$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS207079.roa File: AS207079.roa (raw, json) Hash identifier: 8vOGHXk8QptGyCpUBuch6I+To+QUW18a0Qa5LHysje8= Subject key identifier: 2C:78:E9:BB:01:DC:92:6A:00:A0:C9:9D:18:86:E0:9C:08:C8:4E:C3 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7EC79D2FF3A6A55BCC4CE04A173E48F58732B3D9 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS207079.roa Signing time: Sun 06 Oct 2024 04:45:17 +0000 ROA not before: Sun 06 Oct 2024 04:40:17 +0000 ROA not after: Sun 05 Oct 2025 04:45:17 +0000 asID: 207079 IP address blocks: 2a0a:6040:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c7:9d:2f:f3:a6:a5:5b:cc:4c:e0:4a:17:3e:48:f5:87:32:b3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:17 2024 GMT Not After : Oct 5 04:45:17 2025 GMT Subject: CN=2C78E9BB01DC926A00A0C99D1886E09C08C84EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:4f:ec:a3:1f:36:7d:ca:04:bb:9a:47:6f: a4:5e:3c:56:01:1c:15:43:dd:ff:56:38:b6:9f:67: 56:9b:25:85:07:78:f4:20:29:1e:66:ea:66:a0:a1: 6b:c6:d2:db:5b:e8:56:85:39:57:4e:90:73:ce:ad: a7:67:05:ab:cc:59:8d:1a:a6:c4:b0:8d:48:7e:bf: 44:44:af:80:13:bd:14:a8:a0:f7:c8:28:de:8e:0c: 62:46:63:52:a3:03:3d:9d:4d:b5:8d:2c:22:be:11: 43:38:57:b0:0c:cb:99:32:0b:9a:07:c8:0e:83:43: 6f:9b:83:a5:da:f0:38:e8:7d:a7:c8:b2:e9:83:b1: 55:8b:6c:c2:6f:e7:0c:49:53:54:52:0e:bc:52:df: e1:e4:22:eb:04:c6:ee:f2:89:bc:e7:61:e6:84:f8: d5:11:85:92:e9:f2:7b:55:63:b1:c5:65:bc:30:0b: d0:7c:26:86:4f:c0:fa:b9:29:e2:a3:9d:b3:f0:cd: 2f:9b:19:d1:e9:93:5a:3a:ce:70:3e:f7:ae:e3:a8: 96:71:a2:c8:3a:72:58:a0:72:4d:94:3b:c0:46:1f: be:21:22:b5:5c:a6:16:de:7b:3f:60:24:e1:6c:7b: 6c:31:ae:6f:0e:0a:80:2c:ef:92:2d:c4:5f:a4:41: 21:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:78:E9:BB:01:DC:92:6A:00:A0:C9:9D:18:86:E0:9C:08:C8:4E:C3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS207079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2800::/40 Signature Algorithm: sha256WithRSAEncryption 2d:f9:23:4b:58:ff:6a:0a:ea:11:9a:6c:79:07:e0:2a:01:4d: ac:f3:09:2a:5d:6d:03:14:ca:8a:58:34:40:4a:87:ee:58:6e: 1d:a9:71:3a:60:29:d9:b2:5d:be:a0:5a:f6:85:d3:1b:73:2c: 3b:6c:68:af:68:e3:01:9f:79:75:84:bd:57:6d:c1:6c:76:d3: 4b:ea:5c:52:ee:f0:2f:98:2e:ba:75:88:f2:8d:fd:e7:07:60: 19:d5:2b:b1:3b:e4:b2:33:6a:78:e4:b0:22:d0:95:53:fb:88: d5:d7:4c:00:7d:27:81:5a:0e:2c:cf:08:ee:ac:d2:04:77:3d: 1e:f5:bd:1d:e9:92:5e:a4:cf:4c:75:ff:0b:5b:b4:16:9b:75: ae:58:df:b4:d2:d2:bc:fa:64:f7:15:5c:36:e7:ce:97:ca:c9: d2:d3:a8:bc:20:8b:bf:8f:93:58:52:75:0e:df:ca:fb:b5:cc: 8e:10:16:d4:51:72:e2:4f:5d:a6:22:2a:3c:d5:f1:ae:8f:c4: fc:8f:ec:a9:da:2f:6a:1c:c8:34:7d:95:a8:08:74:30:9a:69: 19:d9:f8:83:2e:23:2c:d3:1b:fc:bd:62:ae:fd:20:ac:d5:b9: e6:72:7d:d4:aa:ea:0c:90:27:8e:06:bc:e7:67:1a:60:81:72: 16:0a:57:61 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfsedL/OmpVvMTOBKFz5I9Ycys9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMTdaFw0yNTEwMDUwNDQ1MTdaMDMxMTAvBgNV BAMTKDJDNzhFOUJCMDFEQzkyNkEwMEEwQzk5RDE4ODZFMDlDMDhDODRFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgE/sox82fcoEu5pHb6RePFYB HBVD3f9WOLafZ1abJYUHePQgKR5m6magoWvG0ttb6FaFOVdOkHPOradnBavMWY0a psSwjUh+v0REr4ATvRSooPfIKN6ODGJGY1KjAz2dTbWNLCK+EUM4V7AMy5kyC5oH yA6DQ2+bg6Xa8DjofafIsumDsVWLbMJv5wxJU1RSDrxS3+HkIusExu7yibznYeaE +NURhZLp8ntVY7HFZbwwC9B8JoZPwPq5KeKjnbPwzS+bGdHpk1o6znA+967jqJZx osg6cligck2UO8BGH74hIrVcphbeez9gJOFse2wxrm8OCoAs75ItxF+kQSGxAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQULHjpuwHckmoAoMmdGIbgnAjITsMwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA3MDc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCgwDQYJKoZIhvcNAQELBQADggEBAC35 I0tY/2oK6hGabHkH4CoBTazzCSpdbQMUyopYNEBKh+5Ybh2pcTpgKdmyXb6gWvaF 0xtzLDtsaK9o4wGfeXWEvVdtwWx200vqXFLu8C+YLrp1iPKN/ecHYBnVK7E75LIz anjksCLQlVP7iNXXTAB9J4FaDizPCO6s0gR3PR71vR3pkl6kz0x1/wtbtBabda5Y 37TS0rz6ZPcVXDbnzpfKydLTqLwgi7+Pk1hSdQ7fyvu1zI4QFtRRcuJPXaYiKjzV 8a6PxPyP7KnaL2ocyDR9lagIdDCaaRnZ+IMuIyzTG/y9Yq79IKzVueZyfdSq6gyQ J44GvOdnGmCBchYKV2E= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org