$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205965.roa File: AS205965.roa (raw, json) Hash identifier: XNY4GUfuwDYplJ7TgV04Eav+46uiFyeop1qRujyI0ao= Subject key identifier: A8:E2:48:97:88:30:4F:89:DB:C2:7A:B5:CB:6A:66:EA:E0:EB:9B:01 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4189C5F07F205C83C6275530A19D119B0B11B26E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205965.roa Signing time: Mon 16 Sep 2024 08:44:35 +0000 ROA not before: Mon 16 Sep 2024 08:39:35 +0000 ROA not after: Mon 15 Sep 2025 08:44:35 +0000 asID: 205965 IP address blocks: 2a05:dfc1:ad00::/40 maxlen: 48 2a05:dfc1:ae00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 14:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:89:c5:f0:7f:20:5c:83:c6:27:55:30:a1:9d:11:9b:0b:11:b2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 16 08:39:35 2024 GMT Not After : Sep 15 08:44:35 2025 GMT Subject: CN=A8E2489788304F89DBC27AB5CB6A66EAE0EB9B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:55:9e:14:53:c3:28:8c:cd:02:e0:ae:5a: fb:2d:42:03:af:53:40:f9:f8:7c:b7:85:43:23:ef: 82:44:13:a5:e9:34:de:b4:ce:94:f3:af:a0:27:c6: e8:9d:64:40:cc:a0:68:df:09:18:2e:15:67:15:f2: 62:58:cb:e9:76:49:a7:43:69:47:39:5f:ad:60:cf: 92:a4:3a:fe:56:9e:2a:a8:d4:95:92:35:d0:dd:60: ed:77:8f:19:a2:72:20:3d:83:6b:cf:58:7b:13:96: b8:78:f2:94:68:16:3c:ae:fb:89:39:eb:b6:40:4b: 1b:d6:ca:c6:5c:da:f4:50:ed:2b:92:82:93:92:8a: 76:8f:14:38:2d:a2:ef:d0:6f:03:d6:69:ce:e8:f3: b6:b0:08:04:dc:2b:51:27:58:01:43:f9:60:7e:f7: 6c:50:2c:a5:37:3a:6d:c6:ed:d1:b9:a8:19:f9:3b: 1d:0e:9f:73:3e:99:9f:24:0d:e7:71:71:7d:6f:f9: 39:3e:6f:0d:65:61:1b:b9:08:e0:90:b3:ad:11:f3: ed:a1:51:86:32:7b:9b:dc:ea:3f:c1:3b:eb:67:4e: af:2b:cc:ba:6a:71:c1:85:f3:67:d0:72:be:e3:af: 93:b0:ae:4c:88:0e:6e:29:d9:0c:cd:eb:28:38:5e: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E2:48:97:88:30:4F:89:DB:C2:7A:B5:CB:6A:66:EA:E0:EB:9B:01 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS205965.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:ad00::-2a05:dfc1:aeff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 70:d5:00:36:f4:aa:a6:87:53:1c:4a:a0:40:79:6b:15:9f:3c: 86:f3:58:fe:ff:b6:f4:4c:f2:42:9c:3b:bd:c8:47:74:2d:18: e8:d3:67:7a:46:34:83:66:cf:48:69:e6:3f:59:2f:01:f9:bf: 0f:10:c0:51:1a:48:46:40:55:79:c8:31:f8:5f:bb:9a:53:53: d7:d7:3b:fd:e3:61:00:ad:91:bd:6c:dc:4e:b4:a9:42:3f:1f: 27:1b:e1:6e:75:18:31:f1:98:ba:3e:b7:bc:5a:4e:9e:1b:6c: 65:7f:4a:9e:02:3c:db:ef:67:88:ee:e9:0b:1d:ff:c0:53:cd: b6:65:e7:54:50:d5:28:94:79:23:a5:09:80:a9:43:14:54:91: 0a:04:42:3e:f2:4c:a5:55:f1:56:26:2a:a3:f7:48:96:4c:2f: 77:cf:6f:0c:8a:63:21:c7:f5:2f:1a:1c:8b:52:46:ee:f5:21: 84:39:e9:3f:9b:8c:0e:d7:06:82:7d:a8:c8:a7:6b:a5:07:a3: 12:c2:0c:5f:7b:13:6f:69:5f:39:10:4a:42:2d:68:43:c9:9f: 37:92:12:ae:5c:ec:55:e8:51:a6:f8:76:7f:c2:9f:b7:40:16: a8:03:23:ad:dd:14:4b:fc:04:7d:29:d8:7f:b5:67:ba:fd:65: f7:3e:81:0d -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUQYnF8H8gXIPGJ1UwoZ0RmwsRsm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA5MTYwODM5MzVaFw0yNTA5MTUwODQ0MzVaMDMxMTAvBgNV BAMTKEE4RTI0ODk3ODgzMDRGODlEQkMyN0FCNUNCNkE2NkVBRTBFQjlCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxplWeFFPDKIzNAuCuWvstQgOv U0D5+Hy3hUMj74JEE6XpNN60zpTzr6AnxuidZEDMoGjfCRguFWcV8mJYy+l2SadD aUc5X61gz5KkOv5Wniqo1JWSNdDdYO13jxmiciA9g2vPWHsTlrh48pRoFjyu+4k5 67ZASxvWysZc2vRQ7SuSgpOSinaPFDgtou/QbwPWac7o87awCATcK1EnWAFD+WB+ 92xQLKU3Om3G7dG5qBn5Ox0On3M+mZ8kDedxcX1v+Tk+bw1lYRu5COCQs60R8+2h UYYye5vc6j/BO+tnTq8rzLpqccGF82fQcr7jr5OwrkyIDm4p2QzN6yg4XkLTAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUqOJIl4gwT4nbwnq1y2pm6uDrmwEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA1OTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BrQMGACoF38GuMA0GCSqGSIb3DQEB CwUAA4IBAQBw1QA29Kqmh1McSqBAeWsVnzyG81j+/7b0TPJCnDu9yEd0LRjo02d6 RjSDZs9IaeY/WS8B+b8PEMBRGkhGQFV5yDH4X7uaU1PX1zv942EArZG9bNxOtKlC Px8nG+FudRgx8Zi6Pre8Wk6eG2xlf0qeAjzb72eI7ukLHf/AU822ZedUUNUolHkj pQmAqUMUVJEKBEI+8kylVfFWJiqj90iWTC93z28MimMhx/UvGhyLUkbu9SGEOek/ m4wO1waCfajIp2ulB6MSwgxfexNvaV85EEpCLWhDyZ83khKuXOxV6FGm+HZ/wp+3 QBaoAyOt3RRL/AR9Kdh/tWe6/WX3PoEN -----END CERTIFICATE-----Generated at Sun Nov 24 03:16:14 2024 by rpki-client on console-ams.rpki-client.org