$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa File: AS149020.roa (raw, json) Hash identifier: FJMwhoz+Zf5Amj6beYKDKmuVexryl9o+FEzfQZk5isA= Subject key identifier: C6:5F:D7:10:69:17:0D:91:51:91:3B:66:9D:8C:87:D1:1E:04:B2:EB Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0B9A6FC450D713F1924CEF7A4263CFBA673C1776 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa Signing time: Sun 05 Nov 2023 04:07:15 +0000 ROA not before: Sun 05 Nov 2023 04:02:15 +0000 ROA not after: Sun 03 Nov 2024 04:07:15 +0000 asID: 149020 IP address blocks: 2a05:dfc1:4000::/40 maxlen: 48 2a05:dfc1:4100::/40 maxlen: 40 2a05:dfc1:4200::/40 maxlen: 48 2a05:dfc1:4300::/40 maxlen: 48 2a05:dfc1:4400::/40 maxlen: 40 2a05:dfc1:4500::/40 maxlen: 48 2a0a:6040:9500::/40 maxlen: 48 2a0a:6040:9600::/40 maxlen: 48 2a0a:6040:9700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:9a:6f:c4:50:d7:13:f1:92:4c:ef:7a:42:63:cf:ba:67:3c:17:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:15 2023 GMT Not After : Nov 3 04:07:15 2024 GMT Subject: CN=C65FD71069170D9151913B669D8C87D11E04B2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:a4:4a:7e:a9:a0:7b:7d:e4:5f:73:54:05: f8:f4:43:80:6d:fd:be:3f:56:6e:05:ea:b9:67:15: eb:e9:3a:c9:04:65:ed:07:53:7d:a7:fb:56:aa:b6: 3a:19:41:93:c3:49:da:15:ef:94:d0:be:8d:39:1d: 24:f5:db:16:cf:ca:22:33:4e:29:37:14:ec:37:05: 0a:68:cf:e6:b6:6c:78:41:71:85:a9:29:f4:ff:ca: a2:b2:8b:60:8e:37:05:94:16:9c:51:c9:54:14:ce: fd:88:1d:77:1c:c1:75:59:42:3b:12:aa:45:b3:d6: 31:15:e6:a2:1e:25:48:af:3f:2b:b9:3b:ef:d2:6c: 5b:6b:7a:a3:f6:59:d6:0a:c0:be:db:d5:14:55:8b: e1:14:b3:7e:0d:8c:28:19:88:86:f0:3d:de:4e:44: 31:9e:c4:66:95:ab:33:15:6c:94:00:94:45:c4:9d: b7:f1:6d:cf:82:71:ef:6d:f1:de:f9:73:7d:44:27: 11:f6:51:b3:73:b7:07:dd:58:21:1b:f9:f8:79:67: a1:ed:66:c4:0f:f8:c6:2c:6a:b1:e1:43:c1:7d:df: 0c:4a:fc:23:8e:4d:e6:4f:75:25:46:1e:42:fb:fd: 9c:29:dc:25:70:6d:f6:40:34:fe:f4:c0:7c:32:b7: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5F:D7:10:69:17:0D:91:51:91:3B:66:9D:8C:87:D1:1E:04:B2:EB X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS149020.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4000::-2a05:dfc1:45ff:ffff:ffff:ffff:ffff:ffff 2a0a:6040:9500::-2a0a:6040:97ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c1:5a:da:e1:d6:70:fc:43:13:90:67:c3:49:0a:1b:8a:51:90: d8:70:40:3f:2f:76:64:70:b8:ea:72:10:a7:5e:18:35:d3:12: 07:57:cc:42:01:d7:fa:4f:f6:cb:6d:83:5f:2f:6e:83:26:07: a4:ea:3c:c8:f5:cc:91:fd:be:0a:04:85:20:35:9d:19:83:60: 0b:db:4b:72:7d:af:9d:47:d4:69:fb:12:28:b9:bc:bf:0c:37: 9c:61:06:b5:28:92:e0:9d:5b:fe:6d:00:1d:f6:2a:c2:3c:6c: 34:da:70:72:e3:d2:46:15:c8:39:66:d8:76:fe:ac:3a:86:fc: ef:7d:04:06:9a:7f:e5:0d:0d:8f:8a:30:0d:c2:b0:17:62:af: 9c:4d:85:b5:d7:8a:5b:ae:be:2e:c3:6b:b4:4b:35:94:18:84: 89:1e:20:89:7e:09:94:e6:ad:c7:25:64:68:d9:ed:04:2c:cf: 66:6f:20:b0:12:70:4e:16:f3:e3:7b:69:75:f7:bd:28:42:4c: 13:7d:8e:c8:05:f4:35:c5:ce:25:a6:5b:48:e0:38:33:4a:cf: 5e:4a:29:af:c8:77:9d:97:1c:17:d1:b5:0c:c9:00:b5:03:77: 4e:a4:9c:35:b3:07:c1:2b:dc:2d:20:01:ce:2b:a4:85:32:03: 9c:fa:e5:bd -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUC5pvxFDXE/GSTO96QmPPumc8F3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTVaFw0yNDExMDMwNDA3MTVaMDMxMTAvBgNV BAMTKEM2NUZENzEwNjkxNzBEOTE1MTkxM0I2NjlEOEM4N0QxMUUwNEIyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy66RKfqmge33kX3NUBfj0Q4Bt /b4/Vm4F6rlnFevpOskEZe0HU32n+1aqtjoZQZPDSdoV75TQvo05HST12xbPyiIz Tik3FOw3BQpoz+a2bHhBcYWpKfT/yqKyi2CONwWUFpxRyVQUzv2IHXccwXVZQjsS qkWz1jEV5qIeJUivPyu5O+/SbFtreqP2WdYKwL7b1RRVi+EUs34NjCgZiIbwPd5O RDGexGaVqzMVbJQAlEXEnbfxbc+Cce9t8d75c31EJxH2UbNztwfdWCEb+fh5Z6Ht ZsQP+MYsarHhQ8F93wxK/COOTeZPdSVGHkL7/Zwp3CVwbfZANP70wHwytwFBAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUxl/XEGkXDZFRkTtmnYyH0R4EsuswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTQ5MDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAAjAkMBADBgYqBd/BQAMGASoF38FEMBADBgAqCmBAlQMG AyoKYECQMA0GCSqGSIb3DQEBCwUAA4IBAQDBWtrh1nD8QxOQZ8NJChuKUZDYcEA/ L3ZkcLjqchCnXhg10xIHV8xCAdf6T/bLbYNfL26DJgek6jzI9cyR/b4KBIUgNZ0Z g2AL20tyfa+dR9Rp+xIouby/DDecYQa1KJLgnVv+bQAd9irCPGw02nBy49JGFcg5 Zth2/qw6hvzvfQQGmn/lDQ2PijANwrAXYq+cTYW114pbrr4uw2u0SzWUGISJHiCJ fgmU5q3HJWRo2e0ELM9mbyCwEnBOFvPje2l1970oQkwTfY7IBfQ1xc4lpltI4Dgz Ss9eSimvyHedlxwX0bUMyQC1A3dOpJw1swfBK9wtIAHOK6SFMgOc+uW9 -----END CERTIFICATE-----Generated at Fri May 17 06:17:21 2024 by rpki-client on console-fra.rpki-client.org