$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199741.roa File: AS199741.roa (raw, json) Hash identifier: jeOSw4Na/7mKaexI5nUdVAFD2fo2wfLwnSEzaZDQc6U= Subject key identifier: E3:DC:BE:19:CC:2B:CF:50:AF:37:A2:98:67:21:46:2B:DF:F5:12:B4 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5D3B9D5F4911A16A2D368DC1032B96FB306794FE Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199741.roa Signing time: Sun 05 Nov 2023 04:07:11 +0000 ROA not before: Sun 05 Nov 2023 04:02:11 +0000 ROA not after: Sun 03 Nov 2024 04:07:11 +0000 asID: 199741 IP address blocks: 2a0a:6040:6300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3b:9d:5f:49:11:a1:6a:2d:36:8d:c1:03:2b:96:fb:30:67:94:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:11 2023 GMT Not After : Nov 3 04:07:11 2024 GMT Subject: CN=E3DCBE19CC2BCF50AF37A2986721462BDFF512B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:61:3d:8e:41:b9:95:82:b5:62:5f:30:d4: f2:58:39:b1:d7:7a:59:ab:44:53:ce:58:e6:5b:36: 73:b0:5e:0a:68:13:0b:68:d2:07:d1:ec:c7:08:df: 9e:52:06:ed:80:16:82:b3:6f:80:70:27:b3:e4:1e: 8e:33:36:08:f8:54:3d:4c:65:fc:f4:26:65:78:ff: f4:cc:82:19:c7:2f:ec:d7:1b:b3:05:83:96:77:4b: d5:e7:fc:ec:c0:47:c2:7a:6a:72:c3:5a:3d:96:6a: d1:1b:ea:7c:df:69:83:d6:fc:3e:45:b6:4c:66:8c: 53:9c:95:b2:1f:67:2e:9b:8c:ab:af:35:de:8f:d6: 7c:38:97:a1:77:d1:99:7f:33:ae:f7:a8:f4:5e:3f: d2:07:83:1e:ea:fd:66:ca:18:5f:33:91:8a:f4:52: 25:e8:8b:f9:9b:9d:61:ee:e6:a3:20:18:08:69:cd: 16:1a:a8:f2:77:d5:e8:0d:f3:04:e8:8e:f2:7b:2c: b5:55:fc:a5:45:dd:9b:2c:3c:2d:85:54:5c:35:7a: d5:6b:09:77:fc:ce:c8:0b:2c:1a:2c:9d:21:97:86: 1d:14:01:ad:67:79:c4:db:87:79:3c:26:f2:1d:b2: 54:3e:a1:6f:30:63:c7:69:72:9e:27:f8:33:01:71: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DC:BE:19:CC:2B:CF:50:AF:37:A2:98:67:21:46:2B:DF:F5:12:B4 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199741.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6300::/40 Signature Algorithm: sha256WithRSAEncryption 7a:40:a3:7f:7e:e6:40:b9:74:56:6f:b2:55:2f:be:ef:4b:ac: 64:b0:db:8e:5d:0e:eb:d8:15:fd:9e:ee:fa:7a:9d:16:c0:68: 11:bf:5e:64:66:a3:47:97:1b:15:3c:03:e1:df:77:a6:b8:82: c7:da:89:8c:1a:08:5a:88:bc:f1:88:0c:28:2e:ff:ef:f9:ab: d7:b9:43:60:ca:f7:42:05:f5:69:3f:c9:bf:fe:1f:6c:51:1a: a9:53:89:de:9c:1b:66:e9:a3:75:33:07:5b:c1:cd:70:1a:fb: c9:03:3d:25:68:bc:e5:9d:27:d7:f9:cb:c0:b3:2e:77:05:4d: 92:21:b4:d6:91:24:04:f4:5d:7c:71:1e:0e:cf:b9:c2:73:f9: 73:64:cc:6b:5b:f9:70:28:76:fe:d0:14:6f:5c:6a:96:ee:af: 55:d2:43:50:2a:c5:f6:54:fb:ef:2c:5a:7f:69:92:14:51:2c: 50:cc:4c:07:83:de:3f:68:c7:99:32:fe:d1:3b:9a:60:87:43: 83:12:f1:af:f6:4a:d8:3e:22:56:12:8b:cf:8a:1b:09:67:8d: 6f:11:4a:f5:1f:7f:5b:eb:b4:03:64:23:75:fc:1d:d2:20:77: 8f:17:5e:af:7e:71:ef:fe:b3:5a:43:97:c0:94:85:7c:ed:b6: cf:31:3b:a0 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXTudX0kRoWotNo3BAyuW+zBnlP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTFaFw0yNDExMDMwNDA3MTFaMDMxMTAvBgNV BAMTKEUzRENCRTE5Q0MyQkNGNTBBRjM3QTI5ODY3MjE0NjJCREZGNTEyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgr2E9jkG5lYK1Yl8w1PJYObHX elmrRFPOWOZbNnOwXgpoEwto0gfR7McI355SBu2AFoKzb4BwJ7PkHo4zNgj4VD1M Zfz0JmV4//TMghnHL+zXG7MFg5Z3S9Xn/OzAR8J6anLDWj2WatEb6nzfaYPW/D5F tkxmjFOclbIfZy6bjKuvNd6P1nw4l6F30Zl/M673qPReP9IHgx7q/WbKGF8zkYr0 UiXoi/mbnWHu5qMgGAhpzRYaqPJ31egN8wTojvJ7LLVV/KVF3ZssPC2FVFw1etVr CXf8zsgLLBosnSGXhh0UAa1necTbh3k8JvIdslQ+oW8wY8dpcp4n+DMBcXcfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU49y+Gcwrz1CvN6KYZyFGK9/1ErQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMTk5NzQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQGMwDQYJKoZIhvcNAQELBQADggEBAHpA o39+5kC5dFZvslUvvu9LrGSw245dDuvYFf2e7vp6nRbAaBG/XmRmo0eXGxU8A+Hf d6a4gsfaiYwaCFqIvPGIDCgu/+/5q9e5Q2DK90IF9Wk/yb/+H2xRGqlTid6cG2bp o3UzB1vBzXAa+8kDPSVovOWdJ9f5y8CzLncFTZIhtNaRJAT0XXxxHg7PucJz+XNk zGtb+XAodv7QFG9capbur1XSQ1AqxfZU++8sWn9pkhRRLFDMTAeD3j9ox5ky/tE7 mmCHQ4MS8a/2Stg+IlYSi8+KGwlnjW8RSvUff1vrtANkI3X8HdIgd48XXq9+ce/+ s1pDl8CUhXztts8xO6A= -----END CERTIFICATE-----Generated at Mon May 20 13:08:21 2024 by rpki-client on console-fra.rpki-client.org