$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139311.roa File: AS139311.roa (raw, json) Hash identifier: CzECclrVtfEDOGx9i4BHnXMmkz8bV9+il5QqsLm1bkI= Subject key identifier: 3A:31:8A:DE:18:AD:4B:0A:7E:A9:4D:23:BA:48:EA:94:5E:BE:7C:54 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 48BA6D680BB819BE150EF05F1D1F61A27549C360 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139311.roa Signing time: Sat 22 Jun 2024 13:13:50 +0000 ROA not before: Sat 22 Jun 2024 13:08:50 +0000 ROA not after: Sat 21 Jun 2025 13:13:50 +0000 asID: 139311 IP address blocks: 2a06:9f81:5200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ba:6d:68:0b:b8:19:be:15:0e:f0:5f:1d:1f:61:a2:75:49:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 22 13:08:50 2024 GMT Not After : Jun 21 13:13:50 2025 GMT Subject: CN=3A318ADE18AD4B0A7EA94D23BA48EA945EBE7C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:79:8c:78:9e:9d:e9:94:37:c1:78:0b:3a: 51:5d:76:8e:9a:4e:5b:f2:9e:c0:b6:d9:ee:db:62: 7a:d4:95:fc:d2:78:da:ce:84:4a:01:aa:ce:ea:16: 77:83:15:75:3d:79:9c:56:b3:da:53:5c:2e:8b:d2: 82:fc:d2:f6:8b:b4:31:ad:11:0d:a6:7a:39:45:a0: db:c0:e1:8c:b7:db:b5:57:e8:7b:43:90:cd:de:5d: 42:9a:dd:c8:07:53:7b:66:f6:37:d7:a7:40:44:26: ee:a9:75:7f:02:5c:7d:e6:4e:59:2a:81:b0:a1:60: 64:90:fd:30:10:a2:a1:32:a2:08:3e:dc:c0:40:69: 4f:7d:27:03:98:f8:96:63:4b:89:e0:0a:68:63:d7: 3b:55:c1:6c:d4:73:9e:a9:1c:54:b1:73:fb:51:29: 0c:12:6d:c2:c8:fc:69:0b:de:05:f0:fa:73:00:83: dc:61:28:76:35:e6:33:44:6a:e3:b5:e4:5a:e4:fe: 13:6e:db:1d:14:e1:2d:72:43:95:07:fb:d8:09:a7: 55:cd:e3:d5:fc:f7:f4:27:f8:2f:53:31:c9:c3:fc: e6:f5:86:67:90:46:4a:d6:c5:80:76:f0:ac:e8:2b: a1:17:44:8c:e5:d5:d6:aa:cb:ec:b0:81:9c:b1:07: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:8A:DE:18:AD:4B:0A:7E:A9:4D:23:BA:48:EA:94:5E:BE:7C:54 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS139311.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5200::/40 Signature Algorithm: sha256WithRSAEncryption 5d:30:48:42:ac:f0:c5:e6:a7:06:4d:62:6a:e4:27:1b:b7:fb: b2:30:49:c9:47:82:c2:a6:8f:5f:f6:fa:c6:7c:ef:2d:28:1c: 7a:2d:3b:cf:c9:d9:59:86:11:90:e9:38:b6:4b:ef:eb:44:1e: 57:a0:8a:fb:d5:b9:0e:0d:8e:3b:3d:1f:70:df:68:3d:23:aa: 35:c6:d1:62:61:c9:14:1e:be:fe:26:d3:31:7b:86:3f:4a:cf: d5:42:63:c2:87:88:5c:64:33:53:cb:4e:bb:9c:20:87:bc:65: ed:69:18:27:13:d1:98:b7:e1:a5:fb:8b:f4:e1:24:ee:93:0b: 9a:0b:cd:f9:45:67:9b:86:5f:92:7c:25:b7:c1:19:96:ca:50: 77:30:41:6c:fc:da:65:21:d7:8d:ac:3f:bb:76:93:35:33:53: c3:8c:15:83:f2:d2:62:cb:9c:b4:4c:0c:d6:f0:57:ba:91:18: de:9d:3c:15:3e:05:8a:65:80:5f:d8:f5:24:b3:3a:c2:4d:ad: ed:ea:7c:9e:30:0a:65:10:b3:3c:de:63:57:ea:a6:e3:e2:64: 74:b9:99:e4:36:e4:a6:96:20:d3:c7:b4:f4:8b:22:b1:f1:91: 12:38:f8:53:ff:cc:a5:19:5a:97:8a:87:31:55:b9:de:f9:d5: f6:e8:e3:7a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSLptaAu4Gb4VDvBfHR9honVJw2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA2MjIxMzA4NTBaFw0yNTA2MjExMzEzNTBaMDMxMTAvBgNV BAMTKDNBMzE4QURFMThBRDRCMEE3RUE5NEQyM0JBNDhFQTk0NUVCRTdDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMXmMeJ6d6ZQ3wXgLOlFddo6a TlvynsC22e7bYnrUlfzSeNrOhEoBqs7qFneDFXU9eZxWs9pTXC6L0oL80vaLtDGt EQ2mejlFoNvA4Yy327VX6HtDkM3eXUKa3cgHU3tm9jfXp0BEJu6pdX8CXH3mTlkq gbChYGSQ/TAQoqEyogg+3MBAaU99JwOY+JZjS4ngCmhj1ztVwWzUc56pHFSxc/tR KQwSbcLI/GkL3gXw+nMAg9xhKHY15jNEauO15Frk/hNu2x0U4S1yQ5UH+9gJp1XN 49X89/Qn+C9TMcnD/Ob1hmeQRkrWxYB28KzoK6EXRIzl1daqy+ywgZyxBy1fAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUOjGK3hitSwp+qU0jukjqlF6+fFQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTM5MzExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgVIwDQYJKoZIhvcNAQELBQADggEBAF0w SEKs8MXmpwZNYmrkJxu3+7IwSclHgsKmj1/2+sZ87y0oHHotO8/J2VmGEZDpOLZL 7+tEHlegivvVuQ4Njjs9H3DfaD0jqjXG0WJhyRQevv4m0zF7hj9Kz9VCY8KHiFxk M1PLTrucIIe8Ze1pGCcT0Zi34aX7i/ThJO6TC5oLzflFZ5uGX5J8JbfBGZbKUHcw QWz82mUh142sP7t2kzUzU8OMFYPy0mLLnLRMDNbwV7qRGN6dPBU+BYplgF/Y9SSz OsJNre3qfJ4wCmUQszzeY1fqpuPiZHS5meQ25KaWINPHtPSLIrHxkRI4+FP/zKUZ WpeKhzFVud751fbo43o= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org