$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215843.roa File: AS215843.roa (raw, json) Hash identifier: DaaKsLkHuPyZT4flewpfAeXKn6rq98H5PefJZ3G1Tno= Subject key identifier: BF:6B:50:38:14:62:70:0E:4E:5E:A2:13:D7:53:B3:1B:E7:21:12:ED Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 61CD861397F5301450A5CEF0D9DE9F436BDDE560 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215843.roa Signing time: Thu 14 Dec 2023 08:34:04 +0000 ROA not before: Thu 14 Dec 2023 08:29:04 +0000 ROA not after: Thu 12 Dec 2024 08:34:04 +0000 asID: 215843 IP address blocks: 2a06:9f81:3400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cd:86:13:97:f5:30:14:50:a5:ce:f0:d9:de:9f:43:6b:dd:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Dec 14 08:29:04 2023 GMT Not After : Dec 12 08:34:04 2024 GMT Subject: CN=BF6B50381462700E4E5EA213D753B31BE72112ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:47:f6:63:a4:68:e0:c2:dc:ba:1a:a6:4f: e6:d8:db:35:90:e4:fc:6a:b4:aa:19:5f:a8:be:0e: da:93:73:c4:1c:9f:0f:7c:8d:6c:75:51:e8:9c:2b: 30:3e:06:54:85:03:76:de:37:8f:03:ea:77:64:ca: 3d:2c:00:b8:48:d5:9a:ad:99:03:f3:64:07:d5:48: 4f:d3:e0:b7:ce:30:0a:a1:f1:f0:23:f5:36:6f:a4: 49:b3:63:10:fc:90:65:7e:cb:41:04:66:1f:74:82: 08:16:0a:cc:de:ba:4c:e9:5a:24:46:44:25:40:be: fa:7c:0a:2a:63:4d:85:d4:02:f6:66:e9:5e:7a:0b: ee:33:71:c0:d7:cb:5e:bd:c0:e5:d5:98:64:89:0e: bd:85:11:74:62:27:e6:37:cc:d8:67:d0:6c:28:2c: fd:95:8d:ee:85:b1:bb:6c:61:69:3d:9c:97:cf:55: 4a:f0:6c:de:4d:65:aa:0c:9d:c2:d5:d7:32:cd:08: 41:9c:ab:6b:bd:7d:81:fa:ea:81:0a:8f:c9:f2:5a: 0d:f1:22:49:b0:7c:b0:90:b2:69:a1:c3:7c:8c:7f: 9e:4f:a5:d6:2c:8d:c9:0d:cb:45:8d:66:68:fe:29: 15:49:7c:ae:2e:bb:d8:0c:33:89:97:98:7e:c2:b5: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6B:50:38:14:62:70:0E:4E:5E:A2:13:D7:53:B3:1B:E7:21:12:ED X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:3400::/40 Signature Algorithm: sha256WithRSAEncryption 52:1e:69:cb:7b:7a:a7:4c:f6:62:ea:46:0f:5f:01:3d:e3:ca: d6:63:0c:57:0a:86:02:70:44:0a:cc:e2:8d:8b:d2:06:8d:5e: 06:f8:3b:01:5b:20:f6:e6:21:f7:43:90:c4:10:97:49:c8:39: 55:9c:ff:33:b3:03:84:7d:30:5b:0a:3c:87:8f:99:dd:1c:17: 27:98:23:03:51:cb:37:da:a2:45:24:21:3f:c9:61:41:60:35: fd:e1:4e:18:06:9e:f6:29:d3:11:f1:20:30:d2:78:72:ae:8e: 0f:f3:ce:f4:70:37:a9:0b:b5:33:a5:ab:4d:59:71:4e:8e:d5: bc:d9:e1:11:4b:06:1b:60:91:a0:6e:cd:7f:72:09:5e:26:16: 53:2f:a7:b5:51:0a:d8:98:97:8b:40:46:0f:cb:cc:a2:0e:c0: 67:6a:8b:ef:a5:00:a7:00:10:bb:a2:8a:b6:eb:03:50:4a:0e: 0b:6f:70:0c:ac:ad:8f:81:1b:31:e5:c4:bc:79:07:03:a5:e5: 45:8c:eb:61:7c:80:cb:21:9a:4b:db:95:1d:19:78:91:72:3c: 40:78:05:80:5f:2e:1b:be:4a:03:71:8a:95:ad:2a:38:ce:7c: 39:c1:cd:b0:1f:24:cd:8d:48:c0:3a:75:cb:2d:3d:af:a7:68: af:18:d8:83 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYc2GE5f1MBRQpc7w2d6fQ2vd5WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEyMTQwODI5MDRaFw0yNDEyMTIwODM0MDRaMDMxMTAvBgNV BAMTKEJGNkI1MDM4MTQ2MjcwMEU0RTVFQTIxM0Q3NTNCMzFCRTcyMTEyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JEf2Y6Ro4MLcuhqmT+bY2zWQ 5PxqtKoZX6i+DtqTc8Qcnw98jWx1UeicKzA+BlSFA3beN48D6ndkyj0sALhI1Zqt mQPzZAfVSE/T4LfOMAqh8fAj9TZvpEmzYxD8kGV+y0EEZh90gggWCszeukzpWiRG RCVAvvp8CipjTYXUAvZm6V56C+4zccDXy169wOXVmGSJDr2FEXRiJ+Y3zNhn0Gwo LP2Vje6FsbtsYWk9nJfPVUrwbN5NZaoMncLV1zLNCEGcq2u9fYH66oEKj8nyWg3x IkmwfLCQsmmhw3yMf55PpdYsjckNy0WNZmj+KRVJfK4uu9gMM4mXmH7CtUQRAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUv2tQOBRicA5OXqIT11OzG+chEu0wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1ODQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgTQwDQYJKoZIhvcNAQELBQADggEBAFIe act7eqdM9mLqRg9fAT3jytZjDFcKhgJwRArM4o2L0gaNXgb4OwFbIPbmIfdDkMQQ l0nIOVWc/zOzA4R9MFsKPIePmd0cFyeYIwNRyzfaokUkIT/JYUFgNf3hThgGnvYp 0xHxIDDSeHKujg/zzvRwN6kLtTOlq01ZcU6O1bzZ4RFLBhtgkaBuzX9yCV4mFlMv p7VRCtiYl4tARg/LzKIOwGdqi++lAKcAELuiirbrA1BKDgtvcAysrY+BGzHlxLx5 BwOl5UWM62F8gMshmkvblR0ZeJFyPEB4BYBfLhu+SgNxipWtKjjOfDnBzbAfJM2N SMA6dcstPa+naK8Y2IM= -----END CERTIFICATE-----Generated at Mon May 20 13:08:22 2024 by rpki-client on console-fra.rpki-client.org