$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200690.roa File: AS200690.roa (raw, json) Hash identifier: hqywuPA+2cUhztvqCKN8wjJlPCGdQbQ/uxWZyoR1axk= Subject key identifier: 5D:B4:45:9C:28:4C:E4:19:16:2D:B0:B3:4B:68:DB:3A:EA:67:E6:75 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5F371BDE3BFB738ECE742FF4DCA5935989FCCF89 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200690.roa Signing time: Sun 06 Oct 2024 04:45:00 +0000 ROA not before: Sun 06 Oct 2024 04:40:00 +0000 ROA not after: Sun 05 Oct 2025 04:45:00 +0000 asID: 200690 IP address blocks: 2a0a:6040:a300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:37:1b:de:3b:fb:73:8e:ce:74:2f:f4:dc:a5:93:59:89:fc:cf:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:00 2024 GMT Not After : Oct 5 04:45:00 2025 GMT Subject: CN=5DB4459C284CE419162DB0B34B68DB3AEA67E675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:10:76:5a:58:ea:7c:63:27:c8:88:b6:f4: f9:fa:8e:24:82:e4:10:18:20:6d:8b:59:7e:f8:a9: c5:42:79:b1:51:c3:9d:88:65:f9:c6:93:70:e5:c9: ce:29:61:23:e0:e0:47:2c:d1:79:5a:d6:d9:4f:7d: 90:4f:5f:30:dc:75:9c:c5:45:6b:b2:f1:13:dd:0c: 55:e8:4c:1e:c1:b2:c9:7e:ce:f3:ec:aa:3e:4a:d9: c9:29:fc:e5:ce:c8:92:60:0e:5e:02:29:aa:db:6f: 9e:68:75:1a:01:b0:dc:ec:8d:6f:2b:42:4c:43:96: 8d:71:ff:70:e7:70:e9:57:11:aa:32:da:4b:1c:9a: fd:8f:db:b8:3a:af:0b:f3:ed:c3:9b:54:5e:9b:c2: ed:b9:1f:3e:6a:ee:39:e9:d6:18:e0:30:e3:40:b9: f0:e8:31:6f:ef:e5:ae:59:97:f2:9b:1c:f2:07:2a: 4b:c5:9c:37:99:56:67:dd:5f:3c:3d:d8:f4:57:5b: c1:a7:ef:dd:20:c4:9b:d1:fe:62:c2:10:ac:5d:89: 11:0e:ea:17:bf:a0:39:b7:00:b9:b3:50:97:b2:24: ae:48:af:8c:c1:33:44:da:ed:66:07:e0:3a:50:26: fc:e6:5b:16:35:03:6a:1a:c4:e9:ed:90:2b:76:95: 8e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B4:45:9C:28:4C:E4:19:16:2D:B0:B3:4B:68:DB:3A:EA:67:E6:75 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:a300::/40 Signature Algorithm: sha256WithRSAEncryption 53:2c:5c:6d:b9:3f:be:4b:f2:a0:17:55:5c:2f:72:fe:70:89: 1b:99:c8:9f:ab:0c:c6:c0:33:b8:1a:53:d4:a5:f2:b3:fc:a2: 51:32:e2:a2:aa:67:21:15:fd:95:7a:ec:37:fd:dd:2b:03:8a: 1e:b6:76:5d:99:9b:47:ab:be:72:59:ab:de:1f:6c:96:b9:7a: e6:4c:e1:7f:76:b1:73:98:c7:da:b9:80:ec:31:d0:e9:7a:43: d5:91:7a:f3:ef:13:9d:b8:ee:44:b2:00:42:6f:ef:f9:14:f2: ef:d8:4d:e2:a3:35:19:e0:db:52:c0:92:06:cc:b5:fe:6b:e5: 2e:3f:8f:d3:f0:ea:80:0e:76:79:a3:a2:58:41:bd:81:03:0b: 96:3b:f0:f0:95:cd:e7:38:07:d3:60:e2:9e:fb:c6:41:72:64: cc:c2:9b:d0:ac:94:87:dc:2d:e2:50:29:f4:a7:ff:bf:1b:35: 12:32:2c:8a:87:e8:01:b1:d8:42:06:f8:0f:77:b4:8b:17:ff: 08:74:51:b4:cb:a6:59:e5:59:e6:c2:46:a2:4a:95:d4:69:e1: 8e:55:eb:f3:9d:fb:7c:5c:55:57:7d:56:a0:1d:bf:19:e7:43: d7:da:e2:9a:1b:9d:1a:f4:50:97:46:a9:22:b9:12:c3:41:d4: 4e:3c:a6:b5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUXzcb3jv7c47OdC/03KWTWYn8z4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDBaFw0yNTEwMDUwNDQ1MDBaMDMxMTAvBgNV BAMTKDVEQjQ0NTlDMjg0Q0U0MTkxNjJEQjBCMzRCNjhEQjNBRUE2N0U2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLlRB2WljqfGMnyIi29Pn6jiSC 5BAYIG2LWX74qcVCebFRw52IZfnGk3Dlyc4pYSPg4Ecs0Xla1tlPfZBPXzDcdZzF RWuy8RPdDFXoTB7Bssl+zvPsqj5K2ckp/OXOyJJgDl4CKarbb55odRoBsNzsjW8r QkxDlo1x/3DncOlXEaoy2kscmv2P27g6rwvz7cObVF6bwu25Hz5q7jnp1hjgMONA ufDoMW/v5a5Zl/KbHPIHKkvFnDeZVmfdXzw92PRXW8Gn790gxJvR/mLCEKxdiREO 6he/oDm3ALmzUJeyJK5Ir4zBM0Ta7WYH4DpQJvzmWxY1A2oaxOntkCt2lY77AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUXbRFnChM5BkWLbCzS2jbOupn5nUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwNjkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQKMwDQYJKoZIhvcNAQELBQADggEBAFMs XG25P75L8qAXVVwvcv5wiRuZyJ+rDMbAM7gaU9Sl8rP8olEy4qKqZyEV/ZV67Df9 3SsDih62dl2Zm0ervnJZq94fbJa5euZM4X92sXOYx9q5gOwx0Ol6Q9WRevPvE524 7kSyAEJv7/kU8u/YTeKjNRng21LAkgbMtf5r5S4/j9Pw6oAOdnmjolhBvYEDC5Y7 8PCVzec4B9Ng4p77xkFyZMzCm9CslIfcLeJQKfSn/78bNRIyLIqH6AGx2EIG+A93 tIsX/wh0UbTLplnlWebCRqJKldRp4Y5V6/Od+3xcVVd9VqAdvxnnQ9fa4pobnRr0 UJdGqSK5EsNB1E48prU= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org