$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200246.roa File: AS200246.roa (raw, json) Hash identifier: SVk7qgioo5AmCw1H9hK3T4ziz6cgCtLMRH5v+9ed/YQ= Subject key identifier: 1C:84:1E:95:2E:BB:C1:BB:C3:39:94:4C:13:81:DE:6C:B2:1E:C4:EC Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 30FF839F35783A3D89B6F6A2F0BBD4DEF303AEDD Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200246.roa Signing time: Sun 06 Oct 2024 04:45:15 +0000 ROA not before: Sun 06 Oct 2024 04:40:15 +0000 ROA not after: Sun 05 Oct 2025 04:45:15 +0000 asID: 200246 IP address blocks: 2a0a:6040:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ff:83:9f:35:78:3a:3d:89:b6:f6:a2:f0:bb:d4:de:f3:03:ae:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:15 2024 GMT Not After : Oct 5 04:45:15 2025 GMT Subject: CN=1C841E952EBBC1BBC339944C1381DE6CB21EC4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:72:2d:8f:bf:76:00:61:39:77:5a:49:2a:ac: b4:f3:e3:ae:56:f2:3e:d1:3c:1f:38:64:63:bf:f4: f2:b9:bf:e5:b5:c5:f6:2b:9f:69:d5:70:31:89:16: 9b:62:b5:d0:36:1d:02:0c:24:63:8f:b9:a5:7a:28: a8:0f:53:f8:2c:61:74:64:39:ee:ea:48:cf:a6:3f: 97:70:bd:ca:86:87:a5:ba:bb:8d:c2:83:62:f9:5f: fb:08:d8:a4:03:75:fd:df:e3:9e:21:70:08:be:49: 7a:c9:53:24:d8:a1:b2:15:ec:d4:19:aa:19:bb:63: 06:c0:c9:76:3c:5a:15:1e:0c:8a:30:26:01:65:7c: ce:dc:7a:9f:eb:4b:29:5d:8d:05:f2:92:ca:bd:44: 61:b6:43:63:b8:35:c2:4b:74:15:af:05:84:81:c2: b8:f3:41:7f:f9:34:37:30:1a:7d:43:8a:57:f8:42: c6:1b:e7:7f:7e:61:d5:63:34:96:7c:db:db:d3:ad: df:38:c3:29:95:30:1d:e5:d5:42:dd:bc:71:62:13: b2:e0:f6:b3:86:7c:1d:c6:f7:df:7b:f5:1c:d9:6e: 71:a0:04:5d:bd:37:b8:4f:60:b3:cf:ab:e7:96:5c: e3:e7:36:d7:f3:46:4f:00:55:90:f3:df:f5:11:5f: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:84:1E:95:2E:BB:C1:BB:C3:39:94:4C:13:81:DE:6C:B2:1E:C4:EC X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200246.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 22:28:74:e8:ad:ea:4c:a6:14:8a:70:b0:39:07:4d:ae:f7:ec: b4:9c:5d:5e:7f:a9:1f:a3:46:78:8e:c9:61:de:0a:0c:9a:6e: 88:0e:01:a1:59:a9:20:43:63:ad:34:7f:46:c9:2a:80:f9:f4: 50:b1:04:30:6b:0b:35:a3:3b:5f:8f:ff:be:39:45:58:c4:c4: b4:58:0b:48:25:2d:af:da:9f:0d:af:c0:fc:85:5a:4f:12:bf: 5a:28:30:34:d5:77:35:37:79:27:53:69:df:44:92:ed:47:44: d4:72:f2:de:af:3d:59:aa:3f:1b:ee:6a:63:ca:90:27:16:66: 9a:58:1a:ba:79:1f:c0:c5:73:1c:ba:a7:7a:5e:bf:ed:ab:34: 06:73:2e:fb:d4:08:3b:b0:6a:4e:0e:f7:29:1c:75:ad:90:a0: 54:b6:17:ac:1b:02:26:b3:43:98:ce:dc:d0:9c:17:9c:77:cb: c6:02:09:6d:32:5e:c0:93:6c:ee:ee:2a:ba:14:bd:e0:4d:dc: 78:94:fe:3d:ec:87:92:3c:6c:49:b4:0f:10:01:7a:f8:43:86: 1d:f6:45:fa:27:a5:1b:00:ed:56:37:8e:c4:29:68:32:cf:34: da:c0:67:50:36:75:ff:41:27:ad:ed:c4:a3:8d:4b:c9:89:6d: bb:1f:84:bd -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMP+DnzV4Oj2Jtvai8LvU3vMDrt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTVaFw0yNTEwMDUwNDQ1MTVaMDMxMTAvBgNV BAMTKDFDODQxRTk1MkVCQkMxQkJDMzM5OTQ0QzEzODFERTZDQjIxRUM0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmci2Pv3YAYTl3WkkqrLTz465W 8j7RPB84ZGO/9PK5v+W1xfYrn2nVcDGJFptitdA2HQIMJGOPuaV6KKgPU/gsYXRk Oe7qSM+mP5dwvcqGh6W6u43Cg2L5X/sI2KQDdf3f454hcAi+SXrJUyTYobIV7NQZ qhm7YwbAyXY8WhUeDIowJgFlfM7cep/rSyldjQXyksq9RGG2Q2O4NcJLdBWvBYSB wrjzQX/5NDcwGn1Dilf4QsYb539+YdVjNJZ829vTrd84wymVMB3l1ULdvHFiE7Lg 9rOGfB3G99979RzZbnGgBF29N7hPYLPPq+eWXOPnNtfzRk8AVZDz3/URX8wXAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUHIQelS67wbvDOZRME4HebLIexOwwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC4wDQYJKoZIhvcNAQELBQADggEBACIo dOit6kymFIpwsDkHTa737LScXV5/qR+jRniOyWHeCgyabogOAaFZqSBDY600f0bJ KoD59FCxBDBrCzWjO1+P/745RVjExLRYC0glLa/anw2vwPyFWk8Sv1ooMDTVdzU3 eSdTad9Eku1HRNRy8t6vPVmqPxvuamPKkCcWZppYGrp5H8DFcxy6p3pev+2rNAZz LvvUCDuwak4O9ykcda2QoFS2F6wbAiazQ5jO3NCcF5x3y8YCCW0yXsCTbO7uKroU veBN3HiU/j3sh5I8bEm0DxABevhDhh32RfonpRsA7VY3jsQpaDLPNNrAZ1A2df9B J63txKONS8mJbbsfhL0= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org