$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200230.roa File: AS200230.roa (raw, json) Hash identifier: GXJK6g51s8fwKcO7YH+UWBZnQDU7sTIJuKyyj6nLrF0= Subject key identifier: 75:83:8B:2D:0A:AC:DA:F3:32:0B:39:08:10:18:25:13:C4:54:21:28 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 11D44A0840D7F797C24BD02464848C8B0D1DDD61 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200230.roa Signing time: Sun 05 Nov 2023 04:07:06 +0000 ROA not before: Sun 05 Nov 2023 04:02:06 +0000 ROA not after: Sun 03 Nov 2024 04:07:06 +0000 asID: 200230 IP address blocks: 2a0a:6040:3b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d4:4a:08:40:d7:f7:97:c2:4b:d0:24:64:84:8c:8b:0d:1d:dd:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:06 2023 GMT Not After : Nov 3 04:07:06 2024 GMT Subject: CN=75838B2D0AACDAF3320B390810182513C4542128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:6d:4d:63:43:19:9b:75:3b:81:46:f5:54: a0:0e:50:a8:21:35:05:c1:8b:c6:21:7f:2b:11:08: 09:db:7f:13:0c:03:07:b4:88:81:b8:51:77:9e:a8: 13:00:f9:9c:a8:80:c0:57:88:c1:82:d1:94:23:db: e3:55:84:4b:f4:a1:f2:38:21:df:45:e3:ef:58:dd: 5a:c1:b8:35:9f:dd:c0:b3:b6:f5:6c:63:da:d5:23: b6:c4:54:8e:3b:4a:20:ec:af:ab:22:4a:5e:f3:33: f1:64:93:e3:54:87:40:13:43:7f:cb:0c:ed:7d:a8: 6a:09:fd:a9:4d:6b:d7:0d:6f:df:46:d1:54:cf:bb: 32:49:34:79:70:fc:0b:91:64:15:da:d5:66:6d:7e: 69:78:bf:c7:2f:78:89:49:5a:98:a8:3a:86:6c:c7: 5e:95:de:55:d9:b6:ee:5b:ce:48:4d:ae:b8:4b:5f: 05:8e:6b:78:73:be:75:c5:af:77:5b:35:fe:96:16: 5a:c0:cb:3f:87:2f:51:41:78:20:31:e5:f1:0a:35: e4:24:fa:76:75:09:94:2d:bb:25:40:c3:86:e9:a5: c3:be:91:5b:27:71:3e:d3:93:60:41:26:c8:6f:29: 1f:9d:56:e9:13:ed:c4:0a:9a:40:2f:55:50:37:a8: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:83:8B:2D:0A:AC:DA:F3:32:0B:39:08:10:18:25:13:C4:54:21:28 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3b00::/40 Signature Algorithm: sha256WithRSAEncryption 92:e9:c1:0a:74:1b:1c:43:fe:14:cf:ac:42:18:2c:5a:c4:09: 6c:c9:88:cf:36:0a:7e:ff:58:9d:27:97:ca:40:03:8d:e0:c3: e9:25:b9:78:09:7f:ca:09:46:88:0a:81:b7:38:79:1b:35:1e: e3:78:5a:40:61:05:42:1a:4a:88:88:74:0e:ba:31:34:3e:34: fa:0b:94:e5:7b:9d:a8:83:41:15:49:5c:b4:6b:58:d5:b0:f6: af:af:23:f1:e9:53:f2:6c:21:6f:59:c3:92:81:25:73:b8:09: cd:74:8e:ae:7c:0e:c4:ea:00:3e:48:23:1b:e4:5b:28:0b:6d: b8:83:46:53:0c:4d:c7:ee:fb:c5:d3:6a:e2:d2:01:03:48:39: 42:7e:19:a2:ab:6b:3e:07:1e:81:91:d1:a5:f7:ba:52:5e:47: d9:ba:d2:1f:d1:96:db:4b:fb:1e:39:0c:81:b8:c9:5e:f2:9a: f4:ea:10:12:74:5f:23:67:de:46:1e:e1:9f:b9:80:35:64:15: 10:49:79:2d:37:fc:b1:01:91:cb:56:bd:9b:e3:69:43:e8:24: d3:14:e9:9e:4f:c2:1f:35:65:56:f6:8f:82:6b:37:9f:21:c1: 7c:a1:f8:2c:24:7a:d4:df:9e:a5:86:60:3b:fa:42:69:9a:01: d6:8b:e9:2b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEdRKCEDX95fCS9AkZISMiw0d3WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDZaFw0yNDExMDMwNDA3MDZaMDMxMTAvBgNV BAMTKDc1ODM4QjJEMEFBQ0RBRjMzMjBCMzkwODEwMTgyNTEzQzQ1NDIxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZm1NY0MZm3U7gUb1VKAOUKgh NQXBi8YhfysRCAnbfxMMAwe0iIG4UXeeqBMA+ZyogMBXiMGC0ZQj2+NVhEv0ofI4 Id9F4+9Y3VrBuDWf3cCztvVsY9rVI7bEVI47SiDsr6siSl7zM/Fkk+NUh0ATQ3/L DO19qGoJ/alNa9cNb99G0VTPuzJJNHlw/AuRZBXa1WZtfml4v8cveIlJWpioOoZs x16V3lXZtu5bzkhNrrhLXwWOa3hzvnXFr3dbNf6WFlrAyz+HL1FBeCAx5fEKNeQk +nZ1CZQtuyVAw4bppcO+kVsncT7Tk2BBJshvKR+dVukT7cQKmkAvVVA3qDJZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUdYOLLQqs2vMyCzkIEBglE8RUISgwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDswDQYJKoZIhvcNAQELBQADggEBAJLp wQp0GxxD/hTPrEIYLFrECWzJiM82Cn7/WJ0nl8pAA43gw+kluXgJf8oJRogKgbc4 eRs1HuN4WkBhBUIaSoiIdA66MTQ+NPoLlOV7naiDQRVJXLRrWNWw9q+vI/HpU/Js IW9Zw5KBJXO4Cc10jq58DsTqAD5IIxvkWygLbbiDRlMMTcfu+8XTauLSAQNIOUJ+ GaKraz4HHoGR0aX3ulJeR9m60h/RlttL+x45DIG4yV7ymvTqEBJ0XyNn3kYe4Z+5 gDVkFRBJeS03/LEBkctWvZvjaUPoJNMU6Z5Pwh81ZVb2j4JrN58hwXyh+CwketTf nqWGYDv6QmmaAdaL6Ss= -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org