$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212884.roa File: AS212884.roa (raw, json) Hash identifier: 4wEe7JYfperBGxSwjeOV5M5d+eULo53enCWhaUbUBXA= Subject key identifier: 6C:4D:BA:B0:2B:D5:B7:AA:10:61:3E:9C:B1:0B:8E:2D:B0:CD:48:ED Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 41B615B42F03693558E75A73A824AD38871233E8 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212884.roa Signing time: Sun 05 Nov 2023 04:07:00 +0000 ROA not before: Sun 05 Nov 2023 04:02:00 +0000 ROA not after: Sun 03 Nov 2024 04:07:00 +0000 asID: 212884 IP address blocks: 2a0a:6040:2900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:15:b4:2f:03:69:35:58:e7:5a:73:a8:24:ad:38:87:12:33:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:00 2023 GMT Not After : Nov 3 04:07:00 2024 GMT Subject: CN=6C4DBAB02BD5B7AA10613E9CB10B8E2DB0CD48ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:3e:b5:12:24:86:42:6a:1a:cc:06:b8:8f: d5:f3:7a:11:bc:a6:5b:3a:15:1a:5e:bb:7f:d6:cf: a3:1c:2c:24:7c:99:49:cd:0e:b8:d5:eb:38:71:29: e5:57:13:51:5a:bd:60:84:3f:6e:25:83:a3:f0:dd: e9:4f:a6:c5:75:a9:81:2c:4e:cc:ea:cf:48:d2:e4: 13:b1:d0:d1:9c:0a:d0:74:1f:59:66:ee:8f:8e:40: b9:35:87:5f:1f:40:8d:db:df:06:55:55:4a:aa:d5: 5c:a3:f0:19:90:b7:3c:7d:72:fd:48:4a:25:1d:5f: 30:27:f2:4b:ab:ff:8b:4d:6a:2a:79:6d:d6:79:74: e4:59:3b:cb:69:ee:05:f4:3d:7a:2e:45:4e:61:60: f2:0a:5b:8f:f0:92:fd:4f:51:b6:7b:93:d7:fa:8b: 41:48:eb:87:5a:a2:fd:1a:fa:ee:6d:93:83:22:d2: 46:6d:60:9b:2b:d3:b9:49:9a:5a:3c:29:e7:5d:2a: f8:41:d0:ae:2f:2b:0d:44:68:d9:f6:11:09:83:64: 2f:71:56:9e:2c:c7:e6:e2:56:f1:dd:9f:d0:1a:e1: 35:6b:f5:01:71:37:1e:b8:de:15:fa:3d:c7:cb:05: 9d:30:61:fa:f7:18:65:39:b1:b9:b8:79:c2:35:bf: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4D:BA:B0:2B:D5:B7:AA:10:61:3E:9C:B1:0B:8E:2D:B0:CD:48:ED X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212884.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2900::/40 Signature Algorithm: sha256WithRSAEncryption 24:68:20:b8:e7:f1:86:24:bb:c9:37:b3:f6:19:8d:59:89:28: 8c:8e:99:c5:6f:19:a3:71:7d:12:2a:15:e1:71:b1:c5:f0:f3: a8:12:69:0c:80:6b:62:37:14:c6:ed:50:27:7b:fa:f0:80:6a: a2:ce:e3:ca:c5:42:2f:f9:e9:c8:a0:c4:bb:c8:68:1a:af:da: d1:fe:1c:2a:a7:86:80:ef:0c:6b:c0:4e:89:7e:70:a6:8b:62: 5a:95:de:cc:cf:4b:1d:0e:2a:7a:00:f6:12:01:64:6c:80:b7: b7:c7:da:72:d2:5b:1a:b2:e1:39:f6:06:63:0b:2b:4d:86:9d: db:e0:04:11:e8:21:4d:8a:1f:7c:c5:5b:3d:46:ca:5b:17:cc: 23:61:bd:9c:12:6f:95:fe:db:55:db:8b:24:2c:88:a0:f4:2b: b1:49:a9:dd:3a:6f:41:94:90:76:58:d0:f3:d8:61:33:79:e0: 5c:45:15:c4:a4:e8:36:d0:d5:1c:42:c0:14:5b:09:f2:0c:e8: db:00:3a:92:75:66:ac:0f:af:b1:0e:b5:89:82:11:51:d1:ad: f0:db:4e:d4:b8:6f:67:bd:a7:3f:1d:7b:0d:0a:ff:30:f8:69: ba:05:d5:9e:d5:eb:c7:55:b5:3c:9c:24:7b:37:2e:2a:cb:1e: 48:9e:58:a2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQbYVtC8DaTVY51pzqCStOIcSM+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDBaFw0yNDExMDMwNDA3MDBaMDMxMTAvBgNV BAMTKDZDNERCQUIwMkJENUI3QUExMDYxM0U5Q0IxMEI4RTJEQjBDRDQ4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2j61EiSGQmoazAa4j9XzehG8 pls6FRpeu3/Wz6McLCR8mUnNDrjV6zhxKeVXE1FavWCEP24lg6Pw3elPpsV1qYEs Tszqz0jS5BOx0NGcCtB0H1lm7o+OQLk1h18fQI3b3wZVVUqq1Vyj8BmQtzx9cv1I SiUdXzAn8kur/4tNaip5bdZ5dORZO8tp7gX0PXouRU5hYPIKW4/wkv1PUbZ7k9f6 i0FI64daov0a+u5tk4Mi0kZtYJsr07lJmlo8KeddKvhB0K4vKw1EaNn2EQmDZC9x Vp4sx+biVvHdn9Aa4TVr9QFxNx643hX6PcfLBZ0wYfr3GGU5sbm4ecI1v74/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUbE26sCvVt6oQYT6csQuOLbDNSO0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjEyODg0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQCkwDQYJKoZIhvcNAQELBQADggEBACRo ILjn8YYku8k3s/YZjVmJKIyOmcVvGaNxfRIqFeFxscXw86gSaQyAa2I3FMbtUCd7 +vCAaqLO48rFQi/56cigxLvIaBqv2tH+HCqnhoDvDGvATol+cKaLYlqV3szPSx0O KnoA9hIBZGyAt7fH2nLSWxqy4Tn2BmMLK02GndvgBBHoIU2KH3zFWz1GylsXzCNh vZwSb5X+21XbiyQsiKD0K7FJqd06b0GUkHZY0PPYYTN54FxFFcSk6DbQ1RxCwBRb CfIM6NsAOpJ1ZqwPr7EOtYmCEVHRrfDbTtS4b2e9pz8dew0K/zD4aboF1Z7V68dV tTycJHs3LirLHkieWKI= -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org