$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211380.roa File: AS211380.roa (raw, json) Hash identifier: GRe6Y0p+PZq5v52ISr7xLvDWtD8UxObTwQzTtaOwugw= Subject key identifier: BB:1C:C3:18:EA:3D:EE:76:D2:EA:FC:09:79:68:4C:54:C0:25:8C:BD Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 496DBDA9FF137412F0A397C0F698961A2F407492 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211380.roa Signing time: Sun 06 Oct 2024 04:45:07 +0000 ROA not before: Sun 06 Oct 2024 04:40:07 +0000 ROA not after: Sun 05 Oct 2025 04:45:07 +0000 asID: 211380 IP address blocks: 2a0a:6040:b200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6d:bd:a9:ff:13:74:12:f0:a3:97:c0:f6:98:96:1a:2f:40:74:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:07 2024 GMT Not After : Oct 5 04:45:07 2025 GMT Subject: CN=BB1CC318EA3DEE76D2EAFC0979684C54C0258CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:32:68:15:32:29:cd:56:06:66:d2:23:6a: 2b:66:32:88:c3:23:7a:a8:ec:f8:35:72:b2:95:f7: 67:98:8b:80:ac:ae:b8:04:8c:9d:29:1a:8c:d9:72: 4d:05:f9:21:cc:13:fc:f6:8e:ca:6f:ab:27:2d:16: 53:d1:b5:66:15:f8:6f:8b:dd:16:28:3a:38:56:87: 89:da:f1:ff:d3:2e:94:18:43:bd:05:14:f8:20:c0: 99:29:8e:33:f2:17:3e:f9:9a:e7:23:53:6a:af:1d: e3:b2:87:c5:b9:7e:ba:a0:e9:de:68:bc:25:4b:21: ac:13:a6:ce:ff:5e:e7:4a:00:d8:ce:66:bd:8e:8c: ce:0e:e1:5f:fb:a7:73:ad:42:f7:ca:b5:12:38:1b: 7e:a8:bd:3e:8a:3b:81:69:79:35:71:1d:fa:8f:d2: ab:b6:81:04:77:2a:b7:29:eb:11:e5:71:94:8b:a6: 6f:d7:b7:84:91:bc:4f:43:0c:7e:10:18:b6:cc:67: 50:32:bb:39:f1:55:6c:6c:64:fe:ab:b3:78:55:f0: 3d:17:28:58:34:7b:25:fc:e8:f4:fd:5c:55:5d:5b: 9e:b8:8d:24:24:5c:88:00:b9:31:03:0b:62:c0:a5: 5d:77:5a:78:9f:79:a4:c6:3d:ad:50:08:b4:f3:18: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1C:C3:18:EA:3D:EE:76:D2:EA:FC:09:79:68:4C:54:C0:25:8C:BD X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS211380.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:b200::/40 Signature Algorithm: sha256WithRSAEncryption 82:ab:2b:f2:f3:93:ff:85:83:4b:83:2e:3e:ff:66:ef:2d:ba: 34:ed:0f:e9:a4:b0:34:74:5d:6d:55:4b:2a:52:52:c2:9c:71: 2b:bd:02:38:49:1a:03:4d:44:42:aa:ab:5e:51:3c:7d:8b:08: c5:e9:a2:1a:06:09:33:11:95:22:16:ca:09:ca:a4:86:cd:71: a8:f4:54:3d:78:7b:a1:f6:ff:41:73:a8:bc:f5:aa:28:42:65: a9:65:56:48:2c:ed:b7:b7:46:70:49:9e:6b:64:c6:f7:98:35: f1:11:4c:f0:fa:a1:00:b7:e3:43:27:9d:e6:73:fe:ef:69:c4: cf:72:39:ea:7b:20:21:f4:e4:0d:26:14:ee:f5:af:0f:ce:7e: 80:56:42:0c:11:09:54:d9:3e:fe:7b:41:dd:ff:08:ba:ca:f5: bf:c3:c4:3c:b1:30:15:27:af:47:7d:b3:ef:e0:42:7e:48:81: 15:63:ac:6f:c9:07:8c:58:df:3c:ba:9b:a0:9b:0a:d5:0c:7f: a6:ff:e1:4a:8b:1d:35:c5:46:e1:09:92:4f:a2:0a:ca:80:66: 42:78:d5:83:96:ff:fd:3c:41:03:91:04:71:e6:6e:6a:e0:b6: 34:72:b5:48:39:97:11:37:6d:50:b4:11:c4:22:65:3e:d0:4a: ae:07:73:ef -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSW29qf8TdBLwo5fA9piWGi9AdJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDdaFw0yNTEwMDUwNDQ1MDdaMDMxMTAvBgNV BAMTKEJCMUNDMzE4RUEzREVFNzZEMkVBRkMwOTc5Njg0QzU0QzAyNThDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKozJoFTIpzVYGZtIjaitmMojD I3qo7Pg1crKV92eYi4CsrrgEjJ0pGozZck0F+SHME/z2jspvqyctFlPRtWYV+G+L 3RYoOjhWh4na8f/TLpQYQ70FFPggwJkpjjPyFz75mucjU2qvHeOyh8W5frqg6d5o vCVLIawTps7/XudKANjOZr2OjM4O4V/7p3OtQvfKtRI4G36ovT6KO4FpeTVxHfqP 0qu2gQR3Krcp6xHlcZSLpm/Xt4SRvE9DDH4QGLbMZ1AyuznxVWxsZP6rs3hV8D0X KFg0eyX86PT9XFVdW564jSQkXIgAuTEDC2LApV13WnifeaTGPa1QCLTzGJXnAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUuxzDGOo97nbS6vwJeWhMVMAljL0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjExMzgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQLIwDQYJKoZIhvcNAQELBQADggEBAIKr K/Lzk/+Fg0uDLj7/Zu8tujTtD+mksDR0XW1VSypSUsKccSu9AjhJGgNNREKqq15R PH2LCMXpohoGCTMRlSIWygnKpIbNcaj0VD14e6H2/0FzqLz1qihCZallVkgs7be3 RnBJnmtkxveYNfERTPD6oQC340MnneZz/u9pxM9yOep7ICH05A0mFO71rw/OfoBW QgwRCVTZPv57Qd3/CLrK9b/DxDyxMBUnr0d9s+/gQn5IgRVjrG/JB4xY3zy6m6Cb CtUMf6b/4UqLHTXFRuEJkk+iCsqAZkJ41YOW//08QQORBHHmbmrgtjRytUg5lxE3 bVC0EcQiZT7QSq4Hc+8= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org