$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200557.roa File: AS200557.roa (raw, json) Hash identifier: G5AZomfSc7cx+I6McKBO/whB20otTaI/apo+9QzfhMM= Subject key identifier: 0D:88:3D:7C:49:A6:E3:8B:13:02:10:3D:BF:F3:6C:77:27:9E:72:D4 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0D48EAEFFDCAB86EAE0A66204388385C079813B6 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200557.roa Signing time: Sun 05 Nov 2023 04:07:04 +0000 ROA not before: Sun 05 Nov 2023 04:02:04 +0000 ROA not after: Sun 03 Nov 2024 04:07:04 +0000 asID: 200557 IP address blocks: 2a0a:6040:1400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:48:ea:ef:fd:ca:b8:6e:ae:0a:66:20:43:88:38:5c:07:98:13:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:04 2023 GMT Not After : Nov 3 04:07:04 2024 GMT Subject: CN=0D883D7C49A6E38B1302103DBFF36C77279E72D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:c2:ec:40:a6:ab:29:d7:b8:de:63:6b:77: 2f:41:a4:a8:7c:b5:13:97:79:7f:2d:f8:1e:0b:be: de:5f:48:9e:c2:28:18:59:31:e8:9e:a8:48:2b:4f: e0:88:9f:8c:b1:58:0e:26:82:43:83:a7:2a:1a:4c: a3:fe:5f:5c:c3:85:28:a3:c6:6c:87:90:66:e0:5e: 1e:f8:99:fe:9b:8c:d6:16:2c:2b:d3:32:17:98:9f: b8:b7:da:03:20:0b:01:6e:f5:04:a8:af:b8:17:ae: 18:01:85:1e:be:fb:06:59:54:1c:a8:06:32:3e:8d: 83:87:3f:6c:9c:27:ff:31:5f:74:83:cc:5a:d0:9f: f3:e7:b7:df:88:42:28:e0:49:5b:5c:cc:e8:d3:b7: 2c:c4:d3:44:6f:31:7d:99:d1:9a:f7:a2:3e:d3:af: 66:cf:35:34:27:f3:54:72:be:47:c0:5b:63:14:d8: d3:81:e9:f7:f6:56:21:69:d2:eb:04:2a:39:98:35: c3:7d:56:a8:02:f3:c3:98:91:2a:09:3a:b9:39:44: 6a:da:46:e0:92:6f:a9:29:c5:e4:3e:6d:85:12:aa: ce:4c:50:4e:95:40:14:90:17:b0:e4:46:dd:03:cc: cb:86:00:b7:67:74:ba:28:09:22:21:78:e4:cf:70: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:88:3D:7C:49:A6:E3:8B:13:02:10:3D:BF:F3:6C:77:27:9E:72:D4 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200557.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1400::/40 Signature Algorithm: sha256WithRSAEncryption 81:48:39:4b:03:f6:d4:f1:71:bd:28:15:cd:59:21:77:09:c1: 63:c8:ac:2a:9f:91:76:c7:89:7b:ed:50:ce:23:c4:27:89:c7: a9:c9:03:66:d4:4d:01:1d:09:a6:2e:9d:3e:c5:4a:cd:1d:f5: ce:18:d3:3f:b8:93:4d:9a:ab:77:f2:55:64:d3:af:3b:7f:ae: a5:ed:57:6d:7f:26:5d:d1:10:4a:e0:57:5e:e9:57:29:98:ad: fc:c5:b9:95:4d:85:fb:7e:13:c8:1a:97:22:08:f9:67:d0:69: 5d:17:61:bc:66:bc:23:aa:f6:07:6a:c2:e6:1c:fc:37:e0:bd: ac:5b:d6:c7:75:eb:76:46:be:ac:79:d3:aa:7b:09:ea:65:2a: d6:29:cf:7e:46:44:49:e7:9c:58:7b:e4:c6:d0:44:51:ea:a7: 94:b7:a9:96:c1:0b:33:21:d0:4e:73:b3:16:0a:7c:19:ba:bf: ef:4e:c4:f3:c0:ba:1b:23:e3:54:61:0c:8d:a8:70:91:fe:cc: ea:1b:07:7e:a9:8a:80:8b:e6:3e:e9:d9:21:95:d6:d4:39:35: b6:be:f8:30:50:01:ab:d7:5a:b9:b3:4d:50:18:2e:08:f5:51: bb:ae:ec:8c:91:0b:1e:44:09:17:7d:1c:b6:c9:10:93:eb:96: 96:7f:21:bb -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDUjq7/3KuG6uCmYgQ4g4XAeYE7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDRaFw0yNDExMDMwNDA3MDRaMDMxMTAvBgNV BAMTKDBEODgzRDdDNDlBNkUzOEIxMzAyMTAzREJGRjM2Qzc3Mjc5RTcyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOEsLsQKarKde43mNrdy9BpKh8 tROXeX8t+B4Lvt5fSJ7CKBhZMeieqEgrT+CIn4yxWA4mgkODpyoaTKP+X1zDhSij xmyHkGbgXh74mf6bjNYWLCvTMheYn7i32gMgCwFu9QSor7gXrhgBhR6++wZZVByo BjI+jYOHP2ycJ/8xX3SDzFrQn/Pnt9+IQijgSVtczOjTtyzE00RvMX2Z0Zr3oj7T r2bPNTQn81RyvkfAW2MU2NOB6ff2ViFp0usEKjmYNcN9VqgC88OYkSoJOrk5RGra RuCSb6kpxeQ+bYUSqs5MUE6VQBSQF7DkRt0DzMuGALdndLooCSIheOTPcMUdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUDYg9fEmm44sTAhA9v/NsdyeectQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNTU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBQwDQYJKoZIhvcNAQELBQADggEBAIFI OUsD9tTxcb0oFc1ZIXcJwWPIrCqfkXbHiXvtUM4jxCeJx6nJA2bUTQEdCaYunT7F Ss0d9c4Y0z+4k02aq3fyVWTTrzt/rqXtV21/Jl3REErgV17pVymYrfzFuZVNhft+ E8galyII+WfQaV0XYbxmvCOq9gdqwuYc/Dfgvaxb1sd163ZGvqx506p7CeplKtYp z35GREnnnFh75MbQRFHqp5S3qZbBCzMh0E5zsxYKfBm6v+9OxPPAuhsj41RhDI2o cJH+zOobB36pioCL5j7p2SGV1tQ5Nba++DBQAavXWrmzTVAYLgj1Ubuu7IyRCx5E CRd9HLbJEJPrlpZ/Ibs= -----END CERTIFICATE-----Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org