$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215541.roa File: AS215541.roa (raw, json) Hash identifier: 1RgIKYWY0GAOdXtCHbnr1aou7hW7w90uXwqvaanxTho= Subject key identifier: 86:46:9F:79:51:CC:AA:AF:13:5B:12:6C:D6:97:B2:AE:08:7F:25:FD Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1DE81F8684D654A12DEB2FBF4F432437D6897435 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215541.roa Signing time: Fri 07 Jun 2024 23:54:58 +0000 ROA not before: Fri 07 Jun 2024 23:49:58 +0000 ROA not after: Fri 06 Jun 2025 23:54:58 +0000 asID: 215541 IP address blocks: 2a06:9f81:4700::/40 maxlen: 48 2a06:9f81:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e8:1f:86:84:d6:54:a1:2d:eb:2f:bf:4f:43:24:37:d6:89:74:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jun 7 23:49:58 2024 GMT Not After : Jun 6 23:54:58 2025 GMT Subject: CN=86469F7951CCAAAF135B126CD697B2AE087F25FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e2:ba:8c:f2:c0:83:cd:33:fa:f4:34:5c:e4: c4:4c:1d:cf:47:51:90:d8:ee:77:10:23:56:c3:e9: 80:68:3f:39:26:78:08:04:8b:39:bd:42:61:e7:81: f1:1c:97:0d:9c:1f:e5:34:c5:bd:da:f6:90:15:52: a8:a1:63:20:ec:7c:d4:0e:bd:43:ab:b2:9f:c5:ab: d7:1e:33:01:03:ee:fd:73:60:63:f0:9e:13:36:71: ef:82:89:5b:0c:84:bc:80:4f:23:33:78:c1:4e:de: 14:bc:02:bb:96:35:8e:2f:bb:64:44:04:b2:06:a3: d9:f7:b4:a1:ef:ff:fc:7a:1d:f6:53:64:a5:57:ea: bd:d9:01:59:1f:ea:0d:ae:49:13:23:b6:00:d6:b7: b0:93:13:9d:0e:15:42:54:d2:82:c0:59:e3:1e:3b: a3:75:ca:77:3e:b5:c9:1c:32:85:85:df:d7:9f:b1: 66:7d:74:03:98:c8:35:48:3e:63:e5:39:d5:31:72: 90:d0:c8:d9:31:e6:78:6e:5c:e4:65:f4:71:0b:a5: f6:f9:52:c0:63:d6:30:f9:d4:a6:6a:a3:3b:74:57: be:1f:a7:25:ec:e8:c0:d8:ee:16:65:08:ee:db:7e: 1b:f7:58:e4:c9:fa:fe:23:65:d4:e6:03:8d:aa:eb: ef:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:46:9F:79:51:CC:AA:AF:13:5B:12:6C:D6:97:B2:AE:08:7F:25:FD X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215541.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4700::-2a06:9f81:48ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 9a:59:b2:d8:6e:a4:fa:65:8d:0b:34:59:df:c0:b6:9c:f8:b8: dc:43:cd:d7:47:9a:41:00:c1:cf:d5:7b:0f:ae:80:14:4f:c7: 6b:1c:a4:f2:76:83:1d:e5:7d:e0:09:e4:f0:54:1a:90:0c:1f: 72:05:a6:33:19:f2:ae:57:da:16:9a:7f:de:8f:20:f5:ba:29: f3:e0:e6:ee:a5:d3:6f:21:bd:4c:dd:fe:bd:d9:63:1f:48:db: 6d:72:0e:72:79:aa:ec:45:da:ad:ce:ff:1f:cb:69:f5:52:bd: 3d:b7:c9:38:ca:99:1b:46:50:fe:2d:d9:4c:6b:26:c6:d3:c8: a4:bd:0c:cb:af:90:15:76:e7:a2:38:04:bc:de:f3:55:6b:fa: d8:e6:ad:61:53:84:ba:20:1a:9a:68:60:d8:86:7a:1a:21:5c: cd:ce:d4:d2:33:36:b0:8c:18:a6:52:11:5f:7b:78:c4:b8:40: aa:11:9e:9a:3f:05:82:79:9b:54:e6:35:4b:86:cb:0f:23:47: bf:1d:10:99:d3:a6:63:a0:4a:cb:d0:93:b2:7f:e1:dc:0c:69: 26:97:4d:90:a9:6b:f1:b9:85:a0:94:ce:f3:05:b8:cb:a2:a0: 86:72:c3:8c:ba:65:8a:6b:56:03:b1:9e:80:24:e5:cd:26:db: 10:28:dc:64 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUHegfhoTWVKEt6y+/T0MkN9aJdDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA2MDcyMzQ5NThaFw0yNTA2MDYyMzU0NThaMDMxMTAvBgNV BAMTKDg2NDY5Rjc5NTFDQ0FBQUYxMzVCMTI2Q0Q2OTdCMkFFMDg3RjI1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4rqM8sCDzTP69DRc5MRMHc9H UZDY7ncQI1bD6YBoPzkmeAgEizm9QmHngfEclw2cH+U0xb3a9pAVUqihYyDsfNQO vUOrsp/Fq9ceMwED7v1zYGPwnhM2ce+CiVsMhLyATyMzeMFO3hS8AruWNY4vu2RE BLIGo9n3tKHv//x6HfZTZKVX6r3ZAVkf6g2uSRMjtgDWt7CTE50OFUJU0oLAWeMe O6N1ync+tckcMoWF39efsWZ9dAOYyDVIPmPlOdUxcpDQyNkx5nhuXORl9HELpfb5 UsBj1jD51KZqozt0V74fpyXs6MDY7hZlCO7bfhv3WOTJ+v4jZdTmA42q6+/bAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUhkafeVHMqq8TWxJs1peyrgh/Jf0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1NTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBp+BRwMGACoGn4FIMA0GCSqGSIb3DQEB CwUAA4IBAQCaWbLYbqT6ZY0LNFnfwLac+LjcQ83XR5pBAMHP1XsProAUT8drHKTy doMd5X3gCeTwVBqQDB9yBaYzGfKuV9oWmn/ejyD1uinz4ObupdNvIb1M3f692WMf SNttcg5yearsRdqtzv8fy2n1Ur09t8k4ypkbRlD+LdlMaybG08ikvQzLr5AVduei OAS83vNVa/rY5q1hU4S6IBqaaGDYhnoaIVzNztTSMzawjBimUhFfe3jEuECqEZ6a PwWCeZtU5jVLhssPI0e/HRCZ06ZjoErL0JOyf+HcDGkml02QqWvxuYWglM7zBbjL oqCGcsOMumWKa1YDsZ6AJOXNJtsQKNxk -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org