$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200959.roa File: AS200959.roa (raw, json) Hash identifier: oaV/mu/VSmt7Ot8H6UaZw+k98VgvS/q1XJduvkNxlcY= Subject key identifier: 74:E7:23:A8:EF:91:C1:F6:F4:13:C0:C5:E1:01:DA:49:C0:FC:B1:0F Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1E2F90FE30EC4FD97FB8C25C5F0DBD7744557408 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200959.roa Signing time: Sun 06 Oct 2024 04:45:04 +0000 ROA not before: Sun 06 Oct 2024 04:40:04 +0000 ROA not after: Sun 05 Oct 2025 04:45:04 +0000 asID: 200959 IP address blocks: 2a0a:6040:6c00::/40 maxlen: 48 2a0a:6040:e500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2f:90:fe:30:ec:4f:d9:7f:b8:c2:5c:5f:0d:bd:77:44:55:74:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:04 2024 GMT Not After : Oct 5 04:45:04 2025 GMT Subject: CN=74E723A8EF91C1F6F413C0C5E101DA49C0FCB10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:da:2a:b3:41:a8:f0:a9:98:20:10:c8:8c: 78:36:7e:0b:78:fb:f4:00:a2:36:62:79:88:72:a6: b3:d4:58:57:6d:30:60:e6:93:a3:40:dc:ab:38:7f: ff:6b:f3:05:f6:57:f4:08:e6:4e:04:96:0c:a3:48: d5:61:aa:ad:1b:bf:d9:ba:13:3d:48:ff:12:77:94: b7:d9:17:72:01:05:15:53:7f:fc:8d:55:ca:b7:78: 81:2c:67:f9:dc:ab:c5:e2:7b:df:55:44:1e:19:92: 66:cb:1b:9e:d7:da:3f:21:54:98:c2:1a:0d:d2:74: 47:33:16:5b:16:f3:1d:0a:09:c8:2d:34:44:90:e2: 35:7e:96:c7:a8:46:b5:43:f1:ba:67:02:2d:e3:4f: 9e:36:73:a4:bf:42:ad:6f:b9:fd:94:99:ad:33:64: 42:26:7e:35:74:e5:de:f4:ef:1a:43:d5:88:35:8b: 59:88:ab:b9:29:cb:83:42:70:01:94:23:84:b8:3b: 0e:38:08:ba:16:42:8a:04:ed:b0:cd:e1:0b:59:fd: 56:0a:a8:d3:c6:18:41:d7:26:af:02:b8:c5:67:5c: c2:db:f9:20:5f:a1:de:7c:f0:87:ae:74:f2:d8:75: 2b:f5:a0:57:82:d0:3b:e3:86:40:8b:70:5a:33:e1: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E7:23:A8:EF:91:C1:F6:F4:13:C0:C5:E1:01:DA:49:C0:FC:B1:0F X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6c00::/40 2a0a:6040:e500::/40 Signature Algorithm: sha256WithRSAEncryption 4a:01:6f:55:aa:6f:cf:eb:4b:26:a2:ab:09:22:38:b9:96:4a: a2:ed:d1:da:97:a6:b5:24:62:e1:1d:18:e0:b2:19:75:5d:83: 15:c4:a0:c6:44:ac:37:2a:9b:60:78:df:92:03:ce:02:93:94: 4a:51:dc:fc:07:a5:1e:ec:a4:6b:d2:c9:d2:1f:08:f7:0b:c2: 16:b2:4f:7e:f0:65:9e:b2:60:89:4d:ca:00:59:85:41:e0:7c: 42:20:e8:d9:73:99:44:c1:18:fc:7b:cc:50:49:e9:b4:c0:9a: fd:1e:b6:83:64:b2:79:ab:0f:46:eb:9b:05:08:3f:83:5c:58: 5d:c9:1e:9f:f4:2b:7d:56:3a:16:d1:c2:cc:eb:c4:9c:83:aa: e8:56:e3:65:2b:97:08:1f:8f:f1:c1:be:64:10:74:9b:e1:37: 6f:28:12:bc:bb:b9:1d:eb:9e:df:f6:65:b5:0e:20:ad:fa:5d: 1b:49:1a:9b:f2:92:18:dc:d7:93:f8:41:8c:dc:10:da:30:3b: 88:d5:7b:84:e3:67:1b:b6:79:a9:39:cf:dd:79:27:a2:e0:72: 3a:b8:18:26:ad:03:96:4a:ad:43:66:f2:f1:63:a4:f7:6d:51: 58:ce:f9:00:01:ee:43:d3:e1:db:22:3a:ab:ae:bd:4c:14:d1: d2:1e:d0:aa -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUHi+Q/jDsT9l/uMJcXw29d0RVdAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDRaFw0yNTEwMDUwNDQ1MDRaMDMxMTAvBgNV BAMTKDc0RTcyM0E4RUY5MUMxRjZGNDEzQzBDNUUxMDFEQTQ5QzBGQ0IxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gdoqs0Go8KmYIBDIjHg2fgt4 +/QAojZieYhyprPUWFdtMGDmk6NA3Ks4f/9r8wX2V/QI5k4ElgyjSNVhqq0bv9m6 Ez1I/xJ3lLfZF3IBBRVTf/yNVcq3eIEsZ/ncq8Xie99VRB4ZkmbLG57X2j8hVJjC Gg3SdEczFlsW8x0KCcgtNESQ4jV+lseoRrVD8bpnAi3jT542c6S/Qq1vuf2Uma0z ZEImfjV05d707xpD1Yg1i1mIq7kpy4NCcAGUI4S4Ow44CLoWQooE7bDN4QtZ/VYK qNPGGEHXJq8CuMVnXMLb+SBfod588IeudPLYdSv1oFeC0DvjhkCLcFoz4afZAgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQUdOcjqO+Rwfb0E8DF4QHaScD8sQ8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwOTU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgpgQGwDBgAqCmBA5TANBgkqhkiG9w0BAQsF AAOCAQEASgFvVapvz+tLJqKrCSI4uZZKou3R2pemtSRi4R0Y4LIZdV2DFcSgxkSs NyqbYHjfkgPOApOUSlHc/AelHuyka9LJ0h8I9wvCFrJPfvBlnrJgiU3KAFmFQeB8 QiDo2XOZRMEY/HvMUEnptMCa/R62g2SyeasPRuubBQg/g1xYXcken/QrfVY6FtHC zOvEnIOq6FbjZSuXCB+P8cG+ZBB0m+E3bygSvLu5Heue3/ZltQ4grfpdG0kam/KS GNzXk/hBjNwQ2jA7iNV7hONnG7Z5qTnP3XknouByOrgYJq0DlkqtQ2by8WOk921R WM75AAHuQ9Ph2yI6q669TBTR0h7Qqg== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org