$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS207778.roa File: AS207778.roa (raw, json) Hash identifier: 90Pf0K5HMP9duNG/SVUK6b5ROYCMltll3GeueTZmGn8= Subject key identifier: 68:E7:42:E8:33:02:52:8E:E2:77:53:9D:23:0D:0D:EB:D4:18:EE:80 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 04C73FE732F16B2B553D2FE84FCB56C9572F1D26 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS207778.roa Signing time: Wed 04 Dec 2024 10:24:32 +0000 ROA not before: Wed 04 Dec 2024 10:19:32 +0000 ROA not after: Wed 03 Dec 2025 10:24:32 +0000 asID: 207778 IP address blocks: 2a0a:6040:d500::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Feb 2025 20:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c7:3f:e7:32:f1:6b:2b:55:3d:2f:e8:4f:cb:56:c9:57:2f:1d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 4 10:19:32 2024 GMT Not After : Dec 3 10:24:32 2025 GMT Subject: CN=68E742E83302528EE277539D230D0DEBD418EE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:75:6e:41:1d:06:11:39:6c:92:2d:99:09: 6e:17:fd:78:91:11:84:87:f9:cc:c0:d9:3a:d9:d1: ce:24:c9:f8:06:25:12:a8:49:6b:79:b1:82:ff:91: 2f:9f:df:29:6c:2b:58:a8:81:52:c1:5a:32:34:24: 7f:76:0f:90:1e:66:0d:fd:95:da:63:6e:17:11:9e: 5a:21:40:93:ca:bd:2b:db:5a:84:db:92:d7:e8:0f: bc:1f:a6:53:86:37:a1:91:ac:6a:ff:8d:eb:8e:ba: 0f:60:8d:0e:dd:c8:64:24:50:83:f9:f6:38:6e:8f: fa:16:44:fc:91:9d:7c:45:6b:11:5d:d5:8d:83:33: 4c:ae:5e:c8:a5:18:38:88:4b:40:00:68:8f:4a:da: 95:f1:b6:90:5e:ca:d0:c5:96:66:0b:ba:25:40:bb: 4b:84:ec:f8:6f:54:05:ab:2d:81:0b:0d:a8:7e:83: 97:62:d4:73:30:89:1c:86:78:94:82:6e:ed:96:fc: 41:3d:80:69:34:cc:38:b0:9c:90:8e:f1:83:a7:6d: b0:cd:54:da:9c:57:8f:96:8a:0f:13:9d:97:43:d2: 3b:6c:b4:59:33:1e:e2:63:2b:be:73:6a:51:81:b7: 82:61:dd:61:64:db:a5:e5:79:9c:f9:1b:b6:54:d9: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E7:42:E8:33:02:52:8E:E2:77:53:9D:23:0D:0D:EB:D4:18:EE:80 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS207778.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:d500::/40 Signature Algorithm: sha256WithRSAEncryption 35:90:8e:5b:cb:e0:53:9e:00:fe:34:40:2b:7c:4e:c7:0e:88: 4d:42:d5:bd:df:16:a3:5d:07:02:09:a6:1a:97:89:46:78:03: 5e:6c:fe:46:70:80:4b:2a:f0:19:16:e0:ac:3b:f9:fa:ab:fa: 98:5c:be:e4:8e:b6:0f:fb:c3:bb:d3:83:93:52:07:b6:09:35: 2a:75:2e:13:03:f6:e0:6b:b5:66:c2:30:84:fe:fb:65:2b:02: 8e:e9:f8:c2:60:5a:0e:20:78:f9:a0:68:e5:24:93:63:4e:06: 23:35:3f:68:93:3a:44:b7:97:5f:5f:24:22:f8:72:b5:48:96: 4b:0d:09:ce:8e:af:16:d9:2c:f2:d7:45:ae:3c:4d:5d:51:b7: a2:65:bb:5e:a7:f9:f5:8a:b7:98:79:75:17:3e:c7:dd:37:b9: f6:e4:4c:99:f5:17:83:8b:0e:a6:8f:5d:f0:1d:b1:b5:23:e5: c2:73:10:03:2e:9f:e1:a7:53:d7:46:fc:84:09:0a:44:0a:4e: f5:5d:40:dd:c7:3a:7f:8a:4e:9f:07:a8:09:be:0d:9d:38:05: 88:ef:08:4f:6a:6f:61:7f:9b:eb:63:41:65:54:b3:ec:f2:ad: 22:65:2c:06:71:56:35:9c:32:60:e0:c6:ec:89:78:84:b5:2b: 31:cd:41:5c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBMc/5zLxaytVPS/oT8tWyVcvHSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEyMDQxMDE5MzJaFw0yNTEyMDMxMDI0MzJaMDMxMTAvBgNV BAMTKDY4RTc0MkU4MzMwMjUyOEVFMjc3NTM5RDIzMEQwREVCRDQxOEVFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJnVuQR0GETlski2ZCW4X/XiR EYSH+czA2TrZ0c4kyfgGJRKoSWt5sYL/kS+f3ylsK1iogVLBWjI0JH92D5AeZg39 ldpjbhcRnlohQJPKvSvbWoTbktfoD7wfplOGN6GRrGr/jeuOug9gjQ7dyGQkUIP5 9jhuj/oWRPyRnXxFaxFd1Y2DM0yuXsilGDiIS0AAaI9K2pXxtpBeytDFlmYLuiVA u0uE7PhvVAWrLYELDah+g5di1HMwiRyGeJSCbu2W/EE9gGk0zDiwnJCO8YOnbbDN VNqcV4+Wig8TnZdD0jtstFkzHuJjK75zalGBt4Jh3WFk26XleZz5G7ZU2cE1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUaOdC6DMCUo7id1OdIw0N69QY7oAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA3Nzc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNUwDQYJKoZIhvcNAQELBQADggEBADWQ jlvL4FOeAP40QCt8TscOiE1C1b3fFqNdBwIJphqXiUZ4A15s/kZwgEsq8BkW4Kw7 +fqr+phcvuSOtg/7w7vTg5NSB7YJNSp1LhMD9uBrtWbCMIT++2UrAo7p+MJgWg4g ePmgaOUkk2NOBiM1P2iTOkS3l19fJCL4crVIlksNCc6OrxbZLPLXRa48TV1Rt6Jl u16n+fWKt5h5dRc+x903ufbkTJn1F4OLDqaPXfAdsbUj5cJzEAMun+GnU9dG/IQJ CkQKTvVdQN3HOn+KTp8HqAm+DZ04BYjvCE9qb2F/m+tjQWVUs+zyrSJlLAZxVjWc MmDgxuyJeIS1KzHNQVw= -----END CERTIFICATE-----Generated at Wed Feb 5 07:44:31 2025 by rpki-client