$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200080.roa File: AS200080.roa (raw, json) Hash identifier: +KFStqwU7PQkHwddw96VfxKrwbe4QddK7TkpNrAA2P4= Subject key identifier: FA:AF:9A:86:31:CC:8A:DA:34:EE:DD:3C:BE:C7:60:D9:E1:2B:30:81 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3890E6365FBEF8E87601465F07DF3CBC2457CA7F Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200080.roa Signing time: Sun 05 Nov 2023 04:07:03 +0000 ROA not before: Sun 05 Nov 2023 04:02:03 +0000 ROA not after: Sun 03 Nov 2024 04:07:03 +0000 asID: 200080 IP address blocks: 2a0a:6040:4d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:90:e6:36:5f:be:f8:e8:76:01:46:5f:07:df:3c:bc:24:57:ca:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:03 2023 GMT Not After : Nov 3 04:07:03 2024 GMT Subject: CN=FAAF9A8631CC8ADA34EEDD3CBEC760D9E12B3081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:2e:29:be:73:7c:ea:3a:77:bf:fb:e0:0e: a0:20:dd:c7:d6:43:9d:49:ee:f5:15:ec:32:f1:8b: 32:a6:31:d8:1c:e7:1b:ec:60:db:0a:f5:67:f9:0e: e5:92:38:39:8a:28:18:68:77:7a:ce:a9:5b:80:31: 59:28:fa:77:32:1a:cf:45:5e:af:5f:41:a1:41:00: a0:97:2f:56:18:ca:27:1f:c2:50:26:a7:6d:bc:63: d0:fc:0c:8f:3b:08:1a:85:27:1f:49:24:4b:32:9f: 82:9f:13:03:59:76:b0:da:86:c0:7f:ac:64:fe:de: bf:27:f0:33:80:32:fc:60:c1:9d:9a:38:ac:6a:21: 1c:1b:7d:f4:26:5f:38:c4:3b:e0:47:94:5a:79:c7: 15:f5:64:e4:01:bd:54:4e:ea:2c:4a:03:38:ce:5d: ad:53:81:18:4d:10:40:3a:d0:0c:9e:71:e5:aa:46: 09:61:c2:fa:28:eb:fd:bd:45:e4:a0:55:c6:c1:a3: d7:84:14:31:8c:8c:a1:ea:76:40:c1:26:9d:1c:d7: 65:5e:fb:10:3c:39:d4:b6:ae:28:a1:b2:4f:e0:c2: 7e:7a:8e:b5:a2:97:36:0d:3e:38:da:16:13:d3:02: 68:11:2d:24:7b:ac:80:66:1a:8e:07:1e:2d:7d:4f: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AF:9A:86:31:CC:8A:DA:34:EE:DD:3C:BE:C7:60:D9:E1:2B:30:81 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200080.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4d00::/40 Signature Algorithm: sha256WithRSAEncryption 8f:de:53:f6:8a:5a:2e:bd:7c:3a:0c:bf:99:e7:c3:c8:5f:8e: 48:dc:17:d5:de:30:4b:ef:ea:46:9e:3d:79:23:c6:b3:43:45: ef:da:b6:54:ac:54:b3:a9:68:c3:7d:c9:5c:b8:8f:23:38:db: 31:56:3f:1c:cb:4e:76:cb:24:fd:23:ad:1b:ad:d4:3b:69:11: 8f:93:3b:93:9b:72:46:03:46:f6:4b:b1:a0:08:d6:c1:92:b4: 08:2e:9f:3c:5d:e0:6a:e1:2e:cb:d6:b2:e0:41:9d:4d:14:3c: 85:39:f8:38:3d:9f:15:36:e2:e3:07:b7:5e:75:84:48:ff:2d: 44:e2:fe:62:16:3a:88:45:63:fa:f7:72:7b:ec:97:e5:4f:01: 94:04:ec:5b:cc:d6:98:6f:34:7a:59:33:4b:bc:df:73:f6:f2: 23:d0:d4:e4:57:8b:1b:89:68:ee:81:52:5e:de:d2:31:d7:25: f2:1f:6d:cd:de:cd:5d:80:ea:08:8f:86:45:69:f6:e0:2c:a2: b1:6f:e7:f4:ca:2e:b3:7f:90:63:d6:d9:37:0b:75:57:8e:fd: 87:58:14:ab:36:38:43:3d:08:5e:fe:56:68:5c:74:42:51:f5: 56:f8:c9:a4:80:ab:34:da:f0:2b:4e:63:8e:e8:7f:7b:a9:32: c5:68:91:e6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOJDmNl+++Oh2AUZfB988vCRXyn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDNaFw0yNDExMDMwNDA3MDNaMDMxMTAvBgNV BAMTKEZBQUY5QTg2MzFDQzhBREEzNEVFREQzQ0JFQzc2MEQ5RTEyQjMwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrS4pvnN86jp3v/vgDqAg3cfW Q51J7vUV7DLxizKmMdgc5xvsYNsK9Wf5DuWSODmKKBhod3rOqVuAMVko+ncyGs9F Xq9fQaFBAKCXL1YYyicfwlAmp228Y9D8DI87CBqFJx9JJEsyn4KfEwNZdrDahsB/ rGT+3r8n8DOAMvxgwZ2aOKxqIRwbffQmXzjEO+BHlFp5xxX1ZOQBvVRO6ixKAzjO Xa1TgRhNEEA60AyeceWqRglhwvoo6/29ReSgVcbBo9eEFDGMjKHqdkDBJp0c12Ve +xA8OdS2riihsk/gwn56jrWilzYNPjjaFhPTAmgRLSR7rIBmGo4HHi19T1QfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+q+ahjHMito07t08vsdg2eErMIEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMDgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQE0wDQYJKoZIhvcNAQELBQADggEBAI/e U/aKWi69fDoMv5nnw8hfjkjcF9XeMEvv6kaePXkjxrNDRe/atlSsVLOpaMN9yVy4 jyM42zFWPxzLTnbLJP0jrRut1DtpEY+TO5ObckYDRvZLsaAI1sGStAgunzxd4Grh LsvWsuBBnU0UPIU5+Dg9nxU24uMHt151hEj/LUTi/mIWOohFY/r3cnvsl+VPAZQE 7FvM1phvNHpZM0u833P28iPQ1ORXixuJaO6BUl7e0jHXJfIfbc3ezV2A6giPhkVp 9uAsorFv5/TKLrN/kGPW2TcLdVeO/YdYFKs2OEM9CF7+VmhcdEJR9Vb4yaSAqzTa 8CtOY47of3upMsVokeY= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org