$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200074.roa File: AS200074.roa (raw, json) Hash identifier: K4yJFKnkHWEkAt5ZQI0sE+Vjcos+au4DI2axTKoHIFo= Subject key identifier: AD:62:5D:9A:FE:9A:E4:2E:BA:DF:5E:81:BA:2E:57:8D:CA:18:11:3A Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 59DAF8A57816ED75032B0AD415425F7E59D5D32E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200074.roa Signing time: Sun 05 Nov 2023 04:07:15 +0000 ROA not before: Sun 05 Nov 2023 04:02:15 +0000 ROA not after: Sun 03 Nov 2024 04:07:15 +0000 asID: 200074 IP address blocks: 2a0a:6040:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:da:f8:a5:78:16:ed:75:03:2b:0a:d4:15:42:5f:7e:59:d5:d3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:15 2023 GMT Not After : Nov 3 04:07:15 2024 GMT Subject: CN=AD625D9AFE9AE42EBADF5E81BA2E578DCA18113A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:c0:f9:bb:59:15:63:32:a2:da:d5:ad:46: 47:d4:a7:a7:e9:1f:96:70:ba:b9:31:34:39:dc:40: 83:e7:b9:33:4b:d4:83:83:6f:2e:a6:f2:a5:09:b3: e8:71:fc:79:03:2a:cb:dc:94:97:d2:39:39:4b:40: 25:06:97:e5:78:09:8d:29:46:a4:77:af:0d:2d:eb: da:83:07:33:1a:bf:92:4a:07:6c:8b:d7:95:f6:0b: bf:f2:a5:f1:d3:8f:72:7d:db:18:29:1b:f6:b9:c4: 23:d5:f6:93:2f:7f:7d:a5:1a:14:d3:c5:62:09:2c: 0d:02:aa:63:42:5c:a3:ea:5e:af:c8:b7:4d:53:a7: 38:5b:bd:bc:77:fb:98:75:d8:44:e6:c7:86:ba:7c: 2b:06:eb:74:38:b4:33:fe:9e:de:24:03:82:84:00: 6e:07:ce:91:8e:60:f6:6f:20:92:8c:64:f2:22:7a: 20:ec:2d:36:45:1d:0e:b1:33:07:a1:f2:f1:01:7b: 22:a4:ce:75:82:8e:b6:d3:49:90:71:a1:cd:51:55: 9d:1c:1d:5f:a0:a8:65:8a:96:c3:b6:6f:75:f3:b5: 0a:06:1e:88:17:17:d7:ba:8e:7e:2e:8d:91:bb:19: 2a:db:be:3b:74:6d:63:f5:36:4e:7b:cc:bd:58:d0: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:62:5D:9A:FE:9A:E4:2E:BA:DF:5E:81:BA:2E:57:8D:CA:18:11:3A X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200074.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1700::/40 Signature Algorithm: sha256WithRSAEncryption 44:69:81:1f:34:82:fb:05:ec:54:38:35:aa:0f:98:4c:b9:28: 63:8e:44:b9:63:43:57:54:04:eb:a8:f9:6c:d5:92:a8:a7:f2: 8d:28:14:d7:cd:c7:8b:88:bf:4b:b9:e2:4f:a0:c0:4d:fa:82: ba:6b:9f:58:fe:5b:26:29:db:2a:93:29:65:ff:7b:93:00:31: f0:e5:1f:f5:bf:be:1d:53:ca:88:73:0e:61:ec:8b:a4:ae:9a: 0b:a2:b3:70:88:d5:51:15:ff:ad:1c:e9:0f:15:34:12:7d:7a: 30:e5:e1:06:b3:22:ea:ae:0d:89:0b:32:f6:fb:f8:f9:a4:75: 97:1a:9a:e0:74:0f:3c:bd:fd:41:ff:c2:6d:c7:d2:2a:1a:1b: 75:55:50:b7:a8:f9:30:9f:5b:ea:6b:48:f8:63:75:2d:fd:00: a9:65:e2:7f:2c:5f:53:d5:4f:3d:4a:0d:da:e3:c7:99:26:32: 2a:98:81:ec:b6:b6:d9:5d:cc:14:93:ea:48:49:39:d1:5c:ea: 01:dc:f3:4b:cf:7a:1f:2a:8f:ef:cf:ae:0b:af:a5:d3:88:3d: 92:2b:40:c6:d1:84:11:b5:35:ae:42:e4:5d:cc:75:7f:e5:3d: 1b:ca:c9:b3:68:02:ec:cc:eb:f3:ef:84:54:48:5e:aa:65:e3: ff:ce:db:05 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWdr4pXgW7XUDKwrUFUJfflnV0y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTVaFw0yNDExMDMwNDA3MTVaMDMxMTAvBgNV BAMTKEFENjI1RDlBRkU5QUU0MkVCQURGNUU4MUJBMkU1NzhEQ0ExODExM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClisD5u1kVYzKi2tWtRkfUp6fp H5ZwurkxNDncQIPnuTNL1IODby6m8qUJs+hx/HkDKsvclJfSOTlLQCUGl+V4CY0p RqR3rw0t69qDBzMav5JKB2yL15X2C7/ypfHTj3J92xgpG/a5xCPV9pMvf32lGhTT xWIJLA0CqmNCXKPqXq/It01Tpzhbvbx3+5h12ETmx4a6fCsG63Q4tDP+nt4kA4KE AG4HzpGOYPZvIJKMZPIieiDsLTZFHQ6xMweh8vEBeyKkznWCjrbTSZBxoc1RVZ0c HV+gqGWKlsO2b3XztQoGHogXF9e6jn4ujZG7GSrbvjt0bWP1Nk57zL1Y0B7jAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUrWJdmv6a5C66316Bui5XjcoYETowHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMDc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBcwDQYJKoZIhvcNAQELBQADggEBAERp gR80gvsF7FQ4NaoPmEy5KGOORLljQ1dUBOuo+WzVkqin8o0oFNfNx4uIv0u54k+g wE36grprn1j+WyYp2yqTKWX/e5MAMfDlH/W/vh1TyohzDmHsi6Sumguis3CI1VEV /60c6Q8VNBJ9ejDl4QazIuquDYkLMvb7+PmkdZcamuB0Dzy9/UH/wm3H0ioaG3VV ULeo+TCfW+prSPhjdS39AKll4n8sX1PVTz1KDdrjx5kmMiqYgey2ttldzBST6khJ OdFc6gHc80vPeh8qj+/PrguvpdOIPZIrQMbRhBG1Na5C5F3MdX/lPRvKybNoAuzM 6/PvhFRIXqpl4//O2wU= -----END CERTIFICATE-----Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org