$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215918.roa File: AS215918.roa (raw, json) Hash identifier: HwXwj7uTZN1F2p6zMUYV3V+WY7Gm4BEO7esMrV5Ty2I= Subject key identifier: F3:30:5F:C4:B0:7D:E4:93:60:5C:B1:04:61:A8:A0:06:6C:E9:BF:6C Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2EE2C9F0E0E05CB3B627EB99DF4511061294E004 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215918.roa Signing time: Thu 30 Nov 2023 23:00:10 +0000 ROA not before: Thu 30 Nov 2023 22:55:10 +0000 ROA not after: Thu 28 Nov 2024 23:00:10 +0000 asID: 215918 IP address blocks: 2a06:9f81:2400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e2:c9:f0:e0:e0:5c:b3:b6:27:eb:99:df:45:11:06:12:94:e0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 30 22:55:10 2023 GMT Not After : Nov 28 23:00:10 2024 GMT Subject: CN=F3305FC4B07DE493605CB10461A8A0066CE9BF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:e9:38:87:da:6b:30:e4:38:42:92:2d:dc: 55:a5:1b:23:f6:4f:80:82:3c:c8:1b:a0:80:18:cd: e8:ea:71:09:d6:7a:1f:36:ad:cf:e3:48:83:74:aa: 47:28:e8:c8:19:5e:51:6a:97:fc:4e:5c:21:ce:f2: 49:7b:23:47:ae:72:45:a4:0d:12:1a:1a:68:2d:df: dd:de:33:dc:56:de:37:be:0b:b8:7d:c0:51:83:8d: 76:c3:40:3f:76:e5:4f:8a:cf:e7:03:25:b3:6d:3f: a3:23:77:e5:59:2d:e6:72:8d:71:94:13:39:57:8a: a7:87:5c:18:75:d0:70:df:58:de:21:bc:3c:7b:29: d0:56:a7:21:96:16:b8:61:00:f1:99:9b:49:4c:71: cb:aa:95:b2:dd:3f:84:57:69:c5:8f:0c:b0:96:65: 9f:d8:ab:3c:8c:08:07:32:28:2d:63:ec:be:15:22: fe:74:e3:69:6a:25:ef:d5:dd:b0:66:0c:f4:dc:cf: d5:f1:54:ca:d8:7c:1b:bf:4d:ab:24:7c:85:00:d5: f8:c6:e4:df:1e:09:38:6f:67:b3:59:f4:10:a9:bf: 4c:7f:6c:06:59:b4:5f:2c:e8:7c:1c:f7:a7:9d:35: f4:03:7c:7b:08:8f:26:bc:56:e1:94:8f:0d:c2:4a: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:30:5F:C4:B0:7D:E4:93:60:5C:B1:04:61:A8:A0:06:6C:E9:BF:6C X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215918.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:2400::/40 Signature Algorithm: sha256WithRSAEncryption c4:a3:57:c2:47:3c:51:72:c8:7a:a9:6d:26:d5:7f:d8:a6:4c: 39:a7:fd:8d:96:51:13:6a:23:31:21:ee:1c:a5:fd:29:1b:00: d9:af:38:8f:36:f1:ae:91:28:d2:8a:78:a6:20:f3:1b:4f:d8: 9f:e8:c9:6d:29:c6:4b:e9:d7:73:01:6b:03:04:11:a9:ec:94: d4:d4:b3:54:09:d3:08:19:08:0b:a6:33:74:ff:28:a7:39:35: fb:1c:53:a6:53:ae:63:23:7f:9b:0f:0d:8d:46:b1:f6:43:e3: 35:03:62:fa:26:ea:b4:68:79:ab:4c:8a:90:1b:8d:3d:2c:3f: 8e:25:93:99:82:a3:3d:c4:4a:a0:2e:52:4a:bc:8d:a1:eb:92: 51:4b:56:b7:3a:d8:b1:2d:b7:f0:bf:55:db:be:de:15:c7:ef: 44:92:a1:66:36:a8:22:ed:14:7b:be:26:a8:41:17:cd:48:a6: 47:60:0c:8c:d6:4d:4c:a8:06:05:6c:71:3b:eb:08:51:b7:57: 48:5c:9d:5a:79:41:21:ae:ff:63:72:e9:1c:4c:3f:94:4f:32: eb:ea:f3:99:8e:c9:72:5f:c7:22:67:11:bb:19:b8:b1:f5:22: ca:13:63:0f:17:92:86:23:60:be:04:91:59:ba:92:b5:01:74: 72:cb:15:71 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULuLJ8ODgXLO2J+uZ30URBhKU4AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMzAyMjU1MTBaFw0yNDExMjgyMzAwMTBaMDMxMTAvBgNV BAMTKEYzMzA1RkM0QjA3REU0OTM2MDVDQjEwNDYxQThBMDA2NkNFOUJGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAruk4h9prMOQ4QpIt3FWlGyP2 T4CCPMgboIAYzejqcQnWeh82rc/jSIN0qkco6MgZXlFql/xOXCHO8kl7I0euckWk DRIaGmgt393eM9xW3je+C7h9wFGDjXbDQD925U+Kz+cDJbNtP6Mjd+VZLeZyjXGU EzlXiqeHXBh10HDfWN4hvDx7KdBWpyGWFrhhAPGZm0lMccuqlbLdP4RXacWPDLCW ZZ/YqzyMCAcyKC1j7L4VIv5042lqJe/V3bBmDPTcz9XxVMrYfBu/TaskfIUA1fjG 5N8eCThvZ7NZ9BCpv0x/bAZZtF8s6Hwc96edNfQDfHsIjya8VuGUjw3CShKfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU8zBfxLB95JNgXLEEYaigBmzpv2wwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1OTE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgSQwDQYJKoZIhvcNAQELBQADggEBAMSj V8JHPFFyyHqpbSbVf9imTDmn/Y2WURNqIzEh7hyl/SkbANmvOI828a6RKNKKeKYg 8xtP2J/oyW0pxkvp13MBawMEEanslNTUs1QJ0wgZCAumM3T/KKc5NfscU6ZTrmMj f5sPDY1GsfZD4zUDYvom6rRoeatMipAbjT0sP44lk5mCoz3ESqAuUkq8jaHrklFL Vrc62LEtt/C/Vdu+3hXH70SSoWY2qCLtFHu+JqhBF81IpkdgDIzWTUyoBgVscTvr CFG3V0hcnVp5QSGu/2Ny6RxMP5RPMuvq85mOyXJfxyJnEbsZuLH1IsoTYw8XkoYj YL4EkVm6krUBdHLLFXE= -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org