$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215918.roa File: AS215918.roa (raw, json) Hash identifier: 0YLgJh+RTbPL50NTmb/6TL4pwQ3OQSr1uweYd5TBZWc= Subject key identifier: 33:A2:79:8D:42:95:AA:7A:D6:CB:BC:9A:F7:F3:26:BE:CF:F5:2B:FE Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4192AD112FF852F929F25817D3A96C0D06FE4EBA Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215918.roa Signing time: Thu 31 Oct 2024 23:45:30 +0000 ROA not before: Thu 31 Oct 2024 23:40:30 +0000 ROA not after: Thu 30 Oct 2025 23:45:30 +0000 asID: 215918 IP address blocks: 2a06:9f81:2400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:92:ad:11:2f:f8:52:f9:29:f2:58:17:d3:a9:6c:0d:06:fe:4e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 31 23:40:30 2024 GMT Not After : Oct 30 23:45:30 2025 GMT Subject: CN=33A2798D4295AA7AD6CBBC9AF7F326BECFF52BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:48:69:57:ea:b3:7d:67:f7:b4:c2:13:0c: ba:12:80:e5:03:c9:da:08:9d:ea:fd:f1:4d:4c:bb: 0f:73:60:28:6a:53:4f:86:28:e5:f6:a1:fd:60:ac: 19:83:a6:d8:1f:48:27:80:aa:bd:04:59:4e:d0:d9: 58:d6:a8:4b:af:63:74:b5:4b:1d:b1:13:6a:b9:e4: 04:41:7b:10:59:b8:78:b6:47:3d:b5:c0:2a:e5:90: 7d:de:4e:8c:83:a3:57:b8:c6:57:21:e2:d4:24:18: 68:78:70:29:9f:ed:07:ee:9e:de:f8:c6:82:7f:73: 54:4b:c2:bf:6f:0c:8d:45:26:af:69:6d:1d:57:0a: c7:86:a6:37:e0:93:46:fa:eb:28:46:ea:12:b7:43: cb:48:9b:b6:e2:2d:1a:eb:31:4a:ce:48:7d:b5:89: 34:5f:76:7b:bc:94:d9:78:42:29:06:80:9a:8b:31: 70:0d:88:0e:40:7d:cd:c5:52:6e:95:46:4e:07:84: 51:82:b3:85:2f:64:d5:b2:c1:9c:05:07:03:b5:40: 4f:38:be:dc:f8:a7:43:c8:e5:2d:ce:62:5f:0d:8d: 3b:51:0c:c8:3b:e0:d0:9d:33:ba:a2:a6:f4:5f:d8: ac:29:30:93:11:21:e9:f0:4c:f9:1a:9c:e7:fa:9f: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A2:79:8D:42:95:AA:7A:D6:CB:BC:9A:F7:F3:26:BE:CF:F5:2B:FE X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215918.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:2400::/40 Signature Algorithm: sha256WithRSAEncryption 01:c9:6d:b5:f9:c9:a2:49:46:14:27:b1:c2:1d:fa:42:8c:94: ae:16:c5:bf:bf:5f:ce:a6:f6:c6:7b:17:c0:41:ae:0f:84:10: 1b:96:20:8b:5b:ae:42:7f:b3:a2:8f:2c:43:94:c7:f9:ff:a2: 68:86:44:e0:53:ae:5d:66:4d:62:53:da:d1:21:e0:ec:a3:ba: 40:77:42:e8:b9:dd:a1:60:b3:0a:63:99:2c:f3:21:f6:ee:9e: 2a:3a:13:7f:b9:bf:7c:3c:10:fc:e7:51:13:ce:66:91:d8:a3: 26:76:98:02:b4:aa:26:1c:94:ec:1a:da:29:5f:03:03:a8:fb: 08:42:11:3c:22:d8:dc:b0:05:08:a7:ea:bd:32:80:c1:fc:cf: 1a:df:03:b6:99:10:38:aa:5f:c5:8f:c5:30:4b:58:07:e9:06: bb:e3:46:77:63:63:6c:d7:03:f6:95:9a:73:31:68:53:b4:09: 2a:ae:c6:07:85:73:d5:f2:1f:6c:8e:5b:c1:e7:04:9b:7f:42: e3:f1:00:27:22:d6:d3:c4:a3:7e:cb:ff:ff:21:2e:a4:b8:26: ec:a7:71:8f:09:4c:a0:e1:4f:15:6f:dc:b8:b7:9f:42:8b:44: b4:c9:0a:2e:b3:35:f0:6a:f0:2d:cd:a6:c4:29:1d:82:a0:50: d4:7e:18:13 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQZKtES/4Uvkp8lgX06lsDQb+TrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMzEyMzQwMzBaFw0yNTEwMzAyMzQ1MzBaMDMxMTAvBgNV BAMTKDMzQTI3OThENDI5NUFBN0FENkNCQkM5QUY3RjMyNkJFQ0ZGNTJCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFEhpV+qzfWf3tMITDLoSgOUD ydoIner98U1Muw9zYChqU0+GKOX2of1grBmDptgfSCeAqr0EWU7Q2VjWqEuvY3S1 Sx2xE2q55ARBexBZuHi2Rz21wCrlkH3eToyDo1e4xlch4tQkGGh4cCmf7Qfunt74 xoJ/c1RLwr9vDI1FJq9pbR1XCseGpjfgk0b66yhG6hK3Q8tIm7biLRrrMUrOSH21 iTRfdnu8lNl4QikGgJqLMXANiA5Afc3FUm6VRk4HhFGCs4UvZNWywZwFBwO1QE84 vtz4p0PI5S3OYl8NjTtRDMg74NCdM7qipvRf2KwpMJMRIenwTPkanOf6nwI5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUM6J5jUKVqnrWy7ya9/Mmvs/1K/4wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1OTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgSQwDQYJKoZIhvcNAQELBQADggEBAAHJ bbX5yaJJRhQnscId+kKMlK4Wxb+/X86m9sZ7F8BBrg+EEBuWIItbrkJ/s6KPLEOU x/n/omiGROBTrl1mTWJT2tEh4OyjukB3Qui53aFgswpjmSzzIfbunio6E3+5v3w8 EPznURPOZpHYoyZ2mAK0qiYclOwa2ilfAwOo+whCETwi2NywBQin6r0ygMH8zxrf A7aZEDiqX8WPxTBLWAfpBrvjRndjY2zXA/aVmnMxaFO0CSquxgeFc9XyH2yOW8Hn BJt/QuPxACci1tPEo37L//8hLqS4JuyncY8JTKDhTxVv3Li3n0KLRLTJCi6zNfBq 8C3NpsQpHYKgUNR+GBM= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org