$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199343.roa File: AS199343.roa (raw, json) Hash identifier: 2gINh1EFLgWERStqLxgYGBh1vPyD0CBm2Cph+dfgprM= Subject key identifier: 31:4A:9D:5B:62:EF:C8:A5:78:D9:DB:F5:27:BE:8A:5E:5D:87:DB:3E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3AA9D64C68102DACBFE204F8BEB54746C1396E55 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199343.roa Signing time: Sun 05 Nov 2023 04:07:16 +0000 ROA not before: Sun 05 Nov 2023 04:02:16 +0000 ROA not after: Sun 03 Nov 2024 04:07:16 +0000 asID: 199343 IP address blocks: 2a0a:6040:9800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a9:d6:4c:68:10:2d:ac:bf:e2:04:f8:be:b5:47:46:c1:39:6e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:16 2023 GMT Not After : Nov 3 04:07:16 2024 GMT Subject: CN=314A9D5B62EFC8A578D9DBF527BE8A5E5D87DB3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:be:30:c5:c3:70:5b:89:44:8e:b6:b6:26: dc:b1:3d:2e:22:0f:8f:dd:35:6a:dc:c3:88:2c:12: 6f:7d:38:5e:f7:74:ce:3c:98:6a:d4:c7:80:c7:42: f7:03:09:60:99:96:a3:33:38:f8:77:64:f4:f4:05: b8:3f:0a:45:fa:02:9d:0c:e6:64:8a:28:b1:14:93: 89:5d:d1:8e:64:d1:74:0e:be:7c:5e:84:2c:91:a4: 5d:98:1c:b9:e4:c2:36:5e:98:81:a6:31:b7:c2:8d: 4d:fd:f2:32:3a:ee:b4:36:bd:d0:57:63:66:d6:d5: 2e:62:f1:b4:56:5a:26:d8:89:14:84:b2:e4:a2:a5: 34:ec:6f:68:ce:15:fb:90:1f:5f:2f:cb:b7:93:ac: 4e:35:56:61:84:8c:34:84:61:94:72:01:55:c3:2c: 94:64:21:73:c9:ab:61:14:54:a4:cc:f6:55:1c:94: fe:63:9c:bc:15:87:55:7f:31:fe:34:08:e4:02:04: c9:e9:38:92:c5:c8:45:83:d4:79:12:2a:85:9a:02: 57:e4:b6:d0:cf:3b:e0:89:85:5c:e7:a9:e9:5d:d5: eb:af:ad:7a:59:50:e9:27:cd:aa:8e:d2:1e:28:21: 44:1a:6c:cf:dd:e5:3c:ad:42:7b:4e:27:11:e0:98: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:9D:5B:62:EF:C8:A5:78:D9:DB:F5:27:BE:8A:5E:5D:87:DB:3E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199343.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9800::/40 Signature Algorithm: sha256WithRSAEncryption b7:53:69:81:cf:64:a5:6b:70:99:cf:0c:cf:32:ce:9f:e9:83: db:1e:40:7b:79:1a:03:39:4c:d4:8b:dd:89:08:fb:ff:42:7f: f7:d3:3c:15:6d:2e:fd:b3:db:83:e8:9a:6b:5b:cd:dd:17:af: 59:c9:b3:67:c4:24:5b:4b:87:c1:c4:96:4e:2e:63:7d:f4:63: 2c:b2:62:43:bc:4c:bc:8b:72:67:0a:25:28:95:47:53:79:d9: c7:16:58:5d:4a:e8:44:ab:f4:39:9a:61:aa:90:b4:e8:6f:bc: 1c:94:8d:25:71:39:2c:27:e4:a8:6c:7e:fc:8c:1c:cb:ff:b5: 7e:62:79:9a:3f:f0:22:a9:ab:52:a7:b2:08:ba:12:25:30:40: 3e:64:82:1f:5a:f2:8e:46:c1:1b:ec:1a:6e:90:72:8b:53:d7: e1:3b:3c:04:2f:f2:4f:f5:de:64:59:ed:60:11:06:63:55:e3: ff:ed:e1:11:21:5e:69:0e:15:2a:7d:8f:18:11:62:44:a4:b6: ed:ca:d5:ad:2a:d7:f4:75:d9:12:11:df:c8:e0:58:fb:93:29: a0:08:c8:c3:8c:95:0e:cf:89:09:cc:6a:8b:59:86:44:04:a8: dc:35:aa:09:a7:95:7f:39:73:4b:68:84:75:eb:a1:7d:ba:1b: b2:36:6c:e1 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOqnWTGgQLay/4gT4vrVHRsE5blUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTZaFw0yNDExMDMwNDA3MTZaMDMxMTAvBgNV BAMTKDMxNEE5RDVCNjJFRkM4QTU3OEQ5REJGNTI3QkU4QTVFNUQ4N0RCM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtYb4wxcNwW4lEjra2JtyxPS4i D4/dNWrcw4gsEm99OF73dM48mGrUx4DHQvcDCWCZlqMzOPh3ZPT0Bbg/CkX6Ap0M 5mSKKLEUk4ld0Y5k0XQOvnxehCyRpF2YHLnkwjZemIGmMbfCjU398jI67rQ2vdBX Y2bW1S5i8bRWWibYiRSEsuSipTTsb2jOFfuQH18vy7eTrE41VmGEjDSEYZRyAVXD LJRkIXPJq2EUVKTM9lUclP5jnLwVh1V/Mf40COQCBMnpOJLFyEWD1HkSKoWaAlfk ttDPO+CJhVznqeld1euvrXpZUOknzaqO0h4oIUQabM/d5TytQntOJxHgmGMpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUMUqdW2LvyKV42dv1J76KXl2H2z4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5MzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQJgwDQYJKoZIhvcNAQELBQADggEBALdT aYHPZKVrcJnPDM8yzp/pg9seQHt5GgM5TNSL3YkI+/9Cf/fTPBVtLv2z24Pommtb zd0Xr1nJs2fEJFtLh8HElk4uY330YyyyYkO8TLyLcmcKJSiVR1N52ccWWF1K6ESr 9DmaYaqQtOhvvByUjSVxOSwn5KhsfvyMHMv/tX5ieZo/8CKpq1Knsgi6EiUwQD5k gh9a8o5GwRvsGm6QcotT1+E7PAQv8k/13mRZ7WARBmNV4//t4REhXmkOFSp9jxgR YkSktu3K1a0q1/R12RIR38jgWPuTKaAIyMOMlQ7PiQnMaotZhkQEqNw1qgmnlX85 c0tohHXroX26G7I2bOE= -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org