$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197841.roa File: AS197841.roa (raw, json) Hash identifier: 0puUdUcIAYz2yuhXsLg7VgCoWK2zqdM+7eQ4HOxfCiQ= Subject key identifier: FB:96:2F:B2:AF:03:F1:73:0A:13:45:CB:CC:46:8C:41:DE:18:F7:4E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 194156B8C30889F197D00AF5FA213DFD4BEE0E76 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197841.roa Signing time: Tue 20 Aug 2024 09:49:50 +0000 ROA not before: Tue 20 Aug 2024 09:44:50 +0000 ROA not after: Tue 19 Aug 2025 09:49:50 +0000 asID: 197841 IP address blocks: 2a05:dfc1:a00::/40 maxlen: 48 2a05:dfc1:6b00::/40 maxlen: 48 2a05:dfc1:9700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:41:56:b8:c3:08:89:f1:97:d0:0a:f5:fa:21:3d:fd:4b:ee:0e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Aug 20 09:44:50 2024 GMT Not After : Aug 19 09:49:50 2025 GMT Subject: CN=FB962FB2AF03F1730A1345CBCC468C41DE18F74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:12:a7:b6:76:fb:3c:a5:a2:c7:69:20:78: 07:4b:cd:34:64:8b:2b:91:83:30:62:fc:3c:6e:1f: d9:9e:ac:f8:3c:c5:86:ff:31:57:20:fe:4a:01:4f: dc:31:5b:63:ad:bd:c0:e4:60:ca:7f:84:03:4d:45: 34:56:d6:ae:cb:26:44:8e:bc:07:c8:3b:96:c3:32: 9a:fd:ba:88:0b:9d:dd:9c:be:6f:50:de:42:43:fb: 1c:5a:9b:2f:a0:84:f4:09:77:6f:49:f4:1f:53:51: 97:28:ed:ea:e6:4a:6e:76:1f:77:94:29:cb:8e:f0: 05:8c:24:5c:05:0e:c8:22:cd:fb:a7:b2:7b:22:50: 4b:c9:23:97:f5:33:50:24:35:2a:0d:57:8b:04:f3: f2:46:2c:bf:c7:68:8e:be:3b:b0:d8:63:c5:be:81: 1c:20:d6:b7:02:04:0a:8d:38:ad:6e:86:2f:92:21: 1b:bf:a1:34:87:1e:18:e6:dd:e5:c3:d7:2a:85:10: f8:b1:74:a0:2a:22:8d:a9:52:3e:34:53:23:ab:b7: 61:42:d1:19:52:b2:64:ee:14:a0:66:70:bc:54:6b: c3:37:e3:fe:ea:77:aa:58:5b:9f:0f:40:3d:d6:8b: 68:31:6a:84:fa:ad:80:3a:6c:4c:53:65:db:af:d0: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:96:2F:B2:AF:03:F1:73:0A:13:45:CB:CC:46:8C:41:DE:18:F7:4E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197841.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:a00::/40 2a05:dfc1:6b00::/40 2a05:dfc1:9700::/40 Signature Algorithm: sha256WithRSAEncryption 46:d4:30:d5:59:4a:1d:d0:29:1c:32:87:25:14:6d:c6:68:63: 7b:b3:61:72:4b:f1:eb:87:b0:8c:1f:14:8f:fa:93:32:f9:3e: ec:d3:31:c6:56:60:25:0a:6f:13:d8:ab:96:50:26:3f:7c:44: 3b:57:f5:ba:02:b3:0f:49:f5:df:a6:15:91:67:55:f0:a7:1d: 30:90:29:ef:cb:ad:8c:6f:95:11:2e:cc:af:b5:e8:0e:50:9f: df:94:cb:4b:5a:fd:66:b6:19:1f:4b:4d:6c:04:16:60:cc:fc: 69:a7:25:c9:0b:2f:27:a9:4f:19:bf:54:53:c4:9e:16:02:7a: 5e:71:ec:e2:be:18:43:1f:90:33:ac:2f:20:88:7b:53:3b:71: 6c:69:a3:43:f6:88:86:44:2d:46:b5:44:33:d8:2b:0b:e9:22: 3b:e3:fd:8d:4a:0f:25:77:f3:72:3c:e5:40:71:75:36:a6:6c: a3:a2:53:88:2a:1c:75:6c:37:e1:26:2a:ec:5d:9a:ca:56:49: d6:a0:93:c1:42:78:f9:95:a5:5f:4e:f0:98:ee:d6:44:c8:63: ca:aa:17:f3:9c:bb:0d:46:b0:1e:3d:27:d6:1e:9d:63:e6:5e: 94:d3:7e:9b:63:e8:d9:e8:6e:f2:b8:77:3e:3d:f7:ca:ab:70: 1f:fc:d4:7a -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUGUFWuMMIifGX0Ar1+iE9/UvuDnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA4MjAwOTQ0NTBaFw0yNTA4MTkwOTQ5NTBaMDMxMTAvBgNV BAMTKEZCOTYyRkIyQUYwM0YxNzMwQTEzNDVDQkNDNDY4QzQxREUxOEY3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhBKntnb7PKWix2kgeAdLzTRk iyuRgzBi/DxuH9merPg8xYb/MVcg/koBT9wxW2OtvcDkYMp/hANNRTRW1q7LJkSO vAfIO5bDMpr9uogLnd2cvm9Q3kJD+xxamy+ghPQJd29J9B9TUZco7ermSm52H3eU KcuO8AWMJFwFDsgizfunsnsiUEvJI5f1M1AkNSoNV4sE8/JGLL/HaI6+O7DYY8W+ gRwg1rcCBAqNOK1uhi+SIRu/oTSHHhjm3eXD1yqFEPixdKAqIo2pUj40UyOrt2FC 0RlSsmTuFKBmcLxUa8M34/7qd6pYW58PQD3Wi2gxaoT6rYA6bExTZduv0LOtAgMB AAGjggIEMIICADAdBgNVHQ4EFgQU+5Yvsq8D8XMKE0XLzEaMQd4Y904wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk3ODQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAAjAYAwYAKgXfwQoDBgAqBd/BawMGACoF38GXMA0GCSqG SIb3DQEBCwUAA4IBAQBG1DDVWUod0CkcMoclFG3GaGN7s2FyS/Hrh7CMHxSP+pMy +T7s0zHGVmAlCm8T2KuWUCY/fEQ7V/W6ArMPSfXfphWRZ1Xwpx0wkCnvy62Mb5UR LsyvtegOUJ/flMtLWv1mthkfS01sBBZgzPxppyXJCy8nqU8Zv1RTxJ4WAnpecezi vhhDH5AzrC8giHtTO3FsaaND9oiGRC1GtUQz2CsL6SI74/2NSg8ld/NyPOVAcXU2 pmyjolOIKhx1bDfhJirsXZrKVknWoJPBQnj5laVfTvCY7tZEyGPKqhfznLsNRrAe PSfWHp1j5l6U036bY+jZ6G7yuHc+PffKq3Af/NR6 -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:54 2024 by rpki-client on console-ams.rpki-client.org