$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215843.roa File: AS215843.roa (raw, json) Hash identifier: o9rsLmVGIm741zLxl42grNbYARPZK2tzP0yWU247Xto= Subject key identifier: 36:8F:EF:35:1B:5D:86:12:46:72:51:E1:A5:19:B0:5D:80:E8:0C:E1 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 04C4695B574EC9394A96A1B87E40859C77EC6251 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215843.roa Signing time: Thu 14 Nov 2024 08:45:30 +0000 ROA not before: Thu 14 Nov 2024 08:40:30 +0000 ROA not after: Thu 13 Nov 2025 08:45:30 +0000 asID: 215843 IP address blocks: 2a06:9f81:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c4:69:5b:57:4e:c9:39:4a:96:a1:b8:7e:40:85:9c:77:ec:62:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 14 08:40:30 2024 GMT Not After : Nov 13 08:45:30 2025 GMT Subject: CN=368FEF351B5D8612467251E1A519B05D80E80CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a0:22:bb:f3:cd:cd:f2:d6:ec:b9:86:61:ae: 71:53:68:d6:67:cf:cc:d7:6e:64:22:73:76:38:22: 69:72:0e:12:19:7c:c6:05:cd:a2:f8:ad:22:b0:ee: 41:16:86:4c:91:13:ce:16:19:3f:37:3b:1f:ac:a0: d1:62:0e:2e:f6:7e:33:ed:fd:03:16:d3:47:b6:46: 9d:69:9c:60:1b:0a:4d:98:d8:a2:c5:14:a4:ee:6b: 8f:8a:63:1b:2a:6b:15:3e:c9:e8:e6:d0:81:e3:8b: 61:f4:ac:c2:44:1d:32:54:62:af:c4:d6:2b:98:92: 64:ea:8a:9a:74:67:8f:eb:1a:94:c1:2f:b9:b1:bb: 20:cf:5e:5d:3c:28:66:28:0a:9c:4f:89:14:6c:fa: 28:36:af:57:82:6b:6d:b6:30:29:94:2a:39:0a:e2: 4b:59:92:f9:09:b8:04:74:6a:d5:a7:52:da:68:62: f2:ae:31:d0:db:c1:7a:5d:49:f3:99:ef:d5:37:94: 83:c7:7d:7b:5b:8a:fb:4f:8e:13:64:3a:c4:3f:0b: c6:8f:b6:a5:a3:56:dd:f7:f0:03:90:66:d8:be:eb: dd:ba:bf:e3:88:09:e2:17:4c:ca:4d:7a:53:ab:93: e1:ee:f4:77:bb:68:a3:72:9d:53:c3:be:dc:b4:e4: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8F:EF:35:1B:5D:86:12:46:72:51:E1:A5:19:B0:5D:80:E8:0C:E1 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3400::/40 Signature Algorithm: sha256WithRSAEncryption 83:cf:de:df:4e:50:94:88:43:32:68:d3:48:31:01:a9:d6:a1: 5a:b9:ec:2d:dc:c5:5e:57:25:1a:16:c0:6d:6d:7c:6e:96:79: c1:7f:b5:c2:e8:05:91:f6:f3:a9:13:36:73:b0:18:41:6b:c7: 72:f0:73:4e:cd:2d:4c:f5:69:14:44:0d:57:7b:61:cf:41:83: a2:e4:ef:05:b5:04:4f:93:c4:85:65:be:14:aa:a4:ce:bc:72: 8e:1d:13:48:e5:68:ab:07:17:cd:8d:1d:cc:58:09:48:3d:29: 1e:40:c5:1c:19:a7:b7:9e:fc:fa:fa:63:ee:70:76:a6:2f:33: 9c:33:f7:41:6b:5f:91:01:ba:9c:53:1b:8b:04:4d:29:59:07: 9e:e3:7a:42:db:d8:46:da:9c:bf:dd:23:2a:fe:93:3e:ac:86: d6:46:c8:6a:a5:0a:be:68:c4:64:e7:ea:da:2b:43:d8:4b:84: 3b:ef:a1:9b:52:50:4f:95:a7:d5:df:f0:f9:2d:86:d8:88:41: 4d:39:80:e2:ea:9b:c5:a0:fb:93:a1:63:57:ad:bd:b2:65:e7: a6:6f:5e:62:60:fa:93:3f:85:31:d3:cd:17:f1:10:3a:14:40: f3:5d:c8:33:fa:fa:ef:a0:49:2e:a9:f4:8a:e9:55:ed:1b:db: f7:b1:34:4b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBMRpW1dOyTlKlqG4fkCFnHfsYlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDExMTQwODQwMzBaFw0yNTExMTMwODQ1MzBaMDMxMTAvBgNV BAMTKDM2OEZFRjM1MUI1RDg2MTI0NjcyNTFFMUE1MTlCMDVEODBFODBDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsoCK7883N8tbsuYZhrnFTaNZn z8zXbmQic3Y4ImlyDhIZfMYFzaL4rSKw7kEWhkyRE84WGT83Ox+soNFiDi72fjPt /QMW00e2Rp1pnGAbCk2Y2KLFFKTua4+KYxsqaxU+yejm0IHji2H0rMJEHTJUYq/E 1iuYkmTqipp0Z4/rGpTBL7mxuyDPXl08KGYoCpxPiRRs+ig2r1eCa222MCmUKjkK 4ktZkvkJuAR0atWnUtpoYvKuMdDbwXpdSfOZ79U3lIPHfXtbivtPjhNkOsQ/C8aP tqWjVt338AOQZti+6926v+OICeIXTMpNelOrk+Hu9He7aKNynVPDvty05F23AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUNo/vNRtdhhJGclHhpRmwXYDoDOEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1ODQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgTQwDQYJKoZIhvcNAQELBQADggEBAIPP 3t9OUJSIQzJo00gxAanWoVq57C3cxV5XJRoWwG1tfG6WecF/tcLoBZH286kTNnOw GEFrx3Lwc07NLUz1aRREDVd7Yc9Bg6Lk7wW1BE+TxIVlvhSqpM68co4dE0jlaKsH F82NHcxYCUg9KR5AxRwZp7ee/Pr6Y+5wdqYvM5wz90FrX5EBupxTG4sETSlZB57j ekLb2EbanL/dIyr+kz6shtZGyGqlCr5oxGTn6torQ9hLhDvvoZtSUE+Vp9Xf8Pkt htiIQU05gOLqm8Wg+5OhY1etvbJl56ZvXmJg+pM/hTHTzRfxEDoUQPNdyDP6+u+g SS6p9IrpVe0b2/exNEs= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org