$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215598.roa File: AS215598.roa (raw, json) Hash identifier: /jGLOG8lq5Nva+RqABWk/1K+yDUx/qUjQiuEiYYZHds= Subject key identifier: E2:CD:A4:86:3D:49:E2:D9:45:05:F8:5C:A2:24:CA:77:F6:7E:1C:20 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7CBF3406C8A12B0A229D27DBB9CFE88982F4EE15 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215598.roa Signing time: Sat 25 May 2024 07:16:44 +0000 ROA not before: Sat 25 May 2024 07:11:44 +0000 ROA not after: Sat 24 May 2025 07:16:44 +0000 asID: 215598 IP address blocks: 2a06:9f81:4100::/40 maxlen: 48 2a06:9f81:4200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bf:34:06:c8:a1:2b:0a:22:9d:27:db:b9:cf:e8:89:82:f4:ee:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 25 07:11:44 2024 GMT Not After : May 24 07:16:44 2025 GMT Subject: CN=E2CDA4863D49E2D94505F85CA224CA77F67E1C20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:49:ea:92:04:3e:54:54:88:08:6f:d3:2b: d5:7a:e8:ed:c0:91:da:c8:e7:c1:46:15:4c:b2:1c: 60:da:86:da:0c:81:75:fe:69:89:ac:a0:b2:aa:58: d0:f1:54:da:0d:25:af:a7:5a:b9:46:22:0d:c9:fb: 48:d1:2b:b9:05:99:31:ef:1b:1d:41:c4:ef:9c:2d: 02:b6:39:8b:a3:33:65:04:45:e0:ba:45:48:ff:a0: b3:c0:32:40:e0:34:e7:ff:3f:45:96:7e:3f:c0:e0: b6:e0:62:39:ff:08:11:b5:03:c7:3a:69:9d:bc:e3: 98:c8:d5:5e:1c:35:43:7e:cc:b6:d0:54:0b:93:c2: e7:7a:9f:e6:6a:1d:dd:93:36:c7:86:cf:6c:87:91: 3d:0c:8f:1b:6a:b8:ef:cc:3d:a7:89:f8:f3:21:2c: 1b:e6:18:04:e9:fa:a3:b1:c8:d1:88:b4:19:24:16: 2d:fe:15:04:35:d4:bd:f6:75:63:c4:c5:28:f3:c9: 3b:17:36:28:b8:93:f6:87:e2:4f:8f:83:f5:40:bc: 97:de:b3:97:06:ac:16:00:7e:53:7e:a5:a7:01:11: f9:3f:0b:31:e3:85:ff:0e:d9:02:a0:04:27:5c:d0: 1f:a8:d4:16:df:4b:58:fc:93:70:ea:21:8b:99:b9: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:A4:86:3D:49:E2:D9:45:05:F8:5C:A2:24:CA:77:F6:7E:1C:20 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4100::-2a06:9f81:42ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 23:6a:6b:70:70:55:e6:5b:21:3d:56:5c:75:ef:51:61:3f:d4: 1d:a0:11:91:4e:1e:6a:80:69:03:c2:03:b2:9f:cc:9a:44:98: 25:6a:f3:ea:10:c5:49:dd:57:c4:d5:56:b5:db:6a:e1:54:fd: ed:b1:4b:5b:47:95:6f:ac:a6:f7:5c:41:0e:09:e2:07:90:57: 6e:e4:68:83:70:e2:d2:c6:61:ee:6d:5f:9f:a9:3b:95:ed:e6: 10:61:5a:bb:12:b3:07:96:b5:32:71:df:3d:b4:f9:68:40:9a: e4:c3:6d:0d:9e:f1:d4:55:f5:1b:43:b0:0e:cc:33:34:79:ca: 80:2a:fa:39:17:90:92:6e:2e:c9:29:62:32:e0:40:52:61:95: a5:70:ce:94:8e:93:5f:93:7c:db:89:94:e1:e4:fa:49:01:ad: 11:f1:2a:48:e3:93:aa:63:25:44:ae:6f:c1:59:2b:c7:ae:75: 97:44:68:e1:b6:e1:dc:f3:bd:8b:90:08:ef:45:55:ca:4f:58: 88:10:df:12:fd:31:24:f1:a3:6f:81:5b:b1:d8:cc:70:0b:a9: 8b:6e:cc:96:cd:99:c3:86:c8:22:15:db:d6:90:53:98:61:74: a5:2f:ea:4c:64:7f:f0:f5:3f:15:b2:db:2f:89:69:45:a7:fb: 67:ee:8c:4c -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUfL80BsihKwoinSfbuc/oiYL07hUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MjUwNzExNDRaFw0yNTA1MjQwNzE2NDRaMDMxMTAvBgNV BAMTKEUyQ0RBNDg2M0Q0OUUyRDk0NTA1Rjg1Q0EyMjRDQTc3RjY3RTFDMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfk0nqkgQ+VFSICG/TK9V66O3A kdrI58FGFUyyHGDahtoMgXX+aYmsoLKqWNDxVNoNJa+nWrlGIg3J+0jRK7kFmTHv Gx1BxO+cLQK2OYujM2UEReC6RUj/oLPAMkDgNOf/P0WWfj/A4LbgYjn/CBG1A8c6 aZ2845jI1V4cNUN+zLbQVAuTwud6n+ZqHd2TNseGz2yHkT0MjxtquO/MPaeJ+PMh LBvmGATp+qOxyNGItBkkFi3+FQQ11L32dWPExSjzyTsXNii4k/aH4k+Pg/VAvJfe s5cGrBYAflN+pacBEfk/CzHjhf8O2QKgBCdc0B+o1BbfS1j8k3DqIYuZuSW9AgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQU4s2khj1J4tlFBfhcoiTKd/Z+HCAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1NTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAAjASMBADBgAqBp+BQQMGACoGn4FCMA0GCSqGSIb3DQEB CwUAA4IBAQAjamtwcFXmWyE9Vlx171FhP9QdoBGRTh5qgGkDwgOyn8yaRJglavPq EMVJ3VfE1Va122rhVP3tsUtbR5VvrKb3XEEOCeIHkFdu5GiDcOLSxmHubV+fqTuV 7eYQYVq7ErMHlrUycd89tPloQJrkw20NnvHUVfUbQ7AOzDM0ecqAKvo5F5CSbi7J KWIy4EBSYZWlcM6UjpNfk3zbiZTh5PpJAa0R8SpI45OqYyVErm/BWSvHrnWXRGjh tuHc872LkAjvRVXKT1iIEN8S/TEk8aNvgVux2MxwC6mLbsyWzZnDhsgiFdvWkFOY YXSlL+pMZH/w9T8VstsviWlFp/tn7oxM -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org