$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210110.roa File: AS210110.roa (raw, json) Hash identifier: QTPK6E/R0erIFM+506XSc945CQao2Ue73kRn/eodbdU= Subject key identifier: 28:37:35:B4:C9:9A:01:C1:94:35:5D:30:E2:4D:88:C3:0D:11:DD:44 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3D9447491E9AA3E19827E6722EA0843383F7F74F Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210110.roa Signing time: Thu 18 Jul 2024 09:04:55 +0000 ROA not before: Thu 18 Jul 2024 08:59:55 +0000 ROA not after: Thu 17 Jul 2025 09:04:55 +0000 asID: 210110 IP address blocks: 2a06:9f81:5701::/48 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:94:47:49:1e:9a:a3:e1:98:27:e6:72:2e:a0:84:33:83:f7:f7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jul 18 08:59:55 2024 GMT Not After : Jul 17 09:04:55 2025 GMT Subject: CN=283735B4C99A01C194355D30E24D88C30D11DD44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:5d:00:86:59:51:b0:f1:dc:2a:99:b6:7f: 15:69:f2:71:69:66:b9:13:9e:23:7e:9d:d2:c8:6c: d8:ae:53:82:af:f5:54:11:7d:e4:79:c8:be:de:8a: f5:17:99:01:ec:d6:96:23:64:49:e8:05:40:bc:ae: 51:cf:24:44:5c:d0:fe:e3:eb:b9:9b:41:33:12:79: f5:a2:85:02:50:4f:7e:3c:5c:21:49:c5:3d:30:ab: 0d:e8:6e:51:c0:13:29:0a:fd:0d:ad:9b:96:b3:45: b2:ff:45:54:bb:3a:32:c2:80:37:67:ff:b6:8e:63: b4:b8:2d:2b:45:74:fc:21:3c:8b:cc:2b:21:06:05: 66:4e:22:e7:fd:a0:89:4f:6d:fc:b7:7b:86:eb:ac: d6:c7:a7:3c:9e:10:07:e4:59:8d:61:84:41:87:d5: 94:fe:6d:4c:ba:94:c3:18:24:42:75:05:3c:70:a4: a3:40:d9:e5:95:3c:07:c3:33:02:57:bc:3b:23:e2: b8:c1:8d:90:d5:13:49:d6:71:80:18:30:1c:fe:67: a0:4c:3c:74:d1:40:90:40:e2:75:d0:08:86:40:c4: 75:46:e4:e2:2f:ce:51:f7:0b:f7:1f:7f:0f:6d:d3: fa:81:c5:93:a1:01:31:0f:e9:a3:b7:97:99:e7:7a: b0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:35:B4:C9:9A:01:C1:94:35:5D:30:E2:4D:88:C3:0D:11:DD:44 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS210110.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5701::/48 Signature Algorithm: sha256WithRSAEncryption 29:39:dc:0c:86:6f:8a:54:dd:ea:d4:75:3b:1c:4c:e7:7d:c4: 6d:ac:23:f0:29:68:79:41:5d:26:3e:de:9d:f8:54:00:83:40: b2:f9:ad:3f:41:0b:0b:ae:7f:19:25:8d:d9:53:f7:b6:8c:81: 66:83:30:78:2c:8a:75:94:93:54:67:81:ce:9a:bf:25:55:0c: 05:08:59:5e:f7:7d:07:e9:d6:0b:83:d6:d1:8a:a6:79:cc:24: c8:fe:03:19:31:25:8b:b3:17:47:59:ca:e4:b5:fc:17:b9:38: 6e:65:46:d2:49:7a:cc:7d:d4:a7:94:b8:14:d5:24:4e:0c:b5: 7b:b6:5b:ce:f6:79:25:88:e7:95:b3:54:5f:75:c5:fc:5d:7a: b5:ba:55:ac:89:c6:3b:72:b1:17:18:c7:89:79:b4:d0:2e:53: c3:10:b6:bf:df:af:9e:99:51:c1:d1:87:88:ad:5d:90:5a:96: a1:d5:e9:cc:31:ed:b2:c2:87:18:09:7f:41:66:79:82:2c:8b: e0:5f:c7:84:1d:1c:3d:5a:d7:36:cf:0f:b6:c6:ae:ee:c6:fc: 3f:3b:0b:b5:39:f0:ec:ab:9b:e2:4d:99:aa:f1:8b:34:c8:1d: 3f:90:44:82:c6:12:c4:40:e2:89:20:87:c2:76:3c:83:13:a7: a7:2c:20:69 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUPZRHSR6ao+GYJ+ZyLqCEM4P3908wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA3MTgwODU5NTVaFw0yNTA3MTcwOTA0NTVaMDMxMTAvBgNV BAMTKDI4MzczNUI0Qzk5QTAxQzE5NDM1NUQzMEUyNEQ4OEMzMEQxMURENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJc10AhllRsPHcKpm2fxVp8nFp ZrkTniN+ndLIbNiuU4Kv9VQRfeR5yL7eivUXmQHs1pYjZEnoBUC8rlHPJERc0P7j 67mbQTMSefWihQJQT348XCFJxT0wqw3oblHAEykK/Q2tm5azRbL/RVS7OjLCgDdn /7aOY7S4LStFdPwhPIvMKyEGBWZOIuf9oIlPbfy3e4brrNbHpzyeEAfkWY1hhEGH 1ZT+bUy6lMMYJEJ1BTxwpKNA2eWVPAfDMwJXvDsj4rjBjZDVE0nWcYAYMBz+Z6BM PHTRQJBA4nXQCIZAxHVG5OIvzlH3C/cffw9t0/qBxZOhATEP6aO3l5nnerD7AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUKDc1tMmaAcGUNV0w4k2Iww0R3UQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEwMTEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAKgafgVcBMA0GCSqGSIb3DQEBCwUAA4IBAQAp OdwMhm+KVN3q1HU7HEznfcRtrCPwKWh5QV0mPt6d+FQAg0Cy+a0/QQsLrn8ZJY3Z U/e2jIFmgzB4LIp1lJNUZ4HOmr8lVQwFCFle930H6dYLg9bRiqZ5zCTI/gMZMSWL sxdHWcrktfwXuThuZUbSSXrMfdSnlLgU1SRODLV7tlvO9nkliOeVs1RfdcX8XXq1 ulWsicY7crEXGMeJebTQLlPDELa/36+emVHB0YeIrV2QWpah1enMMe2ywocYCX9B ZnmCLIvgX8eEHRw9Wtc2zw+2xq7uxvw/Owu1OfDsq5viTZmq8Ys0yB0/kESCxhLE QOKJIIfCdjyDE6enLCBp -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org