$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa File: AS198969.roa (raw, json) Hash identifier: zochPn6epqTSmHxuVgq5Ui6fuy8Na+wlCcaUvD3oMds= Subject key identifier: 1A:74:E8:2C:AE:76:C9:AC:CD:2E:4E:58:B8:3D:C1:38:5F:38:15:88 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0DF4A10815399A12A27542593193D5C8477E9518 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa Signing time: Thu 07 Mar 2024 12:58:17 +0000 ROA not before: Thu 07 Mar 2024 12:53:17 +0000 ROA not after: Thu 06 Mar 2025 12:58:17 +0000 asID: 198969 IP address blocks: 2a05:dfc1:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f4:a1:08:15:39:9a:12:a2:75:42:59:31:93:d5:c8:47:7e:95:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 7 12:53:17 2024 GMT Not After : Mar 6 12:58:17 2025 GMT Subject: CN=1A74E82CAE76C9ACCD2E4E58B83DC1385F381588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:06:06:e4:c2:84:02:f0:e9:c1:33:0c:ca: aa:b9:1f:04:19:d5:50:7e:43:a9:7e:fe:d5:d1:0a: b2:58:8e:7a:d9:da:e9:3f:33:ce:32:7b:28:fd:dd: b1:8a:26:4c:04:f6:b9:71:af:d4:11:bc:c7:75:37: 95:e7:54:ae:b5:5e:50:0f:d6:62:5a:00:87:c8:02: 97:0d:76:89:38:d6:04:e2:4e:c0:73:b3:5e:64:18: 98:43:12:d0:60:33:59:cc:6b:4d:17:f9:98:5b:63: 65:f6:cb:ff:bc:9e:ac:d0:57:f5:71:57:b3:d6:20: 8b:33:2e:e5:7b:94:d8:2a:39:a0:36:59:21:72:ba: 9f:2b:bc:f2:76:d2:8e:77:e6:69:bd:39:47:d2:51: ac:bd:51:96:46:d6:24:22:83:bb:2b:a8:32:d8:98: 78:53:23:62:06:c6:e3:a2:6d:a3:ce:01:ec:92:26: a3:7e:ce:f3:50:2b:7e:8a:34:2c:bc:e7:ea:32:7c: 69:64:19:b1:56:ca:94:96:66:23:7b:12:03:44:5b: d0:fe:98:16:59:fe:8c:ce:cd:30:1c:b3:11:4c:34: 20:a4:ea:ae:c2:a3:51:30:98:13:73:f5:74:a3:f8: 83:0f:98:29:35:dc:91:85:3a:ea:c8:b1:bf:00:44: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:74:E8:2C:AE:76:C9:AC:CD:2E:4E:58:B8:3D:C1:38:5F:38:15:88 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS198969.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:1700::/40 Signature Algorithm: sha256WithRSAEncryption 25:3a:1f:74:5c:70:87:4f:58:84:5e:2b:97:90:93:d3:88:57: af:0d:b9:c5:b9:af:73:38:6d:ac:74:c3:62:4b:cb:98:2f:5e: f7:e5:82:d1:f6:60:49:4f:65:4a:02:1e:be:1d:5a:a4:5f:5b: 83:f2:32:ac:02:d1:03:88:cd:bc:d4:29:f7:2c:8a:f0:b0:3f: 88:80:6c:12:87:7c:04:1e:6c:eb:1b:d1:dc:b7:23:db:fa:7b: 21:29:97:0e:92:13:fb:8b:4e:cf:43:ea:b5:d6:2a:7d:41:b8: 03:4a:83:d9:f3:d8:be:b3:05:63:e3:73:22:d2:32:20:68:47: e6:28:fd:64:36:47:58:de:80:93:b6:5f:ec:c4:ec:23:c7:9b: a3:2b:a2:9f:11:1c:71:1d:e0:28:38:ac:25:54:23:18:bb:f2: 8d:bb:7e:02:1d:6b:5f:58:e5:6a:82:ce:8c:32:6d:20:ca:a4: a3:3d:f6:d0:e6:13:f5:50:54:0d:a2:83:6b:27:57:4d:e6:ed: fd:84:ac:b8:a0:69:e9:f8:78:83:ab:95:9b:7f:71:82:22:ba: ae:dc:9d:95:b6:9f:27:bf:7a:26:f3:dc:b6:b2:bc:10:09:7f: 07:60:c4:6e:e6:73:ca:ca:b5:a6:4d:9c:0b:c3:a6:15:f4:74: 5c:98:18:ab -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDfShCBU5mhKidUJZMZPVyEd+lRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMDcxMjUzMTdaFw0yNTAzMDYxMjU4MTdaMDMxMTAvBgNV BAMTKDFBNzRFODJDQUU3NkM5QUNDRDJFNEU1OEI4M0RDMTM4NUYzODE1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aQYG5MKEAvDpwTMMyqq5HwQZ 1VB+Q6l+/tXRCrJYjnrZ2uk/M84yeyj93bGKJkwE9rlxr9QRvMd1N5XnVK61XlAP 1mJaAIfIApcNdok41gTiTsBzs15kGJhDEtBgM1nMa00X+ZhbY2X2y/+8nqzQV/Vx V7PWIIszLuV7lNgqOaA2WSFyup8rvPJ20o535mm9OUfSUay9UZZG1iQig7srqDLY mHhTI2IGxuOibaPOAeySJqN+zvNQK36KNCy85+oyfGlkGbFWypSWZiN7EgNEW9D+ mBZZ/ozOzTAcsxFMNCCk6q7Co1EwmBNz9XSj+IMPmCk13JGFOurIsb8ARLs5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUGnToLK52yazNLk5YuD3BOF84FYgwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk4OTY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwRcwDQYJKoZIhvcNAQELBQADggEBACU6 H3RccIdPWIReK5eQk9OIV68NucW5r3M4bax0w2JLy5gvXvflgtH2YElPZUoCHr4d WqRfW4PyMqwC0QOIzbzUKfcsivCwP4iAbBKHfAQebOsb0dy3I9v6eyEplw6SE/uL Ts9D6rXWKn1BuANKg9nz2L6zBWPjcyLSMiBoR+Yo/WQ2R1jegJO2X+zE7CPHm6Mr op8RHHEd4Cg4rCVUIxi78o27fgIda19Y5WqCzowybSDKpKM99tDmE/VQVA2ig2sn V03m7f2ErLigaen4eIOrlZt/cYIiuq7cnZW2nye/eibz3LayvBAJfwdgxG7mc8rK taZNnAvDphX0dFyYGKs= -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org