$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200570.roa File: AS200570.roa (raw, json) Hash identifier: +WAXzS3NVsGcVuLUBrJOeOBpKMGz6u/PvOPe+e5U4rs= Subject key identifier: E8:F8:BA:AE:AC:2D:92:6D:CA:4D:97:6D:96:EF:C2:83:96:F5:E9:F1 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3C690EE915A36AD4EE71455593C7E3D1BD7C67A2 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200570.roa Signing time: Sun 05 Nov 2023 04:07:15 +0000 ROA not before: Sun 05 Nov 2023 04:02:15 +0000 ROA not after: Sun 03 Nov 2024 04:07:15 +0000 asID: 200570 IP address blocks: 2a0a:6040:ee00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:69:0e:e9:15:a3:6a:d4:ee:71:45:55:93:c7:e3:d1:bd:7c:67:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:15 2023 GMT Not After : Nov 3 04:07:15 2024 GMT Subject: CN=E8F8BAAEAC2D926DCA4D976D96EFC28396F5E9F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b6:be:f3:32:7d:08:48:5a:7f:d6:10:4d:4c: 47:76:33:be:dc:9e:89:56:e3:57:7f:82:7b:83:f1: c0:7b:b9:6f:1b:42:1d:89:56:71:24:da:c2:98:73: f2:85:8b:f8:be:61:96:3d:0f:2b:27:92:d6:75:d5: b4:d8:dc:30:57:cc:1d:b9:38:89:fd:90:c2:c3:f0: 9d:d1:ad:7b:c7:d0:93:79:ef:b1:45:29:5c:03:3d: 7d:0a:a0:6e:ea:2c:87:c1:af:93:09:91:40:39:56: 22:a6:42:e8:c9:b4:f6:9a:2d:57:46:7d:92:28:2e: cb:93:49:07:c3:30:9a:dc:2b:a0:19:09:09:af:a0: 14:de:b3:98:9b:21:52:49:2c:b6:30:8b:13:32:89: 56:f3:f0:28:73:8c:6e:6b:a9:e6:39:e2:34:7b:3a: a1:9f:86:99:32:79:0f:c1:ce:0c:f3:94:ae:08:d2: b9:15:e5:b2:41:9b:5a:71:09:ff:35:86:6b:c4:a7: 35:d4:ba:72:26:56:d3:52:e0:7d:c6:b9:08:d2:d5: 40:6f:b9:29:e9:1e:16:86:38:9c:70:94:f0:88:ef: ea:e0:df:c9:ba:48:fa:9b:74:97:48:f8:09:e1:f7: a0:dd:3a:27:11:da:ec:74:04:d1:14:6c:6d:51:7c: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F8:BA:AE:AC:2D:92:6D:CA:4D:97:6D:96:EF:C2:83:96:F5:E9:F1 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200570.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ee00::/40 Signature Algorithm: sha256WithRSAEncryption 20:de:11:64:6a:d2:09:a1:80:8d:ee:fe:d1:f2:76:b2:71:c7: 3f:e2:e0:c5:ec:6e:e1:ef:69:73:6b:32:ce:44:ed:81:1c:b3: ad:96:67:88:20:ff:51:de:62:19:fb:8e:1f:9b:c7:06:31:d0: 1f:23:c4:1e:72:bd:99:be:fd:97:fd:4d:b3:2c:86:bd:f8:9f: 46:5e:17:96:f1:28:d6:fb:db:39:0f:8f:b6:3f:c0:52:b1:fa: 0c:66:ee:61:8f:8a:16:c4:1a:d3:e5:dc:26:da:32:83:39:60: 82:ac:2d:1a:42:04:60:53:2a:b1:6c:39:7b:4e:20:91:14:d6: 49:24:bb:f1:7d:a2:ed:13:e4:bb:8a:ba:e6:a2:f5:f9:61:cd: 6f:e9:c2:65:f7:8e:09:79:13:8a:ec:c4:4d:4f:27:55:55:51: 9e:e2:cb:b0:42:32:83:49:a5:04:ab:e0:7a:43:11:f3:2f:aa: 1a:74:af:22:d8:76:b6:7a:05:a8:fc:42:73:21:d0:58:b1:a1: 5f:d6:a7:34:77:fb:7c:e4:9d:17:26:c6:f6:e8:95:cf:4d:7d: 35:62:31:68:9b:f1:94:02:89:1a:14:b8:c9:54:7f:fa:f5:12: 2d:f6:e6:81:6f:80:48:80:96:21:c2:ee:c8:d3:48:7b:73:94: 82:69:f3:3d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPGkO6RWjatTucUVVk8fj0b18Z6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTVaFw0yNDExMDMwNDA3MTVaMDMxMTAvBgNV BAMTKEU4RjhCQUFFQUMyRDkyNkRDQTREOTc2RDk2RUZDMjgzOTZGNUU5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtr7zMn0ISFp/1hBNTEd2M77c nolW41d/gnuD8cB7uW8bQh2JVnEk2sKYc/KFi/i+YZY9DysnktZ11bTY3DBXzB25 OIn9kMLD8J3RrXvH0JN577FFKVwDPX0KoG7qLIfBr5MJkUA5ViKmQujJtPaaLVdG fZIoLsuTSQfDMJrcK6AZCQmvoBTes5ibIVJJLLYwixMyiVbz8ChzjG5rqeY54jR7 OqGfhpkyeQ/BzgzzlK4I0rkV5bJBm1pxCf81hmvEpzXUunImVtNS4H3GuQjS1UBv uSnpHhaGOJxwlPCI7+rg38m6SPqbdJdI+Anh96DdOicR2ux0BNEUbG1RfJflAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU6Pi6rqwtkm3KTZdtlu/Cg5b16fEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQO4wDQYJKoZIhvcNAQELBQADggEBACDe EWRq0gmhgI3u/tHydrJxxz/i4MXsbuHvaXNrMs5E7YEcs62WZ4gg/1HeYhn7jh+b xwYx0B8jxB5yvZm+/Zf9TbMshr34n0ZeF5bxKNb72zkPj7Y/wFKx+gxm7mGPihbE GtPl3CbaMoM5YIKsLRpCBGBTKrFsOXtOIJEU1kkku/F9ou0T5LuKuuai9flhzW/p wmX3jgl5E4rsxE1PJ1VVUZ7iy7BCMoNJpQSr4HpDEfMvqhp0ryLYdrZ6Baj8QnMh 0FixoV/WpzR3+3zknRcmxvbolc9NfTViMWib8ZQCiRoUuMlUf/r1Ei325oFvgEiA liHC7sjTSHtzlIJp8z0= -----END CERTIFICATE-----Generated at Fri May 17 06:17:21 2024 by rpki-client on console-fra.rpki-client.org