$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212884.roa File: AS212884.roa (raw, json) Hash identifier: 7KCQmpVDWJYTgzTQy4NK0TNTEEQ6+sHjjiS2mELOueQ= Subject key identifier: 52:D6:0A:9C:51:64:89:AA:21:58:D2:F0:8B:12:75:4F:6B:99:3F:7D Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 07E13ACB1A29AAADEEDD1C7E5ACDAF77C5DEAFBA Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212884.roa Signing time: Sun 06 Oct 2024 04:45:01 +0000 ROA not before: Sun 06 Oct 2024 04:40:01 +0000 ROA not after: Sun 05 Oct 2025 04:45:01 +0000 asID: 212884 IP address blocks: 2a0a:6040:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e1:3a:cb:1a:29:aa:ad:ee:dd:1c:7e:5a:cd:af:77:c5:de:af:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:01 2024 GMT Not After : Oct 5 04:45:01 2025 GMT Subject: CN=52D60A9C516489AA2158D2F08B12754F6B993F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:c4:2b:75:aa:f6:37:02:27:9d:e7:84:cf: 57:8a:fe:7f:ab:66:91:7f:13:7a:59:d7:9d:7f:37: 01:56:4e:ed:34:e6:7c:4c:e9:35:01:8a:ec:30:dc: 24:99:84:e0:3b:90:7b:80:bc:f7:4a:6e:8c:1f:4e: 17:58:40:25:15:40:59:51:62:5a:f2:9a:65:b9:e5: 1f:f1:d8:90:13:5d:ce:d6:69:e8:9b:cb:7f:74:a5: 2d:33:6b:3b:eb:4f:da:a6:f2:7a:37:d5:e2:f4:83: 8d:e0:d6:38:5e:0f:80:c8:55:06:32:90:ac:b9:69: 7b:f2:2d:61:f2:af:14:2d:32:0f:0a:4c:b4:3d:ab: 40:9b:e1:5b:00:ef:25:84:53:50:49:3a:04:fa:29: 15:c9:37:15:8d:56:98:cd:04:63:65:10:74:8a:aa: 2d:fc:c2:b0:9f:9c:b2:3c:d3:62:be:10:95:6b:93: 9a:da:68:39:64:04:36:4b:d6:eb:6e:d2:a3:ef:ae: 27:5f:d6:c1:56:58:16:07:c2:ed:80:f4:6f:5a:e6: e9:cd:25:22:97:54:12:d9:31:c6:b6:08:ae:d3:0d: 0d:25:92:29:33:d0:64:1f:fb:c9:45:5e:0d:17:d5: 6b:30:0d:17:8a:a2:3c:c7:9d:b6:15:bc:e0:97:9f: d5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D6:0A:9C:51:64:89:AA:21:58:D2:F0:8B:12:75:4F:6B:99:3F:7D X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2900::/40 Signature Algorithm: sha256WithRSAEncryption 56:d4:85:29:c6:9b:e7:1c:86:22:4f:43:5e:0e:4c:03:6a:bb: d5:9c:6e:19:95:7f:51:9f:54:a7:13:0d:69:e0:bc:99:35:a8: 7e:0e:9c:3c:74:6d:ff:70:a3:4d:bd:54:a4:1c:d4:4a:e3:21: bb:59:82:57:62:d0:51:04:97:01:1e:4b:06:69:e8:7e:f0:57: 3c:97:67:07:89:d2:55:b0:b9:0c:3c:7c:1d:78:7e:ce:2d:08: 76:db:af:86:14:3d:42:27:6f:bf:1c:aa:80:43:a5:75:0e:dd: f3:78:50:da:18:b6:d8:6b:f5:9d:8e:99:9a:52:2d:96:c5:b1: 58:4b:2d:8c:f6:6c:29:46:32:92:cf:44:73:c5:eb:8d:66:18: 1a:95:b7:80:5c:05:a1:77:7a:eb:82:b1:17:58:27:14:f2:42: f1:84:8f:26:d8:a1:a9:59:2e:ce:72:64:30:06:18:89:ed:dc: 79:6b:4b:42:35:3b:a2:a1:e2:02:4f:98:4c:1b:bd:01:75:8d: 6e:43:2c:0f:c9:06:16:3e:fa:36:1a:2d:ec:b4:93:ab:96:fe: f6:08:2a:62:d2:12:a7:b8:25:7d:30:32:83:b2:3b:ae:bf:45: bd:c1:59:89:30:49:71:8a:17:2f:9a:f8:90:4c:0a:59:be:ac: db:f7:7a:9e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUB+E6yxopqq3u3Rx+Ws2vd8Xer7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDFaFw0yNTEwMDUwNDQ1MDFaMDMxMTAvBgNV BAMTKDUyRDYwQTlDNTE2NDg5QUEyMTU4RDJGMDhCMTI3NTRGNkI5OTNGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+98Qrdar2NwInneeEz1eK/n+r ZpF/E3pZ151/NwFWTu005nxM6TUBiuww3CSZhOA7kHuAvPdKbowfThdYQCUVQFlR YlrymmW55R/x2JATXc7Waeiby390pS0zazvrT9qm8no31eL0g43g1jheD4DIVQYy kKy5aXvyLWHyrxQtMg8KTLQ9q0Cb4VsA7yWEU1BJOgT6KRXJNxWNVpjNBGNlEHSK qi38wrCfnLI802K+EJVrk5raaDlkBDZL1utu0qPvridf1sFWWBYHwu2A9G9a5unN JSKXVBLZMca2CK7TDQ0lkikz0GQf+8lFXg0X1WswDReKojzHnbYVvOCXn9X5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUUtYKnFFkiaohWNLwixJ1T2uZP30wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEyODg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCkwDQYJKoZIhvcNAQELBQADggEBAFbU hSnGm+cchiJPQ14OTANqu9WcbhmVf1GfVKcTDWngvJk1qH4OnDx0bf9wo029VKQc 1ErjIbtZgldi0FEElwEeSwZp6H7wVzyXZweJ0lWwuQw8fB14fs4tCHbbr4YUPUIn b78cqoBDpXUO3fN4UNoYtthr9Z2OmZpSLZbFsVhLLYz2bClGMpLPRHPF641mGBqV t4BcBaF3euuCsRdYJxTyQvGEjybYoalZLs5yZDAGGInt3HlrS0I1O6Kh4gJPmEwb vQF1jW5DLA/JBhY++jYaLey0k6uW/vYIKmLSEqe4JX0wMoOyO66/Rb3BWYkwSXGK Fy+a+JBMClm+rNv3ep4= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org