$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198804.roa File: AS198804.roa (raw, json) Hash identifier: D6qe0sQz6Il3oxNSR2z2diBzHabLWyqyTwBn0utbNzs= Subject key identifier: C1:C0:D8:F8:82:B9:8C:1D:1C:0F:5C:E1:41:31:7C:73:D6:61:3D:0C Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 083B9DD44492842A42A382E3308DA5749688CE82 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198804.roa Signing time: Thu 21 Mar 2024 11:58:23 +0000 ROA not before: Thu 21 Mar 2024 11:53:23 +0000 ROA not after: Thu 20 Mar 2025 11:58:23 +0000 asID: 198804 IP address blocks: 2a05:dfc1:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3b:9d:d4:44:92:84:2a:42:a3:82:e3:30:8d:a5:74:96:88:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 21 11:53:23 2024 GMT Not After : Mar 20 11:58:23 2025 GMT Subject: CN=C1C0D8F882B98C1D1C0F5CE141317C73D6613D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:74:7e:c9:d8:4c:67:91:c2:80:f2:c0:40: fe:dd:7e:b9:e1:4f:72:50:38:f8:39:db:eb:e7:fe: 41:14:e9:03:07:03:2c:ec:c8:a5:04:41:63:72:59: 8d:13:94:f2:26:77:7c:97:a7:78:85:72:cd:2d:03: 69:76:fe:0b:27:13:a1:68:b1:e1:4d:1d:5d:34:a5: c0:c6:77:74:24:68:ba:bd:04:c2:da:6c:9a:a6:dd: 01:45:57:c7:36:14:92:24:be:1d:6c:7c:c7:42:28: 93:9f:2e:57:bc:14:2d:41:5f:1c:06:03:34:15:4e: 68:e6:c1:92:f4:fa:16:c3:ba:6f:1b:ca:cc:6b:18: 04:82:3e:c1:1b:5e:8c:bc:f9:89:05:48:81:f5:fc: ea:7b:a1:98:26:ff:be:47:5e:76:24:46:aa:2a:66: 6d:5f:83:84:34:a7:02:54:f1:a6:6d:48:87:45:a0: a8:f4:24:7b:2c:98:bf:94:46:13:fa:bf:71:dd:7f: 15:5a:12:03:a7:64:13:0e:2b:2b:8d:2e:22:38:f0: ac:77:2a:4a:2a:5c:3f:e1:f8:00:29:2e:46:ed:6b: 94:05:92:fb:db:fc:e9:03:26:32:f4:7f:30:14:3f: 92:60:09:0e:af:a2:3c:ab:0f:d0:e0:a9:5e:9e:ef: d3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C0:D8:F8:82:B9:8C:1D:1C:0F:5C:E1:41:31:7C:73:D6:61:3D:0C X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198804.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 67:98:e6:bd:52:7b:88:10:38:b0:59:72:3a:19:95:a3:98:91: 0d:04:b3:dc:6e:64:0d:5c:7f:14:fe:27:0d:60:54:0b:20:a1: b8:50:32:bc:a9:bd:74:bf:8a:ca:0d:a9:e0:cc:c8:3f:c0:09: c8:bc:62:8e:2b:3c:a8:42:5f:f1:a0:13:e8:63:d8:57:5f:7f: c3:3d:db:53:43:a2:fe:f7:65:c3:47:d3:c3:78:4e:53:12:cd: f1:11:b4:5b:0c:2e:5d:9a:da:a2:eb:7c:0c:41:9b:99:7f:39: d1:7b:f4:5d:8f:99:f8:d4:09:94:b4:8c:38:0a:c0:a3:5e:9e: af:07:5c:f7:38:ad:38:3a:52:fd:ae:a0:0b:49:8d:d9:21:18: 2c:53:87:08:d2:52:a8:c9:8d:e1:d1:eb:6c:5d:e7:f2:f2:1d: 00:8a:fb:ed:ed:47:68:bd:4d:75:ac:7c:bf:2c:af:d6:0e:e7: db:7f:ca:bc:f7:1d:1b:38:eb:40:7e:6c:c7:40:11:22:b2:5a: 59:a4:57:a8:11:a6:a5:d4:3d:01:a2:b4:8e:92:54:c4:66:b6: 73:a4:42:4e:e3:a5:e3:98:b2:c5:ec:ed:91:3d:c5:1d:d9:82: 2e:f9:55:a2:49:ac:3c:bf:99:e0:32:c9:bb:59:b0:27:ee:2b: 8f:19:19:14 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCDud1ESShCpCo4LjMI2ldJaIzoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMjExMTUzMjNaFw0yNTAzMjAxMTU4MjNaMDMxMTAvBgNV BAMTKEMxQzBEOEY4ODJCOThDMUQxQzBGNUNFMTQxMzE3QzczRDY2MTNEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVnR+ydhMZ5HCgPLAQP7dfrnh T3JQOPg52+vn/kEU6QMHAyzsyKUEQWNyWY0TlPImd3yXp3iFcs0tA2l2/gsnE6Fo seFNHV00pcDGd3QkaLq9BMLabJqm3QFFV8c2FJIkvh1sfMdCKJOfLle8FC1BXxwG AzQVTmjmwZL0+hbDum8bysxrGASCPsEbXoy8+YkFSIH1/Op7oZgm/75HXnYkRqoq Zm1fg4Q0pwJU8aZtSIdFoKj0JHssmL+URhP6v3HdfxVaEgOnZBMOKyuNLiI48Kx3 KkoqXD/h+AApLkbta5QFkvvb/OkDJjL0fzAUP5JgCQ6vojyrD9DgqV6e79O7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUwcDY+IK5jB0cD1zhQTF8c9ZhPQwwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4ODA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwS4wDQYJKoZIhvcNAQELBQADggEBAGeY 5r1Se4gQOLBZcjoZlaOYkQ0Es9xuZA1cfxT+Jw1gVAsgobhQMrypvXS/isoNqeDM yD/ACci8Yo4rPKhCX/GgE+hj2Fdff8M921NDov73ZcNH08N4TlMSzfERtFsMLl2a 2qLrfAxBm5l/OdF79F2PmfjUCZS0jDgKwKNenq8HXPc4rTg6Uv2uoAtJjdkhGCxT hwjSUqjJjeHR62xd5/LyHQCK++3tR2i9TXWsfL8sr9YO59t/yrz3HRs460B+bMdA ESKyWlmkV6gRpqXUPQGitI6SVMRmtnOkQk7jpeOYssXs7ZE9xR3Zgi75VaJJrDy/ meAyybtZsCfuK48ZGRQ= -----END CERTIFICATE-----Generated at Mon May 20 13:08:21 2024 by rpki-client on console-fra.rpki-client.org