$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200283.roa File: AS200283.roa (raw, json) Hash identifier: CzQEmw2SjnNUxMYaBGv/J/aPLCBngzF9L+CUTN4YW/w= Subject key identifier: BC:B4:B5:1C:7A:E9:15:5F:72:C2:4C:C5:5C:3E:9D:B7:8C:14:0D:22 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7F80F3A21B2F59C3F1C885CB4D518BC3E17ED3F7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200283.roa Signing time: Sun 05 Nov 2023 04:07:07 +0000 ROA not before: Sun 05 Nov 2023 04:02:07 +0000 ROA not after: Sun 03 Nov 2024 04:07:07 +0000 asID: 200283 IP address blocks: 2a0a:6040:ab00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:80:f3:a2:1b:2f:59:c3:f1:c8:85:cb:4d:51:8b:c3:e1:7e:d3:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:07 2023 GMT Not After : Nov 3 04:07:07 2024 GMT Subject: CN=BCB4B51C7AE9155F72C24CC55C3E9DB78C140D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:e4:8c:c6:78:0c:2e:13:f0:bd:e0:f5:0a: 37:e9:df:51:cd:41:b3:f4:22:13:51:58:2a:3e:ea: 93:4c:89:37:8e:a2:07:9c:47:a8:f0:c8:9b:bb:ca: 83:83:76:15:56:27:c7:2d:e7:d1:7b:e0:f3:09:26: 3b:55:1c:5b:af:5b:d1:a6:4c:68:47:2c:2d:5e:ae: fa:1e:35:02:7e:17:ed:4b:8c:35:17:70:47:4a:76: 11:36:c1:00:c6:a3:15:27:30:e1:a5:d4:bb:3f:87: d2:5d:eb:49:cd:af:cc:bf:b5:b6:2f:74:61:fa:76: 71:71:c1:ed:69:bc:7e:8f:6e:b2:29:89:6b:fc:b8: 3d:3e:b9:de:6f:7a:cc:04:b3:f9:cb:b3:b1:22:67: 63:51:b5:f6:7d:9c:6c:d5:da:23:8b:d2:2f:ec:df: 6c:d5:1f:eb:70:de:ce:cb:64:73:47:e4:38:7d:ac: 47:a3:ae:49:1a:de:a0:53:9e:6c:1a:f1:fd:a7:08: 56:46:08:b0:25:68:09:b4:ed:7c:1e:18:b5:a0:4b: 63:e2:a0:fc:18:c5:ac:75:0b:a9:6c:34:df:f2:0e: 6f:a6:da:f9:c9:d9:32:fa:02:30:79:e8:79:ce:b5: 39:76:ed:33:a0:d3:07:31:4c:d2:a9:8f:c1:3f:a3: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B4:B5:1C:7A:E9:15:5F:72:C2:4C:C5:5C:3E:9D:B7:8C:14:0D:22 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200283.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ab00::/40 Signature Algorithm: sha256WithRSAEncryption 39:3d:d1:e8:29:1e:3e:d7:b5:ce:0c:a3:e4:75:98:83:d0:6a: a8:e9:2b:e1:9e:03:a0:5e:54:de:ac:a2:e0:1d:cf:81:26:b3: 56:36:4d:42:66:e5:0c:62:89:bd:bc:e9:65:a4:d5:d7:46:5a: f9:64:ab:cb:01:bb:7d:9d:53:ee:f1:8d:ba:06:0c:c5:ee:d3: 77:76:4c:9e:65:55:4a:73:b5:19:f7:80:70:21:d5:d3:1a:1e: 89:87:00:a1:42:78:34:be:0e:e2:24:81:2d:10:c3:b0:78:13: 65:df:aa:5b:9b:70:e3:d5:b5:49:85:3a:ad:d7:ba:cf:e4:36: 4d:72:6f:cd:b2:70:b5:34:36:03:a2:cf:d0:93:6e:14:21:23: eb:cd:2e:e5:cc:f9:80:67:6b:c5:2a:fd:52:87:5e:99:3f:c1: 47:a1:de:34:75:c4:01:6e:48:f4:84:8b:84:8f:29:76:08:1c: af:59:5b:60:51:4f:81:a1:c0:89:15:0e:17:e1:eb:3b:2c:5f: b9:0f:aa:20:d9:bb:42:30:22:0f:68:75:3b:5a:ba:3f:63:28: 22:51:6b:fd:f8:db:da:ea:8c:91:7f:09:99:7c:76:03:85:e9: 35:b5:30:3a:ba:ce:80:30:50:18:1d:09:a8:71:4d:94:5d:d5: 32:f7:85:c6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUf4DzohsvWcPxyIXLTVGLw+F+0/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDdaFw0yNDExMDMwNDA3MDdaMDMxMTAvBgNV BAMTKEJDQjRCNTFDN0FFOTE1NUY3MkMyNENDNTVDM0U5REI3OEMxNDBEMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChjuSMxngMLhPwveD1Cjfp31HN QbP0IhNRWCo+6pNMiTeOogecR6jwyJu7yoODdhVWJ8ct59F74PMJJjtVHFuvW9Gm TGhHLC1ervoeNQJ+F+1LjDUXcEdKdhE2wQDGoxUnMOGl1Ls/h9Jd60nNr8y/tbYv dGH6dnFxwe1pvH6PbrIpiWv8uD0+ud5veswEs/nLs7EiZ2NRtfZ9nGzV2iOL0i/s 32zVH+tw3s7LZHNH5Dh9rEejrkka3qBTnmwa8f2nCFZGCLAlaAm07XweGLWgS2Pi oPwYxax1C6lsNN/yDm+m2vnJ2TL6AjB56HnOtTl27TOg0wcxTNKpj8E/oxnfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUvLS1HHrpFV9ywkzFXD6dt4wUDSIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKswDQYJKoZIhvcNAQELBQADggEBADk9 0egpHj7Xtc4Mo+R1mIPQaqjpK+GeA6BeVN6souAdz4Ems1Y2TUJm5Qxiib286WWk 1ddGWvlkq8sBu32dU+7xjboGDMXu03d2TJ5lVUpztRn3gHAh1dMaHomHAKFCeDS+ DuIkgS0Qw7B4E2XfqlubcOPVtUmFOq3Xus/kNk1yb82ycLU0NgOiz9CTbhQhI+vN LuXM+YBna8Uq/VKHXpk/wUeh3jR1xAFuSPSEi4SPKXYIHK9ZW2BRT4GhwIkVDhfh 6zssX7kPqiDZu0IwIg9odTtauj9jKCJRa/3429rqjJF/CZl8dgOF6TW1MDq6zoAw UBgdCahxTZRd1TL3hcY= -----END CERTIFICATE-----Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org