$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212178.roa File: AS212178.roa (raw, json) Hash identifier: Y66QsnShl3FnS0OF2/Szlqs7SgCHMxmqg01FSSmojQo= Subject key identifier: 7D:66:57:1A:2C:B2:8A:E0:EF:A2:8A:D7:9A:6C:6C:A1:02:16:DD:0E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0A9F3D3B72B2E89843B5CA3130FE154893655111 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212178.roa Signing time: Sun 06 Oct 2024 04:45:00 +0000 ROA not before: Sun 06 Oct 2024 04:40:00 +0000 ROA not after: Sun 05 Oct 2025 04:45:00 +0000 asID: 212178 IP address blocks: 2a0a:6040:5600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9f:3d:3b:72:b2:e8:98:43:b5:ca:31:30:fe:15:48:93:65:51:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:00 2024 GMT Not After : Oct 5 04:45:00 2025 GMT Subject: CN=7D66571A2CB28AE0EFA28AD79A6C6CA10216DD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:ac:c9:bc:8d:25:c4:de:62:ef:bf:a6:09: b4:21:89:a0:4f:fa:b4:a6:c5:81:02:2d:9b:ea:6d: a7:55:1c:d3:8b:6f:d0:3f:ce:73:45:02:a3:56:d6: 5b:6a:00:75:bc:5c:04:12:28:c2:41:c9:73:e9:79: f2:44:c7:1f:88:47:37:6f:c6:d0:61:76:e5:c8:d2: 59:17:af:d7:fe:2a:9e:ad:2b:3a:33:6a:21:5b:de: ae:28:4e:32:dd:93:6d:7a:d6:96:74:e5:a1:a3:5f: f0:53:c3:05:9b:f9:e2:98:aa:6a:0d:9e:b1:f3:73: 5b:01:51:73:25:fd:a3:c8:ac:99:a8:cb:dd:7d:5c: 8f:5e:3e:1f:6c:8b:af:64:28:49:a2:c1:18:bf:cd: f1:64:de:9d:31:e3:38:be:7c:bb:3c:3d:0a:da:60: 2d:e2:32:23:27:33:a1:d0:98:44:b9:26:a7:c8:03: cb:47:f0:ea:c9:1b:75:25:4b:39:52:87:84:4e:14: 79:52:d6:62:2b:db:ab:c2:1a:b4:eb:8c:06:50:f1: 09:ae:5e:81:d1:73:3a:05:dc:ed:5c:ab:53:50:c8: 49:6c:4a:a1:66:23:de:5f:56:5d:b8:53:8e:9b:d5: 71:63:5b:86:f5:dc:ca:90:92:8c:f5:a5:c3:06:8d: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:57:1A:2C:B2:8A:E0:EF:A2:8A:D7:9A:6C:6C:A1:02:16:DD:0E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212178.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:5600::/40 Signature Algorithm: sha256WithRSAEncryption 19:40:53:a4:67:a1:32:bf:a1:da:cb:6e:e4:16:fc:46:fe:33: 78:33:84:af:53:a1:85:9d:7b:79:2f:a1:20:42:1b:a5:b9:f8: b8:d9:b8:5b:af:81:f2:39:34:c5:be:0a:00:97:9f:67:a3:a8: b3:e3:00:1a:5a:3a:a4:62:30:25:46:c3:cd:91:43:05:ce:34: 81:40:28:83:0b:de:4e:b9:e6:7f:6f:8a:10:df:e0:5d:30:69: 16:ac:6d:fa:39:e5:96:c3:2e:ba:2e:a1:c0:b7:ff:38:ee:72: 66:f8:03:dd:14:6d:b6:f1:5f:da:53:71:ce:3c:b6:6d:74:58: 02:d5:5e:85:e9:de:b6:4d:44:7c:d9:e1:96:da:cf:e6:51:40: 5b:82:50:ad:7a:3d:89:cb:a7:cb:57:e9:74:a2:ee:52:c9:6e: c1:9b:47:bd:dd:80:57:9c:7a:8b:88:03:f1:20:90:ca:e0:a3: 9e:f0:1c:0d:13:ae:dd:fd:16:f5:37:50:2d:26:61:ea:49:ca: 14:0f:d2:a1:df:83:bc:1f:59:a5:11:b0:27:92:22:54:38:f0: a6:18:f2:88:29:ad:ad:5c:b4:f7:d0:8c:51:2c:02:22:38:b9: 62:ea:e6:7c:0c:5b:c9:57:5a:7e:5f:ba:06:df:25:2f:7d:12: 74:c5:92:70 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCp89O3Ky6JhDtcoxMP4VSJNlUREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDBaFw0yNTEwMDUwNDQ1MDBaMDMxMTAvBgNV BAMTKDdENjY1NzFBMkNCMjhBRTBFRkEyOEFENzlBNkM2Q0ExMDIxNkREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHL6zJvI0lxN5i77+mCbQhiaBP +rSmxYECLZvqbadVHNOLb9A/znNFAqNW1ltqAHW8XAQSKMJByXPpefJExx+IRzdv xtBhduXI0lkXr9f+Kp6tKzozaiFb3q4oTjLdk2161pZ05aGjX/BTwwWb+eKYqmoN nrHzc1sBUXMl/aPIrJmoy919XI9ePh9si69kKEmiwRi/zfFk3p0x4zi+fLs8PQra YC3iMiMnM6HQmES5JqfIA8tH8OrJG3UlSzlSh4ROFHlS1mIr26vCGrTrjAZQ8Qmu XoHRczoF3O1cq1NQyElsSqFmI95fVl24U46b1XFjW4b13MqQkoz1pcMGjcl1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUfWZXGiyyiuDvoorXmmxsoQIW3Q4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEyMTc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQFYwDQYJKoZIhvcNAQELBQADggEBABlA U6RnoTK/odrLbuQW/Eb+M3gzhK9ToYWde3kvoSBCG6W5+LjZuFuvgfI5NMW+CgCX n2ejqLPjABpaOqRiMCVGw82RQwXONIFAKIML3k655n9vihDf4F0waRasbfo55ZbD LrouocC3/zjucmb4A90UbbbxX9pTcc48tm10WALVXoXp3rZNRHzZ4Zbaz+ZRQFuC UK16PYnLp8tX6XSi7lLJbsGbR73dgFeceouIA/EgkMrgo57wHA0Trt39FvU3UC0m YepJyhQP0qHfg7wfWaURsCeSIlQ48KYY8ogpra1ctPfQjFEsAiI4uWLq5nwMW8lX Wn5fugbfJS99EnTFknA= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org