$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS201501.roa File: AS201501.roa (raw, json) Hash identifier: beu3ysn1NtvvX7GYdO7WJdZGnsquXaYHV3sK9JcGyDM= Subject key identifier: EB:71:80:6D:D8:8F:84:F0:A7:48:B7:54:A2:95:6C:6C:2C:19:77:93 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 49D7A2D1083E839A903AB1500687A3702151357B Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS201501.roa Signing time: Sun 05 Nov 2023 04:07:04 +0000 ROA not before: Sun 05 Nov 2023 04:02:04 +0000 ROA not after: Sun 03 Nov 2024 04:07:04 +0000 asID: 201501 IP address blocks: 2a0a:6040:fa00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d7:a2:d1:08:3e:83:9a:90:3a:b1:50:06:87:a3:70:21:51:35:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:04 2023 GMT Not After : Nov 3 04:07:04 2024 GMT Subject: CN=EB71806DD88F84F0A748B754A2956C6C2C197793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:08:6f:b8:91:33:73:d7:e3:7b:06:53:cf: 37:30:46:13:92:d6:e6:a6:02:49:a1:47:39:2b:64: f2:26:88:e0:94:f4:6d:f5:72:bb:92:c5:29:cf:99: cd:7b:b4:c3:6a:c5:81:c7:de:c7:0b:80:94:c2:98: bb:1b:47:9c:27:17:c8:05:0b:b8:8d:ae:69:97:a1: d7:05:5b:95:09:1e:a6:a4:53:12:74:fe:05:aa:89: c6:41:b7:2c:3f:92:55:95:99:57:24:94:c8:65:18: 52:be:93:46:9e:e9:1d:d0:8f:76:e6:2a:d6:ce:b4: ff:10:45:70:71:fa:66:ad:69:8c:fc:45:2d:74:65: 6c:6d:cc:72:c7:3e:c1:b4:c3:bb:24:8a:e4:7d:ad: 69:e8:f5:66:a4:f7:21:68:df:b3:51:c9:2b:8d:e6: ab:86:6a:1b:ef:19:56:f5:45:1a:8a:2d:4b:bf:24: 12:38:9e:87:78:6a:83:de:5f:4c:d2:47:c9:04:7d: 29:dd:c4:9f:2c:35:f6:4a:57:6d:80:8a:81:a6:49: 7b:47:ee:f8:b4:8d:90:3b:ad:84:59:2d:b1:39:c3: 36:ca:61:65:13:ad:9e:97:6f:eb:ba:7a:d9:a3:29: 4b:73:65:5e:e7:bf:46:36:31:8d:14:97:0a:c9:7a: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:71:80:6D:D8:8F:84:F0:A7:48:B7:54:A2:95:6C:6C:2C:19:77:93 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS201501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:fa00::/40 Signature Algorithm: sha256WithRSAEncryption 2e:7b:15:8a:7c:3e:c3:68:78:45:54:3f:92:ee:48:72:bf:33: 93:e9:b1:ef:a8:72:8e:b7:d0:a9:bb:14:72:76:3c:34:90:ee: eb:38:50:45:77:7e:ba:20:6e:1c:c8:c6:2b:c5:4d:7d:c7:c5: 4b:dd:c3:c8:de:44:0f:2e:36:9e:c8:94:a8:ce:de:0f:0a:31: 60:f6:85:f2:7f:c3:cd:5a:eb:d2:48:5b:36:eb:c8:94:69:bd: 9f:b8:af:1c:ce:02:0d:b2:af:ff:cf:c3:9f:0f:59:91:d2:93: 59:0a:52:6e:a2:2b:d5:82:b5:44:55:eb:04:42:d5:8d:26:dc: 7d:e1:d6:63:06:a2:dd:ff:74:63:3b:bf:5c:0d:9c:27:4f:d3: 2a:0a:8e:15:01:91:13:8d:16:28:40:7e:57:cb:f9:79:ec:f7: bc:a1:6e:9b:52:b9:3e:ba:f2:3b:db:43:04:e9:16:2c:1d:10: 5e:75:40:d0:97:b4:d4:f2:e2:35:e0:35:1e:1d:12:4f:c5:22: 3d:af:e0:a5:82:91:09:f9:4c:96:6c:a3:53:8e:3b:63:92:93: 34:8a:92:bc:7a:ca:7a:ee:9f:af:1b:0c:f6:37:d9:bf:b4:f3: 2f:70:5b:fa:a1:08:f0:38:c9:4c:9a:af:07:c8:dc:ef:40:2a: 2a:f7:6c:f5 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSdei0Qg+g5qQOrFQBoejcCFRNXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDRaFw0yNDExMDMwNDA3MDRaMDMxMTAvBgNV BAMTKEVCNzE4MDZERDg4Rjg0RjBBNzQ4Qjc1NEEyOTU2QzZDMkMxOTc3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyHghvuJEzc9fjewZTzzcwRhOS 1uamAkmhRzkrZPImiOCU9G31cruSxSnPmc17tMNqxYHH3scLgJTCmLsbR5wnF8gF C7iNrmmXodcFW5UJHqakUxJ0/gWqicZBtyw/klWVmVcklMhlGFK+k0ae6R3Qj3bm KtbOtP8QRXBx+mataYz8RS10ZWxtzHLHPsG0w7skiuR9rWno9Wak9yFo37NRySuN 5quGahvvGVb1RRqKLUu/JBI4nod4aoPeX0zSR8kEfSndxJ8sNfZKV22AioGmSXtH 7vi0jZA7rYRZLbE5wzbKYWUTrZ6Xb+u6etmjKUtzZV7nv0Y2MY0UlwrJevXPAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU63GAbdiPhPCnSLdUopVsbCwZd5MwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAxNTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPowDQYJKoZIhvcNAQELBQADggEBAC57 FYp8PsNoeEVUP5LuSHK/M5Ppse+oco630Km7FHJ2PDSQ7us4UEV3frogbhzIxivF TX3HxUvdw8jeRA8uNp7IlKjO3g8KMWD2hfJ/w81a69JIWzbryJRpvZ+4rxzOAg2y r//Pw58PWZHSk1kKUm6iK9WCtURV6wRC1Y0m3H3h1mMGot3/dGM7v1wNnCdP0yoK jhUBkRONFihAflfL+Xns97yhbptSuT668jvbQwTpFiwdEF51QNCXtNTy4jXgNR4d Ek/FIj2v4KWCkQn5TJZso1OOO2OSkzSKkrx6ynrun68bDPY32b+08y9wW/qhCPA4 yUyarwfI3O9AKir3bPU= -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org