$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214847.roa File: AS214847.roa (raw, json) Hash identifier: 9a1liQtciQF5t7Un2cIdQhJLvD0+7Mrvk7wjH/a7YXQ= Subject key identifier: 75:62:F7:18:72:AD:C6:E2:F3:AB:C6:AF:72:82:50:6F:7A:D8:28:D5 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 15000D02B607F4C30AD8987C736981503B22B7B7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214847.roa Signing time: Sat 25 May 2024 12:10:26 +0000 ROA not before: Sat 25 May 2024 12:05:26 +0000 ROA not after: Sat 24 May 2025 12:10:26 +0000 asID: 214847 IP address blocks: 2a06:9f81:4300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:00:0d:02:b6:07:f4:c3:0a:d8:98:7c:73:69:81:50:3b:22:b7:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 25 12:05:26 2024 GMT Not After : May 24 12:10:26 2025 GMT Subject: CN=7562F71872ADC6E2F3ABC6AF7282506F7AD828D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:97:b4:b7:e6:1d:39:8c:08:63:49:86:35: 77:82:ed:9d:e6:ea:11:b4:f6:17:3e:43:1f:45:f9: d8:f5:74:ae:ec:86:68:bb:32:1b:bf:d5:57:04:72: 16:bd:f0:52:81:ef:34:8c:dc:94:d8:b6:6a:03:2f: f7:fe:26:f6:14:91:ac:6b:66:b7:b4:d5:eb:32:d1: 76:fd:ca:f1:9b:da:49:7c:86:2d:d9:ba:fb:26:0c: d8:5b:de:cb:27:00:22:5f:52:5b:ab:05:7d:c7:b3: 43:39:57:92:81:0c:12:28:5e:4b:8b:49:37:2c:fc: 96:d4:9e:fa:c6:e5:be:68:17:c0:3b:3c:30:fd:49: 7d:63:a4:25:2f:49:fb:3b:5f:d7:68:4c:0e:b0:44: 7b:b5:5b:a5:d2:0a:fe:61:18:d6:d7:ab:43:8b:f4: 95:51:3f:ad:b2:be:25:66:46:89:22:3d:6f:86:bd: 99:fb:96:60:ec:31:d6:3e:8a:21:4b:ce:55:a9:31: 80:9a:17:55:51:65:b8:2f:12:73:17:df:41:88:ed: 7a:e9:52:96:3f:21:79:63:f0:d0:42:f7:a2:b7:30: 13:fa:41:5c:d1:2d:96:f3:a8:92:37:79:04:86:1b: 65:fe:e9:3c:0d:70:34:f4:05:63:de:2f:fe:68:07: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:62:F7:18:72:AD:C6:E2:F3:AB:C6:AF:72:82:50:6F:7A:D8:28:D5 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4300::/40 Signature Algorithm: sha256WithRSAEncryption 43:77:f9:a9:6d:53:58:a1:53:c2:88:29:ef:0f:10:fd:4f:ac: bc:cd:69:82:ce:af:b2:ad:6e:0f:28:ba:26:07:fa:a5:d5:f3: 44:bd:47:ff:5a:d1:89:4b:e8:62:66:93:3d:3b:2a:33:dc:19: 01:e9:f3:6e:17:ba:7f:16:3b:f8:16:fd:a7:9a:ac:52:69:4a: f5:2a:e1:4c:98:b3:c9:ea:c8:d3:d0:04:76:0f:cf:95:b6:f5: d8:36:47:58:3a:b1:24:7f:aa:9b:de:43:f0:dc:5a:96:58:53: 3a:91:c8:ea:6c:af:2e:c7:4a:9c:fe:66:35:f2:56:92:4e:d9: 55:a5:c3:86:d0:a6:72:47:07:98:27:57:fe:a6:76:93:bc:7c: a9:58:23:d3:23:2a:4a:db:96:c7:6d:8e:cc:e2:b8:75:be:8f: 97:cf:85:9f:59:aa:07:48:85:4e:6c:47:43:4b:12:0e:fd:59: b0:b7:f4:a7:e8:23:fe:14:20:7d:d9:cc:d9:73:e1:ba:af:5a: 40:38:c2:f7:1c:e0:e0:64:91:82:cb:90:6b:f3:a0:e4:0b:1e: 9e:77:3a:62:2b:06:86:97:18:3f:50:0e:fa:be:b6:c3:07:cd: 13:9e:2e:4f:67:61:30:85:39:8b:45:e4:f2:91:32:fd:d7:d3: 1d:09:f2:6e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFQANArYH9MMK2Jh8c2mBUDsit7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MjUxMjA1MjZaFw0yNTA1MjQxMjEwMjZaMDMxMTAvBgNV BAMTKDc1NjJGNzE4NzJBREM2RTJGM0FCQzZBRjcyODI1MDZGN0FEODI4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojpe0t+YdOYwIY0mGNXeC7Z3m 6hG09hc+Qx9F+dj1dK7shmi7Mhu/1VcEcha98FKB7zSM3JTYtmoDL/f+JvYUkaxr Zre01esy0Xb9yvGb2kl8hi3ZuvsmDNhb3ssnACJfUlurBX3Hs0M5V5KBDBIoXkuL STcs/JbUnvrG5b5oF8A7PDD9SX1jpCUvSfs7X9doTA6wRHu1W6XSCv5hGNbXq0OL 9JVRP62yviVmRokiPW+GvZn7lmDsMdY+iiFLzlWpMYCaF1VRZbgvEnMX30GI7Xrp UpY/IXlj8NBC96K3MBP6QVzRLZbzqJI3eQSGG2X+6TwNcDT0BWPeL/5oB7b9AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUdWL3GHKtxuLzq8avcoJQb3rYKNUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE0ODQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgUMwDQYJKoZIhvcNAQELBQADggEBAEN3 +altU1ihU8KIKe8PEP1PrLzNaYLOr7Ktbg8ouiYH+qXV80S9R/9a0YlL6GJmkz07 KjPcGQHp824Xun8WO/gW/aearFJpSvUq4UyYs8nqyNPQBHYPz5W29dg2R1g6sSR/ qpveQ/DcWpZYUzqRyOpsry7HSpz+ZjXyVpJO2VWlw4bQpnJHB5gnV/6mdpO8fKlY I9MjKkrblsdtjsziuHW+j5fPhZ9ZqgdIhU5sR0NLEg79WbC39KfoI/4UIH3ZzNlz 4bqvWkA4wvcc4OBkkYLLkGvzoOQLHp53OmIrBoaXGD9QDvq+tsMHzROeLk9nYTCF OYtF5PKRMv3X0x0J8m4= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org