$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215549.roa File: AS215549.roa (raw, json) Hash identifier: jeMeF5AqYIO9ZSj5a0vIXJ2BHdcjDjb9NRZb4oss44s= Subject key identifier: 90:45:82:3E:7D:08:D3:B9:31:5F:21:48:AD:39:6B:D3:C3:9E:5B:05 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 09C768AE7B602B048D11B1BC93F1AC523E036C71 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215549.roa Signing time: Tue 26 Mar 2024 10:16:34 +0000 ROA not before: Tue 26 Mar 2024 10:11:34 +0000 ROA not after: Tue 25 Mar 2025 10:16:34 +0000 asID: 215549 IP address blocks: 2a06:9f81:1300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c7:68:ae:7b:60:2b:04:8d:11:b1:bc:93:f1:ac:52:3e:03:6c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 26 10:11:34 2024 GMT Not After : Mar 25 10:16:34 2025 GMT Subject: CN=9045823E7D08D3B9315F2148AD396BD3C39E5B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:9f:c9:58:bb:91:55:86:b0:4f:57:da:c9: f7:65:6e:82:ed:cc:f6:da:62:07:f6:56:8e:4f:21: 70:f4:7c:24:60:79:55:46:1c:81:9d:93:4a:d3:61: b8:74:89:3e:00:4b:2e:96:24:b6:ca:1d:6e:0d:cb: 53:80:9a:1e:94:0e:7f:36:06:f1:9a:02:1a:ff:03: 77:ce:d8:66:c5:06:d2:7b:52:5b:a5:75:a6:3b:ef: f6:18:e0:fe:b0:4f:6d:8a:54:ad:ca:11:e9:57:19: ad:31:c4:b0:43:c7:06:8c:82:f7:b5:ab:2c:f3:85: 7c:fa:c0:9d:be:04:c1:a8:39:d3:bb:b6:b9:60:d0: 15:e1:f2:17:58:c1:00:cb:d9:4e:3b:80:dc:20:22: 66:67:fd:63:07:04:3b:52:71:4c:5c:17:0b:f0:32: 55:65:b1:99:85:a6:70:a1:df:1d:ff:06:41:d4:46: fc:a8:a7:2c:e9:49:91:17:a4:6c:46:96:7e:de:ac: 11:e2:4e:5e:71:ce:c0:e1:bd:e5:f2:52:44:dc:ed: 0e:50:f7:a4:0a:72:ab:19:a5:c8:9f:26:76:81:51: 6d:76:ce:8f:a1:f1:27:4b:50:fe:ce:d9:ad:26:99: 8f:a0:de:aa:7d:0b:fa:d2:11:1d:9c:67:23:5a:9b: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:45:82:3E:7D:08:D3:B9:31:5F:21:48:AD:39:6B:D3:C3:9E:5B:05 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215549.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:1300::/40 Signature Algorithm: sha256WithRSAEncryption 20:0c:4f:a2:b5:84:b9:d4:3b:2e:67:e3:c4:fd:a8:74:1e:ea: db:bc:47:10:ac:da:b5:a0:d5:9d:9e:c0:91:76:1a:66:5e:8a: 00:9d:3a:af:4b:6d:9f:7f:bb:62:a9:8d:a9:b8:5c:b0:27:e1: 5b:be:ab:d0:14:83:bb:e8:d2:45:54:3a:c8:61:0d:5f:fe:fd: fc:12:e5:40:ba:98:06:f6:1f:d4:f0:20:48:e5:af:ee:a7:9d: ac:8a:ab:68:0e:40:0a:59:c1:b8:0d:89:d6:13:26:d5:6a:10: e9:a6:dd:04:c3:50:00:81:df:5a:92:03:8a:c9:44:25:64:ea: 29:67:c0:02:f6:fe:46:50:48:8d:08:4d:c4:f0:a1:61:e4:07: dc:2e:a7:54:30:a5:23:63:5f:75:80:ab:61:d5:51:59:3b:07: c4:aa:8d:3e:d0:46:87:c6:d6:e6:33:34:bf:4d:8f:ac:ef:3b: 62:06:7d:30:d5:c9:f5:3c:ef:0a:b7:77:1b:ca:54:1a:8a:06: 5b:cf:63:50:c3:f1:f8:e3:34:af:02:60:d6:63:ad:38:db:aa: 7d:78:fe:1f:ee:01:8b:dc:3c:c1:34:5f:91:48:b4:9d:fc:ba: 33:20:59:a1:34:7d:3a:6d:35:74:b6:f6:48:1c:b6:c4:3e:4d: c9:59:a0:08 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCcdorntgKwSNEbG8k/GsUj4DbHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMjYxMDExMzRaFw0yNTAzMjUxMDE2MzRaMDMxMTAvBgNV BAMTKDkwNDU4MjNFN0QwOEQzQjkzMTVGMjE0OEFEMzk2QkQzQzM5RTVCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENJ/JWLuRVYawT1fayfdlboLt zPbaYgf2Vo5PIXD0fCRgeVVGHIGdk0rTYbh0iT4ASy6WJLbKHW4Ny1OAmh6UDn82 BvGaAhr/A3fO2GbFBtJ7UluldaY77/YY4P6wT22KVK3KEelXGa0xxLBDxwaMgve1 qyzzhXz6wJ2+BMGoOdO7trlg0BXh8hdYwQDL2U47gNwgImZn/WMHBDtScUxcFwvw MlVlsZmFpnCh3x3/BkHURvyopyzpSZEXpGxGln7erBHiTl5xzsDhveXyUkTc7Q5Q 96QKcqsZpcifJnaBUW12zo+h8SdLUP7O2a0mmY+g3qp9C/rSER2cZyNam1CBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUkEWCPn0I07kxXyFIrTlr08OeWwUwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1NTQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgRMwDQYJKoZIhvcNAQELBQADggEBACAM T6K1hLnUOy5n48T9qHQe6tu8RxCs2rWg1Z2ewJF2GmZeigCdOq9LbZ9/u2Kpjam4 XLAn4Vu+q9AUg7vo0kVUOshhDV/+/fwS5UC6mAb2H9TwIEjlr+6nnayKq2gOQApZ wbgNidYTJtVqEOmm3QTDUACB31qSA4rJRCVk6ilnwAL2/kZQSI0ITcTwoWHkB9wu p1QwpSNjX3WAq2HVUVk7B8SqjT7QRofG1uYzNL9Nj6zvO2IGfTDVyfU87wq3dxvK VBqKBlvPY1DD8fjjNK8CYNZjrTjbqn14/h/uAYvcPME0X5FItJ38ujMgWaE0fTpt NXS29kgctsQ+TclZoAg= -----END CERTIFICATE-----Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org