$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203868.roa File: AS203868.roa (raw, json) Hash identifier: EoI/LhNBZOEdDV67byLjksLfitQNL1JLEYE5VQGuwrg= Subject key identifier: B8:23:EB:9C:8E:96:04:27:79:E3:19:1B:54:AF:10:C7:BA:1C:BC:2B Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 28C7C81529418D1819091455481B4EE02FD943BB Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203868.roa Signing time: Sat 27 Jul 2024 07:50:31 +0000 ROA not before: Sat 27 Jul 2024 07:45:31 +0000 ROA not after: Sat 26 Jul 2025 07:50:31 +0000 asID: 203868 IP address blocks: 2a0a:6040:dd00::/40 maxlen: 48 2a0a:6040:fb00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c7:c8:15:29:41:8d:18:19:09:14:55:48:1b:4e:e0:2f:d9:43:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jul 27 07:45:31 2024 GMT Not After : Jul 26 07:50:31 2025 GMT Subject: CN=B823EB9C8E96042779E3191B54AF10C7BA1CBC2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:62:f4:a9:7f:fa:68:99:ad:97:bb:d8:ac: cf:e8:eb:0d:1e:40:ec:06:18:b5:8c:d0:01:e9:67: ab:b6:26:b8:71:40:cb:cd:0d:8b:59:96:eb:95:7b: 9b:c8:af:15:4c:ea:1b:33:c1:c8:18:c8:24:06:ff: b8:4b:a0:31:06:98:5e:02:bf:18:03:70:8a:0d:40: 37:e6:f1:09:36:8a:2b:cb:00:70:e1:93:d4:34:56: d7:ba:01:09:89:e4:64:4d:8c:8e:8c:ef:b7:72:c6: 06:1d:d2:af:b5:a9:44:34:44:5c:93:9d:04:06:1d: 04:c9:a3:4c:5c:4e:75:d9:00:83:6d:14:a8:05:8b: 62:c6:d3:81:c3:a8:d2:d8:9e:90:9e:80:3d:d1:59: 29:16:ee:74:a6:86:d2:ee:b6:4d:d5:90:6f:f6:81: db:be:33:fb:8a:97:79:8e:05:d6:01:82:9e:ed:2e: 83:fc:43:f4:64:c2:c4:32:14:dd:6c:8b:59:a0:16: 31:15:94:b4:7d:5c:e9:5b:e1:89:be:74:04:c4:c9: b9:36:fd:5c:23:81:99:67:ee:e6:fa:ce:60:16:13: 2b:fe:7a:5e:d1:3f:60:2a:7b:55:7e:15:6d:cc:a8: e7:25:64:bc:63:a9:09:fb:84:88:e1:ff:24:f1:6d: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:EB:9C:8E:96:04:27:79:E3:19:1B:54:AF:10:C7:BA:1C:BC:2B X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS203868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:dd00::/40 2a0a:6040:fb00::/40 Signature Algorithm: sha256WithRSAEncryption 45:ca:50:79:2a:cf:1a:8a:56:ad:e9:79:6d:ef:48:6d:b3:ec: cc:35:4b:4f:79:be:95:94:60:53:00:de:aa:94:93:99:00:99: fb:b1:31:87:af:a1:93:2b:31:d1:1c:5d:81:17:74:94:85:60: 37:5f:5b:be:20:bf:9c:55:24:8a:16:54:7a:1c:2d:b9:08:65: 42:68:d1:ee:a7:3e:29:26:14:d5:a6:c5:e9:fa:48:c8:7c:c2: ac:0d:46:af:99:22:0f:41:13:ae:d8:bb:4d:09:a9:37:d9:06: 7c:bf:43:4a:ae:40:a9:a6:5d:df:a0:00:5a:de:8c:ce:83:3e: d0:56:3a:c8:4a:e0:ab:83:a5:2b:21:33:c5:86:15:43:6b:ad: b6:08:26:10:d6:65:5a:79:0f:56:a2:f9:42:19:1b:28:fb:8e: 73:8c:b7:06:60:41:a3:06:3e:11:e8:d3:0d:ba:ad:45:bf:c6: de:9e:ae:99:a0:a2:a2:9d:1d:59:54:39:53:c1:b7:f2:a3:6f: a2:9c:4c:8a:e4:c0:37:0b:1b:d9:b9:93:86:ba:9f:28:43:7c: 16:77:a0:8b:a4:ff:aa:ac:32:92:3a:d8:b1:9b:16:98:07:6b: b6:cc:66:ce:33:7e:be:cc:b2:ed:54:4f:36:42:6d:0e:4a:b7: 1c:28:a7:b0 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUKMfIFSlBjRgZCRRVSBtO4C/ZQ7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA3MjcwNzQ1MzFaFw0yNTA3MjYwNzUwMzFaMDMxMTAvBgNV BAMTKEI4MjNFQjlDOEU5NjA0Mjc3OUUzMTkxQjU0QUYxMEM3QkExQ0JDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqz2L0qX/6aJmtl7vYrM/o6w0e QOwGGLWM0AHpZ6u2JrhxQMvNDYtZluuVe5vIrxVM6hszwcgYyCQG/7hLoDEGmF4C vxgDcIoNQDfm8Qk2iivLAHDhk9Q0Vte6AQmJ5GRNjI6M77dyxgYd0q+1qUQ0RFyT nQQGHQTJo0xcTnXZAINtFKgFi2LG04HDqNLYnpCegD3RWSkW7nSmhtLutk3VkG/2 gdu+M/uKl3mOBdYBgp7tLoP8Q/RkwsQyFN1si1mgFjEVlLR9XOlb4Ym+dATEybk2 /VwjgZln7ub6zmAWEyv+el7RP2Aqe1V+FW3MqOclZLxjqQn7hIjh/yTxbWTtAgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQUuCPrnI6WBCd54xkbVK8Qx7ocvCswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAzODY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgpgQN0DBgAqCmBA+zANBgkqhkiG9w0BAQsF AAOCAQEARcpQeSrPGopWrel5be9IbbPszDVLT3m+lZRgUwDeqpSTmQCZ+7Exh6+h kysx0RxdgRd0lIVgN19bviC/nFUkihZUehwtuQhlQmjR7qc+KSYU1abF6fpIyHzC rA1Gr5kiD0ETrti7TQmpN9kGfL9DSq5AqaZd36AAWt6MzoM+0FY6yErgq4OlKyEz xYYVQ2uttggmENZlWnkPVqL5QhkbKPuOc4y3BmBBowY+EejTDbqtRb/G3p6umaCi op0dWVQ5U8G38qNvopxMiuTANwsb2bmThrqfKEN8Fnegi6T/qqwykjrYsZsWmAdr tsxmzjN+vsyy7VRPNkJtDkq3HCinsA== -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org