$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197841.roa File: AS197841.roa (raw, json) Hash identifier: agepVrSi4hYMY68Cp6d3RIjV4bNMuy3zW1oWv21AAIw= Subject key identifier: 7D:95:41:FA:FA:6A:A6:94:0B:29:11:F2:34:1F:2F:16:83:DF:6F:62 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 17BC5D31CE43F03525B5915D90A9436EA2F49AE6 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197841.roa Signing time: Tue 19 Sep 2023 09:36:29 +0000 ROA not before: Tue 19 Sep 2023 09:31:29 +0000 ROA not after: Tue 17 Sep 2024 09:36:29 +0000 asID: 197841 IP address blocks: 2a05:dfc1:a00::/40 maxlen: 48 2a05:dfc1:6b00::/40 maxlen: 48 2a05:dfc1:9700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bc:5d:31:ce:43:f0:35:25:b5:91:5d:90:a9:43:6e:a2:f4:9a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 19 09:31:29 2023 GMT Not After : Sep 17 09:36:29 2024 GMT Subject: CN=7D9541FAFA6AA6940B2911F2341F2F1683DF6F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0f:46:7c:db:5e:35:ee:0f:99:1a:b1:43:e1: d9:49:1d:31:95:c0:a2:2d:ad:89:f7:b2:02:80:c3: 88:db:d0:7d:2b:f6:35:a4:48:f1:ab:30:6d:75:56: 7b:05:eb:ae:94:56:9c:e8:7d:f3:d1:67:21:0a:b3: da:a6:5f:e7:14:01:f8:35:da:9d:51:3c:0d:80:eb: 01:2c:2d:c6:d5:6d:b0:f6:ff:89:cd:5a:60:44:b5: 61:c3:2b:e0:2b:f8:03:0d:19:31:f5:23:2f:03:be: ad:ed:ec:13:06:e8:e2:6d:27:18:f8:a0:25:8c:d4: e8:29:fa:ae:d1:e3:12:52:5a:77:0a:c6:b2:ae:b6: ba:4d:c4:1d:17:06:4b:50:af:d2:4b:fe:31:a9:67: 83:fe:eb:f7:cd:c3:a1:52:f9:2b:40:61:da:90:ec: 9f:5c:bd:bc:10:c5:c8:ec:97:aa:04:2b:06:38:59: 5b:2f:ac:d4:42:4c:e4:41:fa:5f:fa:69:19:15:c3: 75:22:7c:0c:02:ee:92:a0:75:ef:2c:0b:84:9f:dc: 4a:63:a6:00:dd:8c:16:20:ba:28:24:75:8a:5c:81: 09:4f:9a:cb:09:ab:42:d4:3e:df:31:5b:74:9b:d6: 66:00:2c:1b:41:ff:a2:c3:07:66:60:21:24:d2:17: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:95:41:FA:FA:6A:A6:94:0B:29:11:F2:34:1F:2F:16:83:DF:6F:62 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:a00::/40 2a05:dfc1:6b00::/40 2a05:dfc1:9700::/40 Signature Algorithm: sha256WithRSAEncryption 4f:3d:af:31:8a:b7:62:92:47:e5:9e:1d:bf:65:e4:ec:ae:d4: 54:19:a2:16:e8:c4:59:6b:34:09:a3:d6:51:b2:d2:3d:0e:0f: 7e:6a:f3:09:03:2f:d8:32:70:43:2f:69:7d:72:8e:c5:30:85: 14:42:20:78:ef:d7:12:de:4b:e4:81:b8:ee:28:9e:81:87:57: a3:25:e1:f2:a6:e6:ed:63:39:01:b6:e1:ac:ca:80:e6:10:fb: 92:6b:a4:ec:34:69:82:42:51:fc:d8:b5:29:c9:3d:06:2d:c5: 3d:ae:b0:d3:c6:6b:c6:f3:f2:e9:81:b4:e7:66:aa:75:6d:6a: fa:88:72:7c:8d:ef:1e:b3:27:27:00:9b:75:fd:2c:a0:25:ce: 55:4f:31:98:2d:18:db:2d:cb:52:d1:8b:d1:35:7f:6d:3a:7c: 36:ef:de:11:21:46:7d:da:61:19:39:f8:8e:4e:0d:ec:dc:9b: 24:04:a7:40:60:db:7a:90:bd:3c:9b:15:db:e6:21:b6:d1:a0: 54:60:53:ab:46:ce:ce:d7:00:c8:b9:03:72:00:e9:cb:83:81: 38:56:7f:e5:fb:6b:f8:73:da:cc:46:2f:c7:6b:5d:c0:f6:3d: fb:9e:c0:3f:f7:93:2d:b9:48:c5:ae:76:8d:6b:d4:b9:46:73: 53:23:08:9a -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUF7xdMc5D8DUltZFdkKlDbqL0muYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzA5MTkwOTMxMjlaFw0yNDA5MTcwOTM2MjlaMDMxMTAvBgNV BAMTKDdEOTU0MUZBRkE2QUE2OTQwQjI5MTFGMjM0MUYyRjE2ODNERjZGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwD0Z821417g+ZGrFD4dlJHTGV wKItrYn3sgKAw4jb0H0r9jWkSPGrMG11VnsF666UVpzoffPRZyEKs9qmX+cUAfg1 2p1RPA2A6wEsLcbVbbD2/4nNWmBEtWHDK+Ar+AMNGTH1Iy8Dvq3t7BMG6OJtJxj4 oCWM1Ogp+q7R4xJSWncKxrKutrpNxB0XBktQr9JL/jGpZ4P+6/fNw6FS+StAYdqQ 7J9cvbwQxcjsl6oEKwY4WVsvrNRCTORB+l/6aRkVw3UifAwC7pKgde8sC4Sf3Epj pgDdjBYguigkdYpcgQlPmssJq0LUPt8xW3Sb1mYALBtB/6LDB2ZgISTSFx5nAgMB AAGjggIEMIICADAdBgNVHQ4EFgQUfZVB+vpqppQLKRHyNB8vFoPfb2IwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk3ODQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAAjAYAwYAKgXfwQoDBgAqBd/BawMGACoF38GXMA0GCSqG SIb3DQEBCwUAA4IBAQBPPa8xirdikkflnh2/ZeTsrtRUGaIW6MRZazQJo9ZRstI9 Dg9+avMJAy/YMnBDL2l9co7FMIUUQiB479cS3kvkgbjuKJ6Bh1ejJeHypubtYzkB tuGsyoDmEPuSa6TsNGmCQlH82LUpyT0GLcU9rrDTxmvG8/LpgbTnZqp1bWr6iHJ8 je8esycnAJt1/SygJc5VTzGYLRjbLctS0YvRNX9tOnw2794RIUZ92mEZOfiOTg3s 3JskBKdAYNt6kL08mxXb5iG20aBUYFOrRs7O1wDIuQNyAOnLg4E4Vn/l+2v4c9rM Ri/Ha13A9j37nsA/95MtuUjFrnaNa9S5RnNTIwia -----END CERTIFICATE-----Generated at Tue May 21 05:34:01 2024 by rpki-client on console-ams.rpki-client.org