$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209512.roa File: AS209512.roa (raw, json) Hash identifier: h41MG5CO0yxGPr8+KBIfGkIbA+8DZANaO7KMj63xRX0= Subject key identifier: CA:D8:B3:66:E9:8F:B3:C6:02:A4:3A:D9:F8:B3:42:59:5E:9A:F0:85 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4003CE4BB20CE452CA2F7B057E65F64AB29C08FF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209512.roa Signing time: Mon 30 Sep 2024 10:44:52 +0000 ROA not before: Mon 30 Sep 2024 10:39:52 +0000 ROA not after: Mon 29 Sep 2025 10:44:52 +0000 asID: 209512 IP address blocks: 2a05:dfc1:c500::/40 maxlen: 48 2a05:dfc1:c600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:03:ce:4b:b2:0c:e4:52:ca:2f:7b:05:7e:65:f6:4a:b2:9c:08:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 30 10:39:52 2024 GMT Not After : Sep 29 10:44:52 2025 GMT Subject: CN=CAD8B366E98FB3C602A43AD9F8B342595E9AF085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:34:3f:f4:94:ee:e8:59:70:2a:3a:5e:99: 76:fd:3d:6e:0a:18:2a:00:3e:52:fa:9a:92:44:65: 8f:71:6f:13:38:20:9e:a2:94:36:c4:21:e5:b7:2d: c4:de:72:c1:2c:c1:1d:30:0e:88:c2:94:09:21:98: 8c:1a:e1:08:69:1c:99:6b:4f:ed:6e:82:a2:4a:f7: 15:3b:1e:5e:b8:de:6b:e9:85:e5:0d:bf:df:c1:9e: b8:9e:e8:32:93:3a:d9:91:13:96:f6:62:5b:07:83: 96:8e:f7:f0:48:3c:57:bf:f1:15:14:eb:48:c4:b0: 19:e2:6e:20:e6:9c:dd:96:eb:8f:37:1d:47:78:98: d8:76:0c:dd:41:7e:ce:b4:8f:a5:71:aa:1d:86:5c: 72:f7:bc:2c:60:0a:9c:aa:dd:c5:3b:cf:0e:af:89: ed:be:2e:eb:8e:9e:89:06:e0:78:80:1d:e6:17:9e: 73:e4:1e:93:57:61:ec:cc:42:ba:95:da:d5:19:39: 33:62:8b:84:b7:a6:81:80:f7:04:ce:ac:12:a9:a7: 52:d9:50:a1:55:a5:f1:bf:32:35:bb:1c:5e:b0:3f: a5:fd:a9:71:63:de:bd:fc:43:1d:f8:f5:8b:b6:c3: e4:d4:97:27:dd:6d:86:00:ab:18:e0:19:2f:e2:a2: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D8:B3:66:E9:8F:B3:C6:02:A4:3A:D9:F8:B3:42:59:5E:9A:F0:85 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS209512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c500::-2a05:dfc1:c6ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 44:74:22:d2:65:80:17:f4:b6:45:e0:26:32:61:28:7f:de:41: 3c:f6:59:3e:f4:fb:7d:3a:2a:1c:be:88:28:32:52:e4:8e:28: 33:22:07:f0:70:f9:d7:dc:80:7a:3a:89:45:84:fc:da:13:58: 07:5b:2b:50:58:ce:6f:5b:bf:68:82:dc:ff:3a:0c:92:6b:1e: 89:96:55:51:8f:76:38:f5:4b:e4:99:76:47:7c:8c:e7:d1:fe: 0d:0f:3f:78:11:b5:ea:da:48:8e:53:56:5f:6d:0a:5a:c3:cc: 43:b8:5b:2f:52:71:d0:a0:ed:9e:d1:ff:1c:99:04:6d:9a:a9: 3f:d8:a2:b5:6e:ed:85:e1:0a:3c:b6:63:51:b7:4a:c3:2e:2b: 92:38:b5:54:b4:64:cd:79:a1:94:ef:0c:44:81:df:07:2d:ae: a9:b4:02:53:8c:25:2d:97:97:c6:6b:3c:24:13:6a:cd:fb:8a: 2d:ed:e1:86:0b:3c:a9:2d:6c:4c:0e:97:20:40:7b:96:7b:ca: e7:b4:fe:c1:cd:7a:74:ec:96:9d:d0:57:ca:7c:85:a7:fc:f9: b0:9f:8b:fd:1c:74:b6:df:6a:c6:b6:7e:19:ac:21:ea:24:2d: b0:e5:5a:cc:f3:78:25:59:21:0d:be:e1:b8:1a:22:91:2a:d7: 7e:40:e4:ed -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUQAPOS7IM5FLKL3sFfmX2SrKcCP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA5MzAxMDM5NTJaFw0yNTA5MjkxMDQ0NTJaMDMxMTAvBgNV BAMTKENBRDhCMzY2RTk4RkIzQzYwMkE0M0FEOUY4QjM0MjU5NUU5QUYwODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhTQ/9JTu6FlwKjpemXb9PW4K GCoAPlL6mpJEZY9xbxM4IJ6ilDbEIeW3LcTecsEswR0wDojClAkhmIwa4QhpHJlr T+1ugqJK9xU7Hl643mvpheUNv9/Bnrie6DKTOtmRE5b2YlsHg5aO9/BIPFe/8RUU 60jEsBnibiDmnN2W6483HUd4mNh2DN1Bfs60j6Vxqh2GXHL3vCxgCpyq3cU7zw6v ie2+LuuOnokG4HiAHeYXnnPkHpNXYezMQrqV2tUZOTNii4S3poGA9wTOrBKpp1LZ UKFVpfG/MjW7HF6wP6X9qXFj3r38Qx349Yu2w+TUlyfdbYYAqxjgGS/iokrHAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUytizZumPs8YCpDrZ+LNCWV6a8IUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjA5NTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBd/BxQMGACoF38HGMA0GCSqGSIb3DQEB CwUAA4IBAQBEdCLSZYAX9LZF4CYyYSh/3kE89lk+9Pt9OiocvogoMlLkjigzIgfw cPnX3IB6OolFhPzaE1gHWytQWM5vW79ogtz/OgySax6JllVRj3Y49UvkmXZHfIzn 0f4NDz94EbXq2kiOU1ZfbQpaw8xDuFsvUnHQoO2e0f8cmQRtmqk/2KK1bu2F4Qo8 tmNRt0rDLiuSOLVUtGTNeaGU7wxEgd8HLa6ptAJTjCUtl5fGazwkE2rN+4ot7eGG CzypLWxMDpcgQHuWe8rntP7BzXp07Jad0FfKfIWn/Pmwn4v9HHS232rGtn4ZrCHq JC2w5VrM83glWSENvuG4GiKRKtd+QOTt -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org