$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200080.roa File: AS200080.roa (raw, json) Hash identifier: bnvFymBzeSeAq44fEnSObdmC7XokuqQpM6BOCJguwRU= Subject key identifier: 90:A7:95:E7:E3:3C:0F:DB:D7:7D:E6:9D:4E:BF:C8:92:EE:DA:A5:A0 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3796592AE8A022855B2627A9D4F063E534D6ED1F Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200080.roa Signing time: Sun 06 Oct 2024 04:45:20 +0000 ROA not before: Sun 06 Oct 2024 04:40:20 +0000 ROA not after: Sun 05 Oct 2025 04:45:20 +0000 asID: 200080 IP address blocks: 2a0a:6040:4d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:96:59:2a:e8:a0:22:85:5b:26:27:a9:d4:f0:63:e5:34:d6:ed:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:20 2024 GMT Not After : Oct 5 04:45:20 2025 GMT Subject: CN=90A795E7E33C0FDBD77DE69D4EBFC892EEDAA5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:cb:4b:4d:d4:ae:61:0a:a4:ba:8e:b0:28: 0d:4b:67:5f:85:66:73:a8:39:31:69:89:35:38:3e: bb:aa:1f:88:cd:0d:eb:53:15:c0:81:6c:5e:18:a5: 9c:76:ef:e6:ff:6b:17:db:b7:50:5f:e3:df:22:65: 81:1c:98:d4:7e:6e:c8:31:3e:8a:3b:13:79:ed:70: 0f:d7:39:ec:14:23:73:cc:3c:e4:9b:e9:c9:2a:67: 07:a5:f3:cb:50:51:8c:36:31:87:d9:22:72:15:c5: 64:8e:32:ef:2f:65:61:8b:9a:87:4d:93:42:2d:38: 8b:df:4b:2a:17:e4:f1:2d:17:fd:8f:0d:a0:8d:3d: 12:11:56:d2:e7:55:4a:f8:08:f3:b8:2b:e2:57:8e: ac:85:8c:87:0d:1c:66:3b:ed:fb:09:63:80:ae:7b: 77:bc:39:1d:f7:3f:9b:27:a1:a6:c2:7a:5f:18:50: 18:79:6a:7d:d0:73:ff:16:9e:94:b9:06:13:6b:cf: 03:51:e8:99:34:65:c2:e5:aa:5e:83:d6:f7:a2:36: 1c:1c:53:75:01:a9:0b:df:56:93:46:c4:40:a6:63: 56:b8:80:53:f8:89:b7:d8:aa:16:fe:91:a9:75:eb: 3a:3c:8e:2a:ef:00:58:39:fb:d6:26:8e:3d:0b:3f: d5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:95:E7:E3:3C:0F:DB:D7:7D:E6:9D:4E:BF:C8:92:EE:DA:A5:A0 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200080.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4d00::/40 Signature Algorithm: sha256WithRSAEncryption bf:ce:5a:d9:32:07:b1:a6:84:e7:53:b3:5e:3d:f4:ac:bb:b0: 25:16:0d:1a:e8:7d:14:6f:fa:ae:5b:ac:a1:5d:98:40:d7:90: 2e:5d:8c:0a:3b:d9:fd:12:95:f4:5c:2f:8d:78:b3:0c:a9:fb: fd:a3:4c:5c:b4:54:c1:61:a4:e0:83:60:bf:5f:a6:80:e1:1d: d4:a7:42:b8:38:62:61:74:62:57:1e:30:eb:de:3c:a1:84:00: 86:97:d5:81:e2:38:0c:ef:dd:01:ef:2e:4c:d8:18:29:5e:08: 50:1c:13:85:f3:f8:9a:3a:a4:8a:d7:26:9d:9c:a5:99:39:08: dc:d3:89:92:ea:42:a4:77:06:34:c4:0c:33:50:53:7a:35:07: 0e:5f:1d:b8:cf:f7:0f:a9:53:a4:21:24:5a:f9:aa:86:5a:1d: 35:da:7e:bd:36:5c:1f:92:ad:e5:b4:29:e0:19:d9:34:ec:6a: 2d:fb:96:4f:d4:40:71:6d:3e:50:96:1f:66:bd:d7:f6:4e:94: 38:0b:de:46:3e:41:54:52:44:d3:11:3b:30:7e:99:7a:14:a6: c1:ea:f6:d1:28:9d:1b:5e:ee:30:1a:7e:ff:12:c9:f0:b9:23: 1b:4d:b3:2e:0f:71:46:58:be:32:d7:89:55:c4:0a:38:be:e3: 96:bc:ed:f7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUN5ZZKuigIoVbJiep1PBj5TTW7R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMjBaFw0yNTEwMDUwNDQ1MjBaMDMxMTAvBgNV BAMTKDkwQTc5NUU3RTMzQzBGREJENzdERTY5RDRFQkZDODkyRUVEQUE1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkn8tLTdSuYQqkuo6wKA1LZ1+F ZnOoOTFpiTU4PruqH4jNDetTFcCBbF4YpZx27+b/axfbt1Bf498iZYEcmNR+bsgx Poo7E3ntcA/XOewUI3PMPOSb6ckqZwel88tQUYw2MYfZInIVxWSOMu8vZWGLmodN k0ItOIvfSyoX5PEtF/2PDaCNPRIRVtLnVUr4CPO4K+JXjqyFjIcNHGY77fsJY4Cu e3e8OR33P5snoabCel8YUBh5an3Qc/8WnpS5BhNrzwNR6Jk0ZcLlql6D1veiNhwc U3UBqQvfVpNGxECmY1a4gFP4ibfYqhb+kal16zo8jirvAFg5+9Ymjj0LP9UFAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUkKeV5+M8D9vXfeadTr/Iku7apaAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMDgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQE0wDQYJKoZIhvcNAQELBQADggEBAL/O WtkyB7GmhOdTs1499Ky7sCUWDRrofRRv+q5brKFdmEDXkC5djAo72f0SlfRcL414 swyp+/2jTFy0VMFhpOCDYL9fpoDhHdSnQrg4YmF0YlceMOvePKGEAIaX1YHiOAzv 3QHvLkzYGCleCFAcE4Xz+Jo6pIrXJp2cpZk5CNzTiZLqQqR3BjTEDDNQU3o1Bw5f HbjP9w+pU6QhJFr5qoZaHTXafr02XB+SreW0KeAZ2TTsai37lk/UQHFtPlCWH2a9 1/ZOlDgL3kY+QVRSRNMROzB+mXoUpsHq9tEonRte7jAafv8SyfC5IxtNsy4PcUZY vjLXiVXECji+45a87fc= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org