$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS135330.roa File: AS135330.roa (raw, json) Hash identifier: FhEeoMg46Q1RN/uHM6kKDGIunmeJNfjK0gJ6f5HJUGI= Subject key identifier: 29:70:BB:ED:4C:86:4E:3E:76:DD:82:56:A1:59:D7:D5:2A:0E:A8:D6 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7E87EC3B96A52DB8B9AD0D2752E14D3ADA70BA17 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS135330.roa Signing time: Sat 11 Nov 2023 08:38:10 +0000 ROA not before: Sat 11 Nov 2023 08:33:10 +0000 ROA not after: Sat 09 Nov 2024 08:38:10 +0000 asID: 135330 IP address blocks: 2a05:dfc1:6e00::/40 maxlen: 48 2a05:dfc1:6e00::/48 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:87:ec:3b:96:a5:2d:b8:b9:ad:0d:27:52:e1:4d:3a:da:70:ba:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 11 08:33:10 2023 GMT Not After : Nov 9 08:38:10 2024 GMT Subject: CN=2970BBED4C864E3E76DD8256A159D7D52A0EA8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:ba:d7:d7:2b:55:d7:b8:2d:2a:4d:78:12: 91:51:71:ac:cb:88:14:13:8a:ef:16:1c:85:64:c4: 70:f8:f1:77:fa:8a:16:50:2c:37:dc:15:d4:ee:ef: 1d:42:6f:aa:d2:7e:4e:a6:f9:4f:54:66:bf:fc:9a: 3f:86:72:e0:22:84:54:8a:a7:81:ea:2c:1a:6d:d3: 99:5b:1c:4f:87:41:11:3f:21:40:d0:88:cd:93:7a: f8:d2:03:b1:7e:7c:be:92:38:81:7f:f4:67:88:c4: 46:59:04:45:69:7f:1b:77:c4:2b:71:e0:58:fa:ce: 86:d9:c0:43:89:2f:42:12:87:9b:18:70:fc:b9:c0: f8:43:cc:ee:08:81:9c:b9:bf:e4:8b:41:17:69:64: 54:f2:69:87:76:c2:45:83:bc:bf:41:80:5f:32:ac: 20:80:30:13:5b:74:20:1c:90:5f:11:86:85:bc:68: e4:1c:20:a8:c9:18:4d:ba:68:04:6f:31:93:ee:56: 7d:fc:d2:75:20:8e:50:90:73:47:44:05:e9:ad:0c: be:3d:25:76:6d:fb:3b:fc:54:77:5c:72:e1:49:e6: ce:14:59:d2:9e:a5:dc:23:c1:9e:9c:24:fe:7e:38: 31:41:81:6e:65:98:a6:ac:25:23:f3:f2:72:48:e3: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:BB:ED:4C:86:4E:3E:76:DD:82:56:A1:59:D7:D5:2A:0E:A8:D6 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS135330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:6e00::/40 Signature Algorithm: sha256WithRSAEncryption b1:45:ee:ca:ba:89:e9:c4:99:fc:98:96:ef:d2:c1:a5:54:f2: 0f:7c:48:c8:7c:e0:2d:ff:2a:32:6e:0e:0e:b7:82:c9:0f:39: d5:dc:41:ab:22:b4:f1:f9:07:59:25:67:92:39:2f:6c:21:d0: fd:76:8a:8b:e6:9b:16:0e:92:96:73:4d:ae:0a:47:73:a5:93: fe:5e:86:08:c3:bb:3e:b9:e2:ed:07:aa:d0:55:4b:ac:fa:0a: 73:83:83:15:29:73:9b:ec:39:08:30:e7:2f:0b:96:17:3c:a2: da:32:f6:5f:9c:71:d6:f1:31:f9:7c:59:05:22:8e:63:a7:be: bf:2d:06:d8:21:93:64:2d:8b:cb:60:0a:20:37:22:83:c9:0c: 87:ec:28:4d:19:1c:e0:21:41:86:a6:c6:ea:14:be:61:d2:a7: 71:47:14:56:95:3c:1e:6d:c0:33:6e:bd:f4:ed:15:6c:44:50: 27:ce:07:38:7f:5e:84:a5:59:56:01:33:e4:b8:e1:e2:b5:61: b7:e9:17:c7:ce:4b:a0:24:b0:40:e0:cb:bd:3a:a9:22:de:f6: 75:26:ef:78:db:94:cb:2f:15:f2:81:96:b1:3e:f0:32:68:09: 99:ca:ae:59:79:e5:12:87:6e:e4:12:82:71:c2:f0:0a:8b:01: 15:66:3e:3b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfofsO5alLbi5rQ0nUuFNOtpwuhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMTEwODMzMTBaFw0yNDExMDkwODM4MTBaMDMxMTAvBgNV BAMTKDI5NzBCQkVENEM4NjRFM0U3NkREODI1NkExNTlEN0Q1MkEwRUE4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwdbrX1ytV17gtKk14EpFRcazL iBQTiu8WHIVkxHD48Xf6ihZQLDfcFdTu7x1Cb6rSfk6m+U9UZr/8mj+GcuAihFSK p4HqLBpt05lbHE+HQRE/IUDQiM2TevjSA7F+fL6SOIF/9GeIxEZZBEVpfxt3xCtx 4Fj6zobZwEOJL0ISh5sYcPy5wPhDzO4IgZy5v+SLQRdpZFTyaYd2wkWDvL9BgF8y rCCAMBNbdCAckF8RhoW8aOQcIKjJGE26aARvMZPuVn380nUgjlCQc0dEBemtDL49 JXZt+zv8VHdccuFJ5s4UWdKepdwjwZ6cJP5+ODFBgW5lmKasJSPz8nJI44sPAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUKXC77UyGTj523YJWoVnX1SoOqNYwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM1MzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwW4wDQYJKoZIhvcNAQELBQADggEBALFF 7sq6ienEmfyYlu/SwaVU8g98SMh84C3/KjJuDg63gskPOdXcQasitPH5B1klZ5I5 L2wh0P12iovmmxYOkpZzTa4KR3Olk/5ehgjDuz654u0HqtBVS6z6CnODgxUpc5vs OQgw5y8Llhc8otoy9l+ccdbxMfl8WQUijmOnvr8tBtghk2Qti8tgCiA3IoPJDIfs KE0ZHOAhQYamxuoUvmHSp3FHFFaVPB5twDNuvfTtFWxEUCfOBzh/XoSlWVYBM+S4 4eK1YbfpF8fOS6AksEDgy706qSLe9nUm73jblMsvFfKBlrE+8DJoCZnKrll55RKH buQSgnHC8AqLARVmPjs= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org