$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199607.roa File: AS199607.roa (raw, json) Hash identifier: TobujBStS8CF7+oGGBnM4m80nU6g3zEumpotaKI81Ig= Subject key identifier: 75:ED:86:6D:57:70:7D:0C:61:D0:74:23:F3:61:59:B6:7D:02:5B:F6 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7C16D44FD7EAC3BF34D0B563733D2E90E1CBE269 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199607.roa Signing time: Sun 05 Nov 2023 04:07:12 +0000 ROA not before: Sun 05 Nov 2023 04:02:12 +0000 ROA not after: Sun 03 Nov 2024 04:07:12 +0000 asID: 199607 IP address blocks: 2a0a:6040:7f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:16:d4:4f:d7:ea:c3:bf:34:d0:b5:63:73:3d:2e:90:e1:cb:e2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:12 2023 GMT Not After : Nov 3 04:07:12 2024 GMT Subject: CN=75ED866D57707D0C61D07423F36159B67D025BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:59:fb:70:1e:83:a2:77:cf:30:2a:f7:94:83: ff:e0:e8:71:4e:ef:7a:a3:49:b0:3d:36:0e:69:1b: b4:b7:c1:33:72:04:58:33:42:de:a7:81:74:2d:e0: 14:ac:fe:d1:67:3b:2e:bb:b0:df:5d:4d:c2:04:78: e9:e1:25:02:de:d0:9a:26:56:a1:fb:ed:68:53:2e: be:7a:a6:f3:e7:60:7e:b9:7a:4c:22:de:72:b2:b5: 1d:5b:20:6b:65:9c:d4:c3:a3:66:56:62:e0:7a:9b: 4d:6d:ec:de:cd:1c:64:f1:19:8d:bf:14:ce:e4:36: 5e:2b:e2:26:3c:4f:ea:4a:d1:95:0b:eb:41:c6:aa: ae:be:04:d3:86:50:c1:01:2a:df:dd:d1:ba:b1:a7: f3:5b:b3:e2:56:ac:a6:06:12:f9:c9:d7:e0:9d:f0: 57:46:90:f3:fb:b7:e3:02:1c:3e:f9:7b:f4:81:6a: fb:02:93:3a:ff:88:bc:83:8d:55:b4:30:fc:91:67: ab:9a:92:28:e1:04:5c:ea:e4:cb:e3:8d:82:c5:0e: 2e:3f:14:f6:4b:5d:d7:8e:0b:af:8b:41:bb:41:81: 6b:bd:d0:15:65:2d:0b:3a:db:67:37:ef:12:83:85: 79:8b:bd:91:db:23:d8:fe:cd:d0:bf:23:1d:f0:09: ee:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:ED:86:6D:57:70:7D:0C:61:D0:74:23:F3:61:59:B6:7D:02:5B:F6 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:7f00::/40 Signature Algorithm: sha256WithRSAEncryption ba:2e:bc:de:42:c8:c6:e6:39:19:68:fa:bc:00:32:69:e7:01: 67:1f:a6:00:87:e1:39:4d:14:4a:73:b1:0f:f0:8a:84:ee:bf: 7e:59:31:0a:d4:5f:59:49:df:e8:d6:c6:48:33:71:4a:70:9a: ee:ed:7c:01:ee:49:4c:8e:c0:68:17:52:83:2f:9e:3e:08:c5: 35:e8:b1:e2:3f:44:be:b2:12:8e:ee:00:eb:21:03:af:fb:1c: 25:03:f1:9c:a6:90:48:7d:3f:56:32:af:52:cb:29:99:da:d4: 70:c5:df:b6:5c:c8:18:e2:2e:54:93:dd:9b:15:ca:76:ef:f6: 11:aa:df:db:3c:ab:be:dc:1a:3f:12:60:ab:23:df:cd:70:e4: d3:97:29:d2:45:1e:49:a5:3f:e0:0e:af:b1:44:81:8a:21:a4: 48:bb:d5:35:bf:29:9c:3e:73:72:f7:75:a5:6b:94:5e:ef:b8: 2d:e2:03:22:da:f8:09:2d:df:41:57:e2:b9:f8:f2:7f:c7:e3: 9d:ef:5c:ea:27:fb:87:4a:22:96:6e:e1:2b:c9:9f:e1:b3:16: e2:bf:fa:fe:b6:49:65:8c:45:86:fb:55:4d:99:ca:44:c3:d1: f7:b9:d8:3a:45:66:09:f9:c8:71:6e:2c:d0:3e:c0:00:48:f4: fa:6f:db:84 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfBbUT9fqw7800LVjcz0ukOHL4mkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTJaFw0yNDExMDMwNDA3MTJaMDMxMTAvBgNV BAMTKDc1RUQ4NjZENTc3MDdEMEM2MUQwNzQyM0YzNjE1OUI2N0QwMjVCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuWftwHoOid88wKveUg//g6HFO 73qjSbA9Ng5pG7S3wTNyBFgzQt6ngXQt4BSs/tFnOy67sN9dTcIEeOnhJQLe0Jom VqH77WhTLr56pvPnYH65ekwi3nKytR1bIGtlnNTDo2ZWYuB6m01t7N7NHGTxGY2/ FM7kNl4r4iY8T+pK0ZUL60HGqq6+BNOGUMEBKt/d0bqxp/Nbs+JWrKYGEvnJ1+Cd 8FdGkPP7t+MCHD75e/SBavsCkzr/iLyDjVW0MPyRZ6uakijhBFzq5MvjjYLFDi4/ FPZLXdeOC6+LQbtBgWu90BVlLQs622c37xKDhXmLvZHbI9j+zdC/Ix3wCe4LAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUde2GbVdwfQxh0HQj82FZtn0CW/YwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5NjA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQH8wDQYJKoZIhvcNAQELBQADggEBALou vN5CyMbmORlo+rwAMmnnAWcfpgCH4TlNFEpzsQ/wioTuv35ZMQrUX1lJ3+jWxkgz cUpwmu7tfAHuSUyOwGgXUoMvnj4IxTXoseI/RL6yEo7uAOshA6/7HCUD8ZymkEh9 P1Yyr1LLKZna1HDF37ZcyBjiLlST3ZsVynbv9hGq39s8q77cGj8SYKsj381w5NOX KdJFHkmlP+AOr7FEgYohpEi71TW/KZw+c3L3daVrlF7vuC3iAyLa+Akt30FX4rn4 8n/H453vXOon+4dKIpZu4SvJn+GzFuK/+v62SWWMRYb7VU2ZykTD0fe52DpFZgn5 yHFuLNA+wABI9Ppv24Q= -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org