$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa File: AS149020.roa (raw, json) Hash identifier: 9mQA61+xrF+ZFJuGnZRe993KU9m/QYHkVvifPH/H7aY= Subject key identifier: 17:97:0F:9D:FC:86:A9:F4:62:CF:A7:85:1F:47:A5:E5:6E:F2:D5:F9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1C860AA8E0EA9DF78F83FBF7B6A235A1840CF600 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa Signing time: Sun 06 Oct 2024 04:44:58 +0000 ROA not before: Sun 06 Oct 2024 04:39:58 +0000 ROA not after: Sun 05 Oct 2025 04:44:58 +0000 asID: 149020 IP address blocks: 2a05:dfc1:4000::/40 maxlen: 48 2a05:dfc1:4100::/40 maxlen: 40 2a05:dfc1:4200::/40 maxlen: 48 2a05:dfc1:4300::/40 maxlen: 48 2a05:dfc1:4400::/40 maxlen: 40 2a05:dfc1:4500::/40 maxlen: 48 2a0a:6040:9500::/40 maxlen: 48 2a0a:6040:9600::/40 maxlen: 48 2a0a:6040:9700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:86:0a:a8:e0:ea:9d:f7:8f:83:fb:f7:b6:a2:35:a1:84:0c:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:39:58 2024 GMT Not After : Oct 5 04:44:58 2025 GMT Subject: CN=17970F9DFC86A9F462CFA7851F47A5E56EF2D5F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:3f:0c:d7:b0:8f:29:8e:26:55:04:0f:d0: 14:f5:f0:d7:d7:9b:24:a1:6c:2d:95:79:7d:46:f0: 84:07:8a:db:06:6c:b0:83:4c:6d:80:85:2a:1c:63: 18:39:98:c0:23:7d:6f:82:65:bd:4c:43:75:26:e9: 27:d1:c7:1c:ee:8e:37:46:13:a7:29:ee:d4:8f:1f: 2c:c4:56:07:80:de:bf:28:b1:2f:b6:2a:58:c0:5e: a2:41:d3:69:c8:b7:a1:40:10:d3:7f:bf:a7:b3:35: b6:6c:32:ca:db:86:1a:dc:5b:87:8e:af:aa:f7:0d: 51:e8:a1:4d:11:03:ce:e4:1f:7b:32:33:ae:af:88: d6:70:1a:5c:06:dc:45:a9:47:2b:64:d1:8d:6c:7a: f9:70:9a:36:cd:c0:8c:69:e0:22:a1:ca:e5:ff:11: fd:eb:98:7e:08:60:d9:57:48:a6:66:55:ee:a1:9f: 3d:fd:9c:31:32:7e:de:6e:03:8d:6e:b1:81:31:6c: f3:51:bb:65:a1:26:a0:6e:1f:d3:aa:74:2f:ee:29: 63:d5:73:44:c3:7b:e4:60:9f:ee:dd:89:ae:7a:f3: f4:eb:a2:92:12:c1:29:a0:34:93:cf:27:69:3d:ea: 03:90:64:79:93:07:18:44:5e:df:35:db:b8:b8:a1: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:97:0F:9D:FC:86:A9:F4:62:CF:A7:85:1F:47:A5:E5:6E:F2:D5:F9 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4000::-2a05:dfc1:45ff:ffff:ffff:ffff:ffff:ffff 2a0a:6040:9500::-2a0a:6040:97ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3a:88:3a:ee:d5:29:77:63:06:4b:e2:46:53:76:6d:3c:f3:f1: 4a:19:13:c9:6b:3f:e3:85:7a:23:9e:2d:ee:56:9a:b0:c2:b2: 4b:42:44:14:f0:31:95:9f:25:e8:c6:9c:00:09:20:f6:1f:84: e5:4a:76:b6:b9:48:c4:da:55:cb:56:61:e3:cd:a8:b6:e2:1f: 13:30:3f:a6:f6:65:00:07:ef:fb:64:f0:bd:b3:4b:c6:dd:ea: 5c:34:e8:56:d2:b9:e6:22:69:15:8b:eb:72:30:26:6a:89:cb: 2d:7b:71:87:d5:90:70:f5:62:9b:4f:1a:0d:01:f2:6a:16:8f: 80:59:ad:dd:48:f5:cf:bd:c4:7f:36:92:89:56:1f:24:b7:52: 48:38:aa:4d:87:c0:1d:9d:1f:2d:e2:53:24:0a:40:d7:df:60: 44:18:ae:c8:b1:97:73:b8:75:40:74:47:6d:45:bf:93:a4:d2: 12:3b:e0:b1:44:3b:91:61:e0:90:9a:df:91:e3:59:48:11:02: 89:d1:95:67:e9:0c:1a:31:26:1c:7e:01:78:b3:86:d2:c1:4b: dc:a5:f8:6d:3d:b5:e2:9c:15:2b:16:18:d7:b5:3b:64:f8:b7: 1b:6a:96:a1:3e:fe:2d:c3:20:90:ea:d9:25:c2:a5:8a:3a:d9: 45:da:44:30 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUHIYKqODqnfePg/v3tqI1oYQM9gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDM5NThaFw0yNTEwMDUwNDQ0NThaMDMxMTAvBgNV BAMTKDE3OTcwRjlERkM4NkE5RjQ2MkNGQTc4NTFGNDdBNUU1NkVGMkQ1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKD8M17CPKY4mVQQP0BT18NfX myShbC2VeX1G8IQHitsGbLCDTG2AhSocYxg5mMAjfW+CZb1MQ3Um6SfRxxzujjdG E6cp7tSPHyzEVgeA3r8osS+2KljAXqJB02nIt6FAENN/v6ezNbZsMsrbhhrcW4eO r6r3DVHooU0RA87kH3syM66viNZwGlwG3EWpRytk0Y1sevlwmjbNwIxp4CKhyuX/ Ef3rmH4IYNlXSKZmVe6hnz39nDEyft5uA41usYExbPNRu2WhJqBuH9OqdC/uKWPV c0TDe+Rgn+7dia568/TropISwSmgNJPPJ2k96gOQZHmTBxhEXt8127i4obR1AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUF5cPnfyGqfRiz6eFH0el5W7y1fkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTQ5MDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAAjAkMBADBgYqBd/BQAMGASoF38FEMBADBgAqCmBAlQMG AyoKYECQMA0GCSqGSIb3DQEBCwUAA4IBAQA6iDru1Sl3YwZL4kZTdm088/FKGRPJ az/jhXojni3uVpqwwrJLQkQU8DGVnyXoxpwACSD2H4TlSna2uUjE2lXLVmHjzai2 4h8TMD+m9mUAB+/7ZPC9s0vG3epcNOhW0rnmImkVi+tyMCZqicste3GH1ZBw9WKb TxoNAfJqFo+AWa3dSPXPvcR/NpKJVh8kt1JIOKpNh8AdnR8t4lMkCkDX32BEGK7I sZdzuHVAdEdtRb+TpNISO+CxRDuRYeCQmt+R41lIEQKJ0ZVn6QwaMSYcfgF4s4bS wUvcpfhtPbXinBUrFhjXtTtk+LcbapahPv4twyCQ6tklwqWKOtlF2kQw -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org