$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198092.roa File: AS198092.roa (raw, json) Hash identifier: kCPpSNXar143PNDHnxRceMPVbjDI5/F43HkaX6q5yg8= Subject key identifier: 9D:36:E4:8C:39:06:CC:63:5F:A2:86:00:C1:73:C5:68:B7:28:87:37 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 02D18EA1AE26290F9694BCD0CF0C5749AE719F87 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198092.roa Signing time: Fri 16 Jun 2023 11:05:21 +0000 ROA not before: Fri 16 Jun 2023 11:00:21 +0000 ROA not after: Fri 14 Jun 2024 11:05:21 +0000 asID: 198092 IP address blocks: 2a05:dfc1:5800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d1:8e:a1:ae:26:29:0f:96:94:bc:d0:cf:0c:57:49:ae:71:9f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 16 11:00:21 2023 GMT Not After : Jun 14 11:05:21 2024 GMT Subject: CN=9D36E48C3906CC635FA28600C173C568B7288737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:b5:37:10:84:96:e4:b2:08:34:85:f2:b4: 11:db:a8:6f:1d:ae:32:70:d8:6b:eb:43:da:d2:e1: 78:01:fb:1d:5c:6e:e5:6d:6d:d1:50:cb:65:83:0f: 96:75:dc:23:29:73:6e:16:fb:69:40:14:ac:60:34: 95:c5:9f:10:17:99:22:32:ac:81:ee:78:cb:0f:6e: 0b:2b:aa:0c:72:46:1a:ff:bb:29:76:a6:3f:4e:bc: 63:c7:39:9f:d0:d7:69:ea:19:9f:27:fc:22:d3:44: 36:d9:f0:16:41:0f:7f:36:a1:1b:ad:bb:59:7a:dc: a2:36:48:dc:eb:ab:91:56:ac:be:ac:6a:72:62:91: 42:53:49:1b:fe:da:31:0b:8d:b6:53:93:dc:e3:4f: 6a:b1:94:26:1a:28:68:d8:16:bb:c8:08:96:18:fa: 57:67:8f:c5:79:de:da:4e:be:3c:f6:c6:25:b8:72: a1:37:97:50:5b:a1:d0:30:0f:ef:07:f8:b3:8d:77: 93:aa:b7:ae:34:05:6d:f8:09:1a:1c:00:eb:6d:77: 4b:ee:b6:ba:b3:31:c6:4a:54:69:e7:b8:c7:e1:66: da:33:e6:02:ee:c3:da:8d:f6:22:65:de:fa:42:c3: af:ae:42:c1:23:5a:93:0a:d6:38:04:76:2f:9c:3a: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:E4:8C:39:06:CC:63:5F:A2:86:00:C1:73:C5:68:B7:28:87:37 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198092.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5800::/40 Signature Algorithm: sha256WithRSAEncryption 0f:b7:f3:29:b1:17:72:65:5a:3c:eb:a2:41:ce:49:50:9d:2d: c2:d6:47:f7:00:22:51:1d:3c:72:2f:02:17:4c:a4:cf:a6:fb: 3f:a4:a4:17:46:91:51:f2:c3:45:59:76:68:00:1a:05:74:f3: f3:42:e8:85:3f:4d:da:52:b7:69:54:5b:14:bd:42:ff:0b:a4: 43:fc:79:fd:1b:0b:f5:90:38:c9:d3:66:9a:4d:4b:34:db:41: 36:0e:4f:2f:63:8b:0a:e8:0d:96:fc:fa:b4:aa:82:6a:bc:d8: 3d:1b:55:ef:d6:6b:b3:01:83:70:a3:f2:56:a5:1b:65:f9:9c: 36:8d:45:03:10:c4:51:ec:a0:ec:91:40:bf:7a:b7:07:db:e6: 94:08:7f:81:03:6c:5e:be:46:8a:4c:f0:d1:46:d2:86:c5:e6: 41:b3:e8:9e:74:2b:93:25:dd:c2:1a:f8:99:68:92:12:70:e3: 94:9b:82:c4:f1:5f:63:a7:da:bb:8e:df:72:13:a3:71:5c:05: 22:3c:4d:be:6d:66:25:94:ad:de:ad:06:7b:03:63:c8:fc:4a: db:4b:33:b8:46:d9:d4:ae:6e:c7:2a:4f:d5:91:78:a6:c9:1c: 3f:bb:67:1b:b9:49:7a:3c:bb:9e:58:0d:d3:83:1d:69:8b:39: 2a:eb:0d:7e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUAtGOoa4mKQ+WlLzQzwxXSa5xn4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzA2MTYxMTAwMjFaFw0yNDA2MTQxMTA1MjFaMDMxMTAvBgNV BAMTKDlEMzZFNDhDMzkwNkNDNjM1RkEyODYwMEMxNzNDNTY4QjcyODg3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwrU3EISW5LIINIXytBHbqG8d rjJw2GvrQ9rS4XgB+x1cbuVtbdFQy2WDD5Z13CMpc24W+2lAFKxgNJXFnxAXmSIy rIHueMsPbgsrqgxyRhr/uyl2pj9OvGPHOZ/Q12nqGZ8n/CLTRDbZ8BZBD382oRut u1l63KI2SNzrq5FWrL6sanJikUJTSRv+2jELjbZTk9zjT2qxlCYaKGjYFrvICJYY +ldnj8V53tpOvjz2xiW4cqE3l1BbodAwD+8H+LONd5Oqt640BW34CRocAOttd0vu trqzMcZKVGnnuMfhZtoz5gLuw9qN9iJl3vpCw6+uQsEjWpMK1jgEdi+cOgxZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUnTbkjDkGzGNfooYAwXPFaLcohzcwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4MDkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVgwDQYJKoZIhvcNAQELBQADggEBAA+3 8ymxF3JlWjzrokHOSVCdLcLWR/cAIlEdPHIvAhdMpM+m+z+kpBdGkVHyw0VZdmgA GgV08/NC6IU/TdpSt2lUWxS9Qv8LpEP8ef0bC/WQOMnTZppNSzTbQTYOTy9jiwro DZb8+rSqgmq82D0bVe/Wa7MBg3Cj8lalG2X5nDaNRQMQxFHsoOyRQL96twfb5pQI f4EDbF6+RopM8NFG0obF5kGz6J50K5Ml3cIa+JlokhJw45SbgsTxX2On2ruO33IT o3FcBSI8Tb5tZiWUrd6tBnsDY8j8SttLM7hG2dSubscqT9WReKbJHD+7Zxu5SXo8 u55YDdODHWmLOSrrDX4= -----END CERTIFICATE-----Generated at Thu May 16 11:56:09 2024 by rpki-client on console-fra.rpki-client.org