$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212178.roa File: AS212178.roa (raw, json) Hash identifier: znU8/d1NmuGk1ZgKMwTMPLis9CYsAwnt7CYmS3snyE0= Subject key identifier: F8:C6:D5:12:DE:A1:EB:E8:D3:1E:2C:20:21:7E:31:8A:53:98:D3:96 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7146D432379CDC5AB6518368530BEE6EF68D5C64 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212178.roa Signing time: Sun 05 Nov 2023 04:07:07 +0000 ROA not before: Sun 05 Nov 2023 04:02:07 +0000 ROA not after: Sun 03 Nov 2024 04:07:07 +0000 asID: 212178 IP address blocks: 2a0a:6040:5600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:46:d4:32:37:9c:dc:5a:b6:51:83:68:53:0b:ee:6e:f6:8d:5c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:07 2023 GMT Not After : Nov 3 04:07:07 2024 GMT Subject: CN=F8C6D512DEA1EBE8D31E2C20217E318A5398D396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:55:8d:c2:19:5f:39:d2:79:aa:2e:70:40: de:91:1d:5f:f8:57:c5:b0:b3:0d:52:bd:87:f8:cb: ed:0c:e8:01:aa:d6:bf:7d:5a:aa:c0:64:d8:48:aa: ad:65:f7:f4:ca:b0:d7:14:cd:76:30:b1:41:e4:6d: 69:a2:79:64:4c:8d:29:73:6e:84:28:76:49:68:5f: 1d:1c:04:3c:74:f5:80:00:44:cf:9a:7e:08:7a:4a: 94:0d:de:70:61:62:99:43:9e:cb:54:61:34:c1:bd: 39:85:20:f9:32:d7:34:1e:ec:02:17:3f:5e:ad:19: 2b:2b:d7:ca:5b:35:f1:5a:a3:dc:6c:54:33:ae:00: 64:2d:56:b9:f0:69:92:44:7e:98:0a:30:52:f4:3f: f4:c5:1d:76:42:28:8a:7a:85:aa:15:af:ac:49:11: 3c:24:fb:33:c0:41:7c:97:6e:f1:0c:22:1d:43:da: 62:fd:8c:1c:ae:67:0e:6a:67:6b:8e:99:c2:82:dd: 02:5e:0c:6e:46:40:a4:f9:13:77:3c:ff:bf:79:89: 0f:f6:13:fd:3d:0f:78:7c:a5:9b:3c:ec:ad:c4:fe: 2a:8f:a9:27:90:5f:6f:01:1d:55:6b:32:79:8e:4d: c8:2f:ed:eb:cc:30:54:e7:1b:9e:75:0d:f2:20:be: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C6:D5:12:DE:A1:EB:E8:D3:1E:2C:20:21:7E:31:8A:53:98:D3:96 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212178.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:5600::/40 Signature Algorithm: sha256WithRSAEncryption 64:4d:f1:e4:90:0c:67:70:e0:36:78:55:40:29:39:b8:ee:d6: 81:d7:6d:b8:a8:12:ba:24:25:20:ed:8a:23:5d:02:06:3d:d0: f6:ab:68:a6:39:45:0c:9d:22:82:df:83:8a:a3:49:43:6d:fb: 07:62:92:fd:ee:95:29:c7:96:62:be:9b:22:d7:f0:1e:64:5f: b9:3d:59:e4:e5:ab:81:80:1c:2e:81:5d:65:1a:40:df:6f:45: 6e:38:cf:2f:aa:df:41:1b:44:b2:6a:08:45:c3:f3:20:58:55: a1:80:ce:e3:fa:a0:c3:70:62:23:e4:df:81:14:4c:56:71:b8: 37:d0:6a:bd:c6:dd:14:92:03:1c:ef:ca:71:f8:ac:ba:f2:9a: e6:c2:3f:b8:d8:ac:29:99:f3:a3:c4:50:18:13:af:2e:62:10: ce:b9:5f:6e:80:d8:83:05:95:c0:40:5b:4d:2c:2e:0e:84:35: 1c:72:8b:e5:f6:b9:23:80:20:d4:65:38:9a:c0:23:9a:fe:bf: 03:b8:19:5e:56:ef:8e:a4:ae:23:e5:c5:f4:2b:d2:20:34:79: 60:34:83:a0:5b:86:aa:b6:de:1a:ac:2f:01:ca:66:15:9c:56: d8:f7:87:ac:a4:bc:84:fc:c5:2d:46:50:d8:50:55:58:e2:1f: 96:d5:d3:d9 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcUbUMjec3Fq2UYNoUwvubvaNXGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDdaFw0yNDExMDMwNDA3MDdaMDMxMTAvBgNV BAMTKEY4QzZENTEyREVBMUVCRThEMzFFMkMyMDIxN0UzMThBNTM5OEQzOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXClWNwhlfOdJ5qi5wQN6RHV/4 V8Wwsw1SvYf4y+0M6AGq1r99WqrAZNhIqq1l9/TKsNcUzXYwsUHkbWmieWRMjSlz boQodkloXx0cBDx09YAARM+afgh6SpQN3nBhYplDnstUYTTBvTmFIPky1zQe7AIX P16tGSsr18pbNfFao9xsVDOuAGQtVrnwaZJEfpgKMFL0P/TFHXZCKIp6haoVr6xJ ETwk+zPAQXyXbvEMIh1D2mL9jByuZw5qZ2uOmcKC3QJeDG5GQKT5E3c8/795iQ/2 E/09D3h8pZs87K3E/iqPqSeQX28BHVVrMnmOTcgv7evMMFTnG551DfIgvotdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+MbVEt6h6+jTHiwgIX4xilOY05YwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEyMTc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFYwDQYJKoZIhvcNAQELBQADggEBAGRN 8eSQDGdw4DZ4VUApObju1oHXbbioErokJSDtiiNdAgY90ParaKY5RQydIoLfg4qj SUNt+wdikv3ulSnHlmK+myLX8B5kX7k9WeTlq4GAHC6BXWUaQN9vRW44zy+q30Eb RLJqCEXD8yBYVaGAzuP6oMNwYiPk34EUTFZxuDfQar3G3RSSAxzvynH4rLrymubC P7jYrCmZ86PEUBgTry5iEM65X26A2IMFlcBAW00sLg6ENRxyi+X2uSOAINRlOJrA I5r+vwO4GV5W746kriPlxfQr0iA0eWA0g6Bbhqq23hqsLwHKZhWcVtj3h6ykvIT8 xS1GUNhQVVjiH5bV09k= -----END CERTIFICATE-----Generated at Mon May 20 13:08:22 2024 by rpki-client on console-fra.rpki-client.org