$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200853.roa File: AS200853.roa (raw, json) Hash identifier: cbYIQ//DIbt0AuH/okiyAQ4ZonwxNEnmNLtM2Q8t2is= Subject key identifier: 23:7C:43:84:4F:5B:F3:35:E4:02:63:70:29:23:51:30:3B:CE:94:D9 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0F74660F47641A7256BE2C0E32284EC8D79658A3 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200853.roa Signing time: Sun 05 Nov 2023 04:07:17 +0000 ROA not before: Sun 05 Nov 2023 04:02:17 +0000 ROA not after: Sun 03 Nov 2024 04:07:17 +0000 asID: 200853 IP address blocks: 2a0a:6040:e00::/40 maxlen: 48 2a0a:6040:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:74:66:0f:47:64:1a:72:56:be:2c:0e:32:28:4e:c8:d7:96:58:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:17 2023 GMT Not After : Nov 3 04:07:17 2024 GMT Subject: CN=237C43844F5BF335E4026370292351303BCE94D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:53:6b:8d:1a:97:bc:48:88:40:df:2a:36:18: f1:a5:aa:cc:7d:8b:97:9f:ab:cb:2e:ef:32:33:29: 52:23:2a:3c:44:95:6e:42:b0:16:38:ea:9d:b1:d6: 26:97:a0:55:8c:60:56:28:71:98:2b:e4:6b:02:0f: 01:89:4f:38:b9:07:bb:6d:5a:9f:89:57:ec:88:df: 0d:05:4d:d7:6b:81:5a:82:a1:5e:25:23:93:f8:e9: f9:3e:6c:e5:d1:a2:43:e6:aa:48:ff:84:4c:08:86: ec:8f:59:cc:4d:88:9c:0c:4c:0e:13:8f:32:f9:91: b0:c6:f8:28:0d:ae:e3:bb:05:f3:ce:6f:6f:24:1f: 48:77:76:31:96:79:ef:19:45:4e:c8:4a:63:81:8f: 0f:f0:8f:2b:1d:b5:83:2b:1c:0d:68:86:62:9a:d8: 03:9c:ee:9c:9e:8a:db:d4:98:b8:7f:d6:89:7d:67: ec:ab:d0:2e:1b:b5:0d:1c:dc:f4:1b:03:b7:2d:14: fe:20:0d:76:9b:f0:4e:a6:65:31:c0:7c:03:a2:65: 48:44:c3:9d:bd:b6:d6:2f:6d:23:4e:04:00:a5:f3: 9b:e4:e6:b1:29:95:16:6e:86:08:1b:ba:b7:a4:c2: f0:cb:b0:f0:5e:59:96:68:4a:22:b3:6b:c5:0f:32: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7C:43:84:4F:5B:F3:35:E4:02:63:70:29:23:51:30:3B:CE:94:D9 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e00::/40 2a0a:6040:c600::/40 Signature Algorithm: sha256WithRSAEncryption 33:77:14:03:f5:4c:54:b3:43:20:9a:14:46:46:32:c5:4e:b1: 96:43:03:cd:06:92:0d:a4:6f:db:ca:d5:9e:a5:09:5d:ae:bb: 4a:38:f5:e8:be:26:bd:1b:db:6c:e9:3e:c7:bf:d1:cc:7e:39: 9d:e9:44:fd:73:42:33:03:ae:78:ee:a4:de:cf:cc:76:29:8f: c8:45:66:c1:d4:32:8e:f7:01:b0:f7:80:45:34:c6:58:63:54: e8:8a:65:5d:4a:82:02:9b:88:50:a8:65:17:04:7b:e8:c8:9c: 9e:e2:6d:e6:f2:28:d5:5f:6c:6b:3b:03:45:d8:22:1a:68:8a: c7:3e:10:31:13:36:e7:a1:9f:fa:d6:a4:0b:46:9d:8b:1c:7d: 35:51:06:5a:eb:9b:08:51:6a:1d:d9:5b:07:da:d9:c3:cd:50: 02:1c:a1:e7:6c:9d:3f:0a:9a:8a:4b:1e:8a:f9:41:12:4d:fd: f6:77:b4:fb:ce:69:7a:5e:ed:e2:56:79:f5:e8:78:01:c5:0b: ee:7e:d9:2c:7f:16:73:87:ec:2c:7f:04:71:14:9b:47:1b:c0: b3:9f:2a:40:11:e6:8d:19:45:26:94:82:74:e4:e2:ea:2a:0a: 61:bd:6b:60:c9:93:38:69:58:21:fd:39:16:aa:0f:65:c1:bb: fb:cf:b6:c0 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUD3RmD0dkGnJWviwOMihOyNeWWKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTdaFw0yNDExMDMwNDA3MTdaMDMxMTAvBgNV BAMTKDIzN0M0Mzg0NEY1QkYzMzVFNDAyNjM3MDI5MjM1MTMwM0JDRTk0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoU2uNGpe8SIhA3yo2GPGlqsx9 i5efq8su7zIzKVIjKjxElW5CsBY46p2x1iaXoFWMYFYocZgr5GsCDwGJTzi5B7tt Wp+JV+yI3w0FTddrgVqCoV4lI5P46fk+bOXRokPmqkj/hEwIhuyPWcxNiJwMTA4T jzL5kbDG+CgNruO7BfPOb28kH0h3djGWee8ZRU7ISmOBjw/wjysdtYMrHA1ohmKa 2AOc7pyeitvUmLh/1ol9Z+yr0C4btQ0c3PQbA7ctFP4gDXab8E6mZTHAfAOiZUhE w529ttYvbSNOBACl85vk5rEplRZuhggburekwvDLsPBeWZZoSiKza8UPMih/AgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQUI3xDhE9b8zXkAmNwKSNRMDvOlNkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwODUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgpgQA4DBgAqCmBAxjANBgkqhkiG9w0BAQsF AAOCAQEAM3cUA/VMVLNDIJoURkYyxU6xlkMDzQaSDaRv28rVnqUJXa67Sjj16L4m vRvbbOk+x7/RzH45nelE/XNCMwOueO6k3s/MdimPyEVmwdQyjvcBsPeARTTGWGNU 6IplXUqCApuIUKhlFwR76MicnuJt5vIo1V9sazsDRdgiGmiKxz4QMRM256Gf+tak C0adixx9NVEGWuubCFFqHdlbB9rZw81QAhyh52ydPwqaikseivlBEk399ne0+85p el7t4lZ59eh4AcUL7n7ZLH8Wc4fsLH8EcRSbRxvAs58qQBHmjRlFJpSCdOTi6ioK Yb1rYMmTOGlYIf05FqoPZcG7+8+2wA== -----END CERTIFICATE-----Generated at Mon May 20 12:06:23 2024 by rpki-client on console-ams.rpki-client.org