$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa File: AS205183.roa (raw, json) Hash identifier: McHWw5auDkUSTCKYrstBwKIzyNe2JsZ/1QYW5qF8eDI= Subject key identifier: 60:5F:6B:A1:1C:F3:10:A2:B3:46:0A:C5:77:02:59:47:AE:E1:E1:B5 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3DE4139EE14A5A13E3E6EAEC3657270AC561FB96 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa Signing time: Sun 06 Oct 2024 04:45:14 +0000 ROA not before: Sun 06 Oct 2024 04:40:14 +0000 ROA not after: Sun 05 Oct 2025 04:45:14 +0000 asID: 205183 IP address blocks: 2a0a:6040:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e4:13:9e:e1:4a:5a:13:e3:e6:ea:ec:36:57:27:0a:c5:61:fb:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:14 2024 GMT Not After : Oct 5 04:45:14 2025 GMT Subject: CN=605F6BA11CF310A2B3460AC577025947AEE1E1B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:08:07:6c:84:46:08:28:12:c5:ae:ba:ae: 9f:b0:14:d8:75:45:54:88:bc:a1:5a:dc:9b:d9:12: dd:3e:b5:01:14:58:78:41:d0:d4:8c:dd:d7:fb:c0: 30:b7:5d:3c:2c:d8:34:6c:5b:aa:f6:50:dc:4f:e6: 60:b7:ad:b8:6d:e2:d5:30:72:7c:c0:8d:89:33:c8: 16:f5:55:d7:f5:f4:d3:52:23:ff:5b:75:04:70:5d: 37:45:8a:8a:38:ca:35:5d:84:3d:7f:32:bb:95:dd: 4f:84:02:c4:c5:40:05:37:4b:7e:3e:bf:34:46:4c: c8:e1:0e:c4:01:e3:f5:d4:6f:f2:7f:fa:1d:72:c8: 3f:96:4d:24:81:53:09:3c:3c:12:26:2d:bc:15:3d: 09:94:3c:7a:0d:c0:c6:9c:57:33:f5:12:88:83:ef: 78:eb:8d:d6:fb:6e:47:8a:4f:34:3a:2a:7a:2f:25: 2b:4f:c9:46:8f:44:c1:fc:e8:de:bc:45:a5:d7:b8: b3:04:10:e3:89:ac:64:ae:04:7d:c5:28:c9:df:e7: df:ac:f5:1f:3b:7d:eb:ab:53:35:37:f5:10:cc:de: 7a:97:b3:d2:2e:24:99:91:03:d5:79:62:38:76:23: 60:be:9c:c6:87:ca:62:9f:ad:0f:38:b8:e3:ab:c1: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5F:6B:A1:1C:F3:10:A2:B3:46:0A:C5:77:02:59:47:AE:E1:E1:B5 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205183.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:c000::/40 Signature Algorithm: sha256WithRSAEncryption a2:42:15:d5:d4:33:99:bc:45:63:2f:00:7f:e7:d0:b4:2f:10: a4:7c:f5:47:67:9d:c3:ff:40:15:13:0b:56:08:ba:77:6a:30: 4d:22:14:b6:df:07:30:53:1e:d1:83:9e:57:2c:d8:2e:c2:7d: fd:cc:0c:5c:26:61:a8:6f:ea:82:74:0c:63:d6:72:a9:16:63: 25:c2:19:ec:e1:f6:59:2f:1d:54:4c:97:f6:76:13:3f:cb:9a: e5:44:f8:d6:e8:34:f3:25:7e:01:bb:7c:0c:3e:a5:b7:1c:51: ea:cb:69:35:73:0a:ab:8b:56:a9:79:61:86:d4:88:ea:36:46: 5c:38:79:d2:20:33:24:60:fc:19:93:d9:eb:ac:5a:aa:06:e1: 67:5a:a1:fc:ba:4b:c6:86:ab:56:4a:48:28:4f:ba:71:17:57: a1:c0:50:35:3e:1c:a3:ad:fb:fe:56:8f:e3:a4:b0:83:a8:77: e6:7e:7e:d6:37:ad:da:41:d6:30:cb:2f:e0:ea:0c:a9:52:ea: c2:27:f1:61:1c:74:74:b2:f3:5a:70:92:3c:54:0c:7e:a1:69: 24:2f:f4:42:9f:3b:94:45:3d:35:04:0f:89:c9:66:46:df:94: 01:3a:1a:38:98:fc:32:7b:bb:2f:93:79:23:7e:2c:ce:c0:70: 31:38:ad:d7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPeQTnuFKWhPj5ursNlcnCsVh+5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTRaFw0yNTEwMDUwNDQ1MTRaMDMxMTAvBgNV BAMTKDYwNUY2QkExMUNGMzEwQTJCMzQ2MEFDNTc3MDI1OTQ3QUVFMUUxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb+ggHbIRGCCgSxa66rp+wFNh1 RVSIvKFa3JvZEt0+tQEUWHhB0NSM3df7wDC3XTws2DRsW6r2UNxP5mC3rbht4tUw cnzAjYkzyBb1Vdf19NNSI/9bdQRwXTdFioo4yjVdhD1/MruV3U+EAsTFQAU3S34+ vzRGTMjhDsQB4/XUb/J/+h1yyD+WTSSBUwk8PBImLbwVPQmUPHoNwMacVzP1EoiD 73jrjdb7bkeKTzQ6KnovJStPyUaPRMH86N68RaXXuLMEEOOJrGSuBH3FKMnf59+s 9R87feurUzU39RDM3nqXs9IuJJmRA9V5Yjh2I2C+nMaHymKfrQ84uOOrwdUBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUYF9roRzzEKKzRgrFdwJZR67h4bUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA1MTgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQMAwDQYJKoZIhvcNAQELBQADggEBAKJC FdXUM5m8RWMvAH/n0LQvEKR89UdnncP/QBUTC1YIundqME0iFLbfBzBTHtGDnlcs 2C7Cff3MDFwmYahv6oJ0DGPWcqkWYyXCGezh9lkvHVRMl/Z2Ez/LmuVE+NboNPMl fgG7fAw+pbccUerLaTVzCquLVql5YYbUiOo2Rlw4edIgMyRg/BmT2eusWqoG4Wda ofy6S8aGq1ZKSChPunEXV6HAUDU+HKOt+/5Wj+OksIOod+Z+ftY3rdpB1jDLL+Dq DKlS6sIn8WEcdHSy81pwkjxUDH6haSQv9EKfO5RFPTUED4nJZkbflAE6GjiY/DJ7 uy+TeSN+LM7AcDE4rdc= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org