:49:b1:36:b6:24:46:a7:50:0a:d6:66:2d:fe:dd:09:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 12 08:40:22 2024 GMT Not After : Oct 11 08:45:22 2025 GMT Subject: CN=4361DA5E57C685DB35242E06F121EDE80D10B94A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:33:b2:07:74:20:ef:ae:0e:42:2f:dc:22: 67:6e:69:0c:2b:00:a0:7c:6b:71:34:d7:39:8a:18: 13:17:b7:4c:0e:32:8d:13:4d:32:74:2c:a9:87:fc: f0:48:7a:7e:e2:5f:10:4a:2d:58:5d:8f:b5:64:0d: aa:4a:b3:8f:32:cc:71:b9:d0:6a:7e:28:b4:54:81: 67:2f:26:2c:12:44:39:f9:22:01:50:47:cf:7c:ee: 34:f1:62:dd:61:03:70:af:b7:4b:b5:50:ff:a0:88: 52:33:68:8a:48:d3:48:04:07:3f:de:e0:de:d8:2c: 46:98:46:95:e3:dd:ac:53:ea:7c:26:52:1c:8f:de: df:cb:a7:14:0a:b9:71:de:06:8a:1a:4c:b7:55:dc: 84:ba:d3:f8:92:ae:be:b2:a8:10:ba:2d:ed:c7:d9: 84:35:1f:13:8c:ca:3e:13:7d:8b:b7:8d:e9:7a:13: 80:90:5f:e5:4c:fc:9f:d9:5e:a5:1e:dc:f7:b5:27: 6a:e3:81:e9:1d:14:05:fc:4c:7a:f5:5a:6c:1c:2e: 7b:40:84:e1:61:a5:2e:9c:e3:35:b7:3d:b3:7f:06: c2:cb:66:ba:ed:00:ae:fb:eb:53:aa:12:a2:aa:ab: 46:d9:3f:95:af:be:63:46:97:bf:97:41:dc:00:e5: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:61:DA:5E:57:C6:85:DB:35:24:2E:06:F1:21:ED:E8:0D:10:B9:4A X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS135330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:6e00::/40 Signature Algorithm: sha256WithRSAEncryption 76:41:34:0b:44:83:38:f4:f8:40:c7:97:da:1e:19:2e:90:bc: 14:4a:dd:d1:9d:3c:e8:4c:14:d2:75:c6:38:39:c4:f8:6a:da: 24:2f:1b:52:2f:2e:40:a2:2f:f7:69:26:51:33:3f:be:7a:44: e0:e3:f8:07:ea:44:af:43:52:47:d8:b1:c9:80:ce:95:77:32: e2:c4:36:b6:26:ec:77:04:97:68:90:93:48:4d:7a:9f:46:d1: a7:6b:2a:be:c9:02:cd:cb:4a:02:02:a0:89:89:c8:38:40:1d: f1:e1:76:7c:80:c1:a1:2b:e5:50:ce:e6:8c:d8:9f:e0:db:87: a1:85:88:b1:60:ff:ea:1e:d8:31:b1:19:85:2f:c9:1c:a6:a5: 2d:fd:2c:40:53:a8:fb:45:b5:5b:19:a8:ef:22:7e:3d:54:eb: f8:a8:ad:83:05:10:51:b0:0e:f6:65:a9:ef:9a:2f:51:eb:31: 28:9b:01:ff:2b:27:1f:ee:22:39:ab:a5:56:45:d2:a8:37:47: c4:ce:d0:20:05:6b:e4:09:09:32:32:6c:97:28:70:75:be:65: 54:b2:b6:a7:fa:f9:f1:1d:11:29:db:b8:58:fe:f4:3e:87:2f: d6:11:99:26:50:58:64:d8:49:de:ef:d0:37:06:38:e1:f5:c6: 37:7b:27:6d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUc4jbSbE2tiRGp1AK1mYt/t0J3AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMTIwODQwMjJaFw0yNTEwMTEwODQ1MjJaMDMxMTAvBgNV BAMTKDQzNjFEQTVFNTdDNjg1REIzNTI0MkUwNkYxMjFFREU4MEQxMEI5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYCjOyB3Qg764OQi/cImduaQwr AKB8a3E01zmKGBMXt0wOMo0TTTJ0LKmH/PBIen7iXxBKLVhdj7VkDapKs48yzHG5 0Gp+KLRUgWcvJiwSRDn5IgFQR8987jTxYt1hA3Cvt0u1UP+giFIzaIpI00gEBz/e 4N7YLEaYRpXj3axT6nwmUhyP3t/LpxQKuXHeBooaTLdV3IS60/iSrr6yqBC6Le3H 2YQ1HxOMyj4TfYu3jel6E4CQX+VM/J/ZXqUe3Pe1J2rjgekdFAX8THr1WmwcLntA hOFhpS6c4zW3PbN/BsLLZrrtAK7761OqEqKqq0bZP5WvvmNGl7+XQdwA5QyVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUQ2HaXlfGhds1JC4G8SHt6A0QuUowHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM1MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwW4wDQYJKoZIhvcNAQELBQADggEBAHZB NAtEgzj0+EDHl9oeGS6QvBRK3dGdPOhMFNJ1xjg5xPhq2iQvG1IvLkCiL/dpJlEz P756RODj+AfqRK9DUkfYscmAzpV3MuLENrYm7HcEl2iQk0hNep9G0adrKr7JAs3L SgICoImJyDhAHfHhdnyAwaEr5VDO5ozYn+Dbh6GFiLFg/+oe2DGxGYUvyRympS39 LEBTqPtFtVsZqO8ifj1U6/iorYMFEFGwDvZlqe+aL1HrMSibAf8rJx/uIjmrpVZF 0qg3R8TO0CAFa+QJCTIybJcocHW+ZVSytqf6+fEdESnbuFj+9D6HL9YRmSZQWGTY Sd7v0DcGOOH1xjd7J20= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org