$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200255.roa File: AS200255.roa (raw, json) Hash identifier: bQmrBFZ4oMNqVWX7Dw53Hh6zHB2Ti/VhpE303Y3I4g4= Subject key identifier: 1D:56:88:53:2F:0A:95:98:3B:41:6A:57:C0:83:E2:D6:1F:C3:DC:59 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 622045856C8B7C4C4A999E98DFBDC4CFA939FD05 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200255.roa Signing time: Sun 05 Nov 2023 04:07:10 +0000 ROA not before: Sun 05 Nov 2023 04:02:10 +0000 ROA not after: Sun 03 Nov 2024 04:07:10 +0000 asID: 200255 IP address blocks: 2a0a:6040:bf00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:45:85:6c:8b:7c:4c:4a:99:9e:98:df:bd:c4:cf:a9:39:fd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:10 2023 GMT Not After : Nov 3 04:07:10 2024 GMT Subject: CN=1D5688532F0A95983B416A57C083E2D61FC3DC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:51:41:61:0f:a7:57:12:f1:73:db:6c:71: ed:eb:af:7f:56:38:a7:cb:78:d1:ae:c1:86:58:61: 25:e1:95:ec:ca:39:23:8b:7b:d6:91:38:36:2b:d8: 0a:a6:60:e8:e2:55:6e:6f:b8:69:22:0a:98:94:7f: 49:99:2b:4e:ce:4f:0e:1a:8e:6c:c2:14:41:12:37: 95:43:14:ea:48:03:58:c7:3b:1d:73:1f:eb:bc:09: d4:79:72:13:f8:93:35:5a:8b:b4:84:d9:ab:e6:ff: ed:5e:5b:d0:6a:e8:3d:67:b4:f6:2a:68:df:69:66: 40:24:99:12:8c:8b:0e:8d:1e:74:dc:b1:57:57:39: 59:5d:06:2b:be:23:2f:e3:07:05:22:aa:61:23:33: 83:da:f9:dd:75:89:42:fe:b6:7c:e2:ea:1a:0c:d3: 37:ac:c1:92:42:93:53:3c:7b:3b:41:41:95:94:f7: 29:a7:da:fb:0c:4c:02:74:2e:4a:1c:24:fb:6d:fa: 14:a2:d8:b7:37:63:d6:7d:41:bd:9c:5a:d5:c5:ea: 4a:bd:a5:a3:93:cf:13:37:9a:b9:59:54:dc:60:5a: 93:d8:c6:3c:ca:cb:c8:6b:29:a6:ba:4c:15:6c:63: f6:1d:e1:72:9f:bf:41:dd:c6:0d:62:99:e9:a3:9c: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:56:88:53:2F:0A:95:98:3B:41:6A:57:C0:83:E2:D6:1F:C3:DC:59 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200255.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:bf00::/40 Signature Algorithm: sha256WithRSAEncryption 19:a4:68:4c:bc:ea:b4:c5:15:54:f9:55:04:3f:e0:ab:9e:21: 2a:62:1b:3c:c7:52:27:86:2a:76:a4:f9:06:d0:d4:8e:06:fe: 5f:e4:d8:42:da:3f:d0:76:02:77:49:ca:9a:b9:76:0b:3a:26: b8:bc:c4:17:09:12:29:3f:01:08:5d:40:1b:da:03:7c:dc:d7: b2:66:54:cc:ad:88:52:37:7d:16:e8:06:94:48:05:f8:79:b9: 4a:35:5b:41:06:bc:a7:7d:dc:9b:d3:90:de:d5:e8:5c:68:c0: b6:19:78:52:57:e2:4f:72:98:3f:52:b3:10:2d:8e:37:d3:4b: 0d:c0:be:74:24:40:5e:ac:71:af:50:cc:4a:29:32:eb:8d:c5: f6:fc:33:c9:46:a8:21:b1:47:07:72:79:4e:57:c6:fa:5d:4e: e9:64:5e:54:62:2c:86:86:bd:b7:12:39:23:97:4e:b7:d9:92: 01:1d:08:a1:ad:b1:57:e4:28:ce:5a:3e:11:fd:e7:84:cd:43: 2a:e3:3d:56:8f:6f:5b:13:ab:e7:e7:17:92:67:a1:63:95:e6: d1:c1:37:45:61:00:b8:5e:58:1b:d3:98:04:43:65:c3:17:37: d5:93:b8:b0:7b:af:59:05:63:3e:41:fd:61:21:67:16:14:08: 54:93:4f:17 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYiBFhWyLfExKmZ6Y373Ez6k5/QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTBaFw0yNDExMDMwNDA3MTBaMDMxMTAvBgNV BAMTKDFENTY4ODUzMkYwQTk1OTgzQjQxNkE1N0MwODNFMkQ2MUZDM0RDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP51FBYQ+nVxLxc9tsce3rr39W OKfLeNGuwYZYYSXhlezKOSOLe9aRODYr2AqmYOjiVW5vuGkiCpiUf0mZK07OTw4a jmzCFEESN5VDFOpIA1jHOx1zH+u8CdR5chP4kzVai7SE2avm/+1eW9Bq6D1ntPYq aN9pZkAkmRKMiw6NHnTcsVdXOVldBiu+Iy/jBwUiqmEjM4Pa+d11iUL+tnzi6hoM 0zeswZJCk1M8eztBQZWU9ymn2vsMTAJ0LkocJPtt+hSi2Lc3Y9Z9Qb2cWtXF6kq9 paOTzxM3mrlZVNxgWpPYxjzKy8hrKaa6TBVsY/Yd4XKfv0Hdxg1imemjnEhHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUHVaIUy8KlZg7QWpXwIPi1h/D3FkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQL8wDQYJKoZIhvcNAQELBQADggEBABmk aEy86rTFFVT5VQQ/4KueISpiGzzHUieGKnak+QbQ1I4G/l/k2ELaP9B2AndJypq5 dgs6Jri8xBcJEik/AQhdQBvaA3zc17JmVMytiFI3fRboBpRIBfh5uUo1W0EGvKd9 3JvTkN7V6FxowLYZeFJX4k9ymD9SsxAtjjfTSw3AvnQkQF6sca9QzEopMuuNxfb8 M8lGqCGxRwdyeU5XxvpdTulkXlRiLIaGvbcSOSOXTrfZkgEdCKGtsVfkKM5aPhH9 54TNQyrjPVaPb1sTq+fnF5JnoWOV5tHBN0VhALheWBvTmARDZcMXN9WTuLB7r1kF Yz5B/WEhZxYUCFSTTxc= -----END CERTIFICATE-----Generated at Mon May 20 13:08:21 2024 by rpki-client on console-fra.rpki-client.org