$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198231.roa File: AS198231.roa (raw, json) Hash identifier: 0Z0u9LhP486Qb4nlRF+8fPoVlxIfsWQTJzSRnywsy/Y= Subject key identifier: AC:BD:F4:36:B7:EA:B6:6E:D5:DC:E2:C9:AD:8D:6D:17:59:C7:1A:8D Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1C8D5DBE3605AC66367DB1FC78B7F90EF88EEAF5 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198231.roa Signing time: Mon 25 Mar 2024 02:11:40 +0000 ROA not before: Mon 25 Mar 2024 02:06:40 +0000 ROA not after: Mon 24 Mar 2025 02:11:40 +0000 asID: 198231 IP address blocks: 2a05:dfc1:300::/40 maxlen: 48 2a05:dfc1:2600::/40 maxlen: 48 2a05:dfc1:2800::/40 maxlen: 48 2a05:dfc1:2900::/40 maxlen: 48 2a06:9f81:1100::/40 maxlen: 48 2a0a:6040:8c00::/40 maxlen: 48 2a0a:6040:9b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8d:5d:be:36:05:ac:66:36:7d:b1:fc:78:b7:f9:0e:f8:8e:ea:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 25 02:06:40 2024 GMT Not After : Mar 24 02:11:40 2025 GMT Subject: CN=ACBDF436B7EAB66ED5DCE2C9AD8D6D1759C71A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:2b:64:26:87:84:3f:f8:a5:2d:5c:1b:86: c6:d7:86:74:c0:e5:86:7f:cb:37:be:18:56:af:e8: 1c:b5:a5:86:9b:20:00:d1:37:e9:5c:21:8e:15:02: 5b:e8:1c:27:1e:ce:d4:95:7f:58:5f:1b:7a:f6:28: 6a:6e:a6:41:50:62:5f:3c:a3:3f:a8:21:fa:ec:bd: 79:1d:10:d3:fd:19:7c:5e:d9:fb:1f:1a:29:1d:a0: b9:7e:da:3b:91:07:5f:c3:a1:a9:dc:59:1b:ea:fd: fe:a0:b0:e7:9f:ef:ac:8b:08:e7:ab:d1:64:fe:bb: 72:95:c0:92:ea:d9:5e:4e:94:25:f4:ec:a2:fc:99: 6f:2b:7d:66:57:67:7d:f3:ab:b5:69:ee:8a:90:24: af:d3:4f:12:f3:29:59:aa:5c:5a:2f:fc:24:bc:cd: 96:f3:e9:18:87:d3:a0:25:2e:c6:09:ef:b0:6c:19: 6b:a4:1e:13:51:8f:5a:5f:e8:6d:52:a8:e4:0e:cc: 96:1f:2c:11:21:f5:b2:a9:37:2c:50:5d:83:f2:59: e1:d6:17:ce:e3:de:48:7f:55:73:6c:fa:85:08:40: 9e:ae:2c:27:e0:79:69:f7:f5:25:a1:e9:87:a6:9a: d0:f8:25:24:26:0f:13:64:21:6c:e3:2d:23:40:df: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:F4:36:B7:EA:B6:6E:D5:DC:E2:C9:AD:8D:6D:17:59:C7:1A:8D X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:300::/40 2a05:dfc1:2600::/40 2a05:dfc1:2800::/39 2a06:9f81:1100::/40 2a0a:6040:8c00::/40 2a0a:6040:9b00::/40 Signature Algorithm: sha256WithRSAEncryption 34:2a:08:95:aa:e7:2f:1d:d4:44:0a:6d:29:35:b8:36:48:21: 85:db:0d:9b:6d:6b:a9:78:9a:b8:e4:8a:bb:5a:04:d0:6c:13: 6a:f1:b8:1c:54:4b:22:e2:1d:a1:6a:5e:cf:86:2a:2f:8f:ce: 98:61:0c:5c:94:e8:d8:17:96:12:66:5b:da:7d:a7:7f:7b:20: 4d:ae:5a:05:7c:67:0d:95:2a:3f:ab:6f:5a:aa:67:61:33:5b: 70:21:9a:73:ed:88:e1:77:bc:dd:4d:c5:ad:00:5b:da:4e:35: 7a:93:de:54:e0:c4:33:82:95:ca:1c:a5:2c:6d:36:a3:98:fd: 20:3b:7f:93:d2:c7:25:ae:61:67:60:46:a9:f1:f7:60:94:91: 23:ac:30:fe:c3:8c:55:85:5e:8d:cc:ad:bf:3a:ce:de:ea:0b: 30:8c:bc:1a:4c:6a:03:2d:f8:bc:79:21:d1:2a:b8:15:22:5a: fa:26:05:61:5b:f4:6a:64:60:5e:12:2f:fc:d9:9f:04:dd:2d: 7c:bf:24:f1:0e:5e:8b:39:18:75:0f:d1:e4:0c:52:b2:22:33: a3:c2:a9:07:cf:ac:06:a2:f6:13:89:dc:b3:e2:78:90:67:cc: e0:4b:16:96:0e:9e:e2:20:21:e6:fe:53:95:e0:d6:e9:2f:b4: 45:31:39:6d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUHI1dvjYFrGY2fbH8eLf5DviO6vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMjUwMjA2NDBaFw0yNTAzMjQwMjExNDBaMDMxMTAvBgNV BAMTKEFDQkRGNDM2QjdFQUI2NkVENURDRTJDOUFEOEQ2RDE3NTlDNzFBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcytkJoeEP/ilLVwbhsbXhnTA 5YZ/yze+GFav6By1pYabIADRN+lcIY4VAlvoHCceztSVf1hfG3r2KGpupkFQYl88 oz+oIfrsvXkdENP9GXxe2fsfGikdoLl+2juRB1/DoancWRvq/f6gsOef76yLCOer 0WT+u3KVwJLq2V5OlCX07KL8mW8rfWZXZ33zq7Vp7oqQJK/TTxLzKVmqXFov/CS8 zZbz6RiH06AlLsYJ77BsGWukHhNRj1pf6G1SqOQOzJYfLBEh9bKpNyxQXYPyWeHW F87j3kh/VXNs+oUIQJ6uLCfgeWn39SWh6YemmtD4JSQmDxNkIWzjLSNA36eJAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUrL30Nrfqtm7V3OLJrY1tF1nHGo0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODA2BAIAAjAwAwYAKgXfwQMDBgAqBd/BJgMGASoF38EoAwYAKgaf gREDBgAqCmBAjAMGACoKYECbMA0GCSqGSIb3DQEBCwUAA4IBAQA0KgiVqucvHdRE Cm0pNbg2SCGF2w2bbWupeJq45Iq7WgTQbBNq8bgcVEsi4h2hal7Phiovj86YYQxc lOjYF5YSZlvafad/eyBNrloFfGcNlSo/q29aqmdhM1twIZpz7Yjhd7zdTcWtAFva TjV6k95U4MQzgpXKHKUsbTajmP0gO3+T0sclrmFnYEap8fdglJEjrDD+w4xVhV6N zK2/Os7e6gswjLwaTGoDLfi8eSHRKrgVIlr6JgVhW/RqZGBeEi/82Z8E3S18vyTx Dl6LORh1D9HkDFKyIjOjwqkHz6wGovYTidyz4niQZ8zgSxaWDp7iICHm/lOV4Nbp L7RFMTlt -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org