$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199044.roa File: AS199044.roa (raw, json) Hash identifier: N4vTQ88spvOa+/EhDIVszQWZKp8vOsy7yomGDB9PBXI= Subject key identifier: 69:92:FA:AD:B3:3B:E6:24:43:18:60:5E:83:13:6D:16:C7:8A:29:11 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7AB23D5B7DE977E8C12B41D0164961634A562427 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199044.roa Signing time: Sun 12 May 2024 00:59:35 +0000 ROA not before: Sun 12 May 2024 00:54:35 +0000 ROA not after: Sun 11 May 2025 00:59:35 +0000 asID: 199044 IP address blocks: 2a05:dfc1:5700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b2:3d:5b:7d:e9:77:e8:c1:2b:41:d0:16:49:61:63:4a:56:24:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 12 00:54:35 2024 GMT Not After : May 11 00:59:35 2025 GMT Subject: CN=6992FAADB33BE6244318605E83136D16C78A2911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:85:29:3f:59:73:3c:d4:b6:57:86:b4:c1: 7c:a8:39:f3:8f:50:10:ce:10:03:03:6a:39:45:b8: c7:93:fd:70:ce:16:f3:53:61:96:84:19:7d:b8:cd: 66:51:00:bc:1d:4c:0f:d5:5d:ec:10:03:e8:ad:ab: e1:37:0d:61:70:a7:2a:3a:b1:07:fa:56:54:f2:3f: 46:5c:e3:21:e5:29:97:5b:8c:a1:65:ea:4b:47:b4: 0b:cf:72:97:8c:ce:a3:95:ad:8a:ab:b1:16:b0:40: 17:0f:05:d9:26:a5:3a:14:f3:ee:15:ae:12:73:3f: 7b:72:a0:21:17:eb:c9:a9:41:a4:3a:69:7f:b5:db: 8b:f4:e5:f5:6c:cf:30:a5:11:06:66:b5:6d:60:25: e2:e3:07:1a:bf:52:af:4c:f6:f0:4e:3c:14:c0:5a: 73:f5:df:28:89:89:09:9c:83:84:79:f2:ef:8a:6a: d0:dd:06:77:56:45:c7:47:09:68:34:ef:98:c2:ea: 02:34:82:5f:df:d6:d2:7d:7b:57:e4:99:c2:44:27: 4e:67:db:ea:ac:17:df:45:66:46:50:a3:7f:68:10: 36:a3:a2:20:67:f0:0b:88:cc:1a:2a:5b:d7:3c:f8: f7:e4:86:00:c0:2d:28:4a:1d:13:d0:2b:81:37:ff: 49:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:FA:AD:B3:3B:E6:24:43:18:60:5E:83:13:6D:16:C7:8A:29:11 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:5700::/40 Signature Algorithm: sha256WithRSAEncryption 1b:63:2c:12:01:f6:c6:74:09:0a:3f:db:5c:52:9d:d3:f4:3c: f0:06:c3:4d:ef:c4:cb:eb:f4:2a:15:4b:a0:49:61:35:3b:ec: 89:68:f4:fa:1a:50:de:82:66:56:97:21:d1:04:b0:d5:b9:e2: b1:ed:fd:80:72:6c:5d:18:53:7f:37:86:16:40:aa:00:ba:5f: 40:f6:18:e3:df:2d:d0:27:2d:85:7e:cf:32:e9:9d:f4:11:0c: 14:82:a3:b4:ec:20:91:fc:a2:a4:17:a9:14:81:85:ad:cd:4b: 4c:fe:4f:07:35:d0:46:87:7f:df:26:14:5b:23:21:ab:af:70: 70:db:87:eb:c4:92:74:f5:72:7c:e5:17:ce:23:34:ad:ef:b7: 00:02:1e:6e:e4:fe:65:35:b6:90:8d:05:b6:6b:17:fc:00:1d: 4c:d7:fa:d0:84:9a:e7:45:fb:1b:58:e3:b1:81:c8:16:ca:94: a4:27:da:ea:7a:3d:e5:1f:9d:50:05:7d:92:0f:62:7f:de:dd: 9a:5c:5a:93:c0:2a:d0:35:d8:b3:43:f3:17:47:f9:8b:6f:90: 00:c4:f7:f0:6e:9f:0c:e8:00:b4:f5:15:b5:49:fa:85:84:38: 9f:c3:aa:60:af:c6:0a:c7:8a:5f:5b:f1:ae:c3:30:e2:88:66: c3:0b:52:8b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUerI9W33pd+jBK0HQFklhY0pWJCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MTIwMDU0MzVaFw0yNTA1MTEwMDU5MzVaMDMxMTAvBgNV BAMTKDY5OTJGQUFEQjMzQkU2MjQ0MzE4NjA1RTgzMTM2RDE2Qzc4QTI5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gYUpP1lzPNS2V4a0wXyoOfOP UBDOEAMDajlFuMeT/XDOFvNTYZaEGX24zWZRALwdTA/VXewQA+itq+E3DWFwpyo6 sQf6VlTyP0Zc4yHlKZdbjKFl6ktHtAvPcpeMzqOVrYqrsRawQBcPBdkmpToU8+4V rhJzP3tyoCEX68mpQaQ6aX+124v05fVszzClEQZmtW1gJeLjBxq/Uq9M9vBOPBTA WnP13yiJiQmcg4R58u+KatDdBndWRcdHCWg075jC6gI0gl/f1tJ9e1fkmcJEJ05n 2+qsF99FZkZQo39oEDajoiBn8AuIzBoqW9c8+PfkhgDALShKHRPQK4E3/0klAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUaZL6rbM75iRDGGBegxNtFseKKREwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5MDQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwVcwDQYJKoZIhvcNAQELBQADggEBABtj LBIB9sZ0CQo/21xSndP0PPAGw03vxMvr9CoVS6BJYTU77Ilo9PoaUN6CZlaXIdEE sNW54rHt/YBybF0YU383hhZAqgC6X0D2GOPfLdAnLYV+zzLpnfQRDBSCo7TsIJH8 oqQXqRSBha3NS0z+Twc10EaHf98mFFsjIauvcHDbh+vEknT1cnzlF84jNK3vtwAC Hm7k/mU1tpCNBbZrF/wAHUzX+tCEmudF+xtY47GByBbKlKQn2up6PeUfnVAFfZIP Yn/e3ZpcWpPAKtA12LND8xdH+YtvkADE9/BunwzoALT1FbVJ+oWEOJ/DqmCvxgrH il9b8a7DMOKIZsMLUos= -----END CERTIFICATE-----Generated at Thu May 16 13:03:37 2024 by rpki-client on console-ams.rpki-client.org