$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215972.roa File: AS215972.roa (raw, json) Hash identifier: 3283m2NxtDDrO9hvaFb9dMXhqIX+QI+MzMvSnT/ogew= Subject key identifier: 38:3A:9D:E3:AD:CF:35:38:15:75:AB:F5:D6:22:C0:FC:19:B4:45:0B Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 03F2122327A3B80E8601AFE07E9F29054F49BC9E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215972.roa Signing time: Tue 26 Mar 2024 10:16:54 +0000 ROA not before: Tue 26 Mar 2024 10:11:54 +0000 ROA not after: Tue 25 Mar 2025 10:16:54 +0000 asID: 215972 IP address blocks: 2a06:9f81:1200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f2:12:23:27:a3:b8:0e:86:01:af:e0:7e:9f:29:05:4f:49:bc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Mar 26 10:11:54 2024 GMT Not After : Mar 25 10:16:54 2025 GMT Subject: CN=383A9DE3ADCF35381575ABF5D622C0FC19B4450B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:c8:3c:c0:7c:c8:20:95:3f:bf:9c:74:a0: d1:b3:18:ba:9f:82:83:3f:72:44:09:d1:0d:0f:ee: 56:12:a0:fa:46:0f:96:f0:a1:29:09:53:9e:c2:5e: c0:87:4b:93:77:2d:1c:92:fc:37:d4:97:a3:92:aa: 00:70:95:19:9b:41:76:05:d7:5c:b9:60:d6:52:7e: ca:d4:52:e0:93:a9:f1:4f:c3:85:49:37:1b:f6:fc: fd:37:84:6a:a5:63:32:f8:85:de:81:57:62:ef:4e: 97:6d:ec:48:2a:9d:bd:ca:7d:33:c6:33:03:5f:e4: 3b:64:e4:a9:38:8e:fa:7b:3b:f6:29:aa:1c:bc:3f: 62:93:02:80:d5:cc:ee:d7:c3:6b:92:26:c5:a5:52: ee:b5:68:6d:8d:05:e9:50:1f:59:8f:d4:cb:94:d7: 98:28:f6:1c:21:2d:6e:76:83:2d:95:87:f9:ff:da: f0:c1:9a:8e:5f:22:5a:8e:34:f5:ee:cb:60:a7:45: 08:6f:7c:ef:ed:20:41:ce:b4:94:fd:14:95:f5:c7: f8:3d:47:83:87:0a:d8:4a:e1:31:d2:55:40:1a:ef: db:0f:79:50:86:0b:c6:a3:f2:53:cc:8e:80:8a:f6: 47:0d:fc:80:c4:b0:12:8b:1e:a2:51:67:80:c0:22: 7d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:9D:E3:AD:CF:35:38:15:75:AB:F5:D6:22:C0:FC:19:B4:45:0B X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215972.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:1200::/40 Signature Algorithm: sha256WithRSAEncryption 72:02:8f:8b:28:2c:f7:45:72:49:31:0d:62:47:73:3d:eb:7b: e9:28:8f:78:90:b0:fd:96:3b:d1:7d:c8:af:6e:8b:8b:58:f2: f8:4a:d8:e8:2d:7a:50:ab:2f:af:e4:36:ae:73:ff:f9:ba:a2: b9:51:76:83:14:ac:b6:33:fc:2f:0b:0e:a9:d0:f5:28:31:c6: 82:14:f1:b6:ec:02:29:01:a2:67:09:64:0c:cb:02:77:36:f2: 20:0e:65:38:1a:c8:d0:23:25:0f:b7:8d:2e:ef:54:8e:4f:9a: 5f:4d:b1:3b:ad:b5:27:5e:a9:f7:f6:fc:d2:a4:64:a5:12:d4: 1c:2d:66:80:f4:ce:a3:f9:ee:ae:bc:e8:c4:ed:f0:9b:0a:bd: 09:95:57:d1:b4:98:53:b0:15:7f:3c:25:fc:31:04:32:9f:9b: 20:ea:e1:c0:fc:7b:67:85:4b:93:aa:81:1d:e4:8c:f5:7e:0c: 59:44:d8:be:6f:69:40:93:2d:97:cd:b0:7b:87:af:86:c6:7d: 4b:2f:33:0d:31:26:ce:8c:ac:8a:1a:68:26:82:3e:18:92:36: 6d:7c:c8:bc:f1:48:de:15:f0:b1:48:cc:ca:9f:c4:22:a5:42: ec:85:f7:ea:07:67:2f:de:87:9a:7f:be:ed:3c:5e:12:8e:85: 7b:e0:6e:10 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUA/ISIyejuA6GAa/gfp8pBU9JvJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAzMjYxMDExNTRaFw0yNTAzMjUxMDE2NTRaMDMxMTAvBgNV BAMTKDM4M0E5REUzQURDRjM1MzgxNTc1QUJGNUQ2MjJDMEZDMTlCNDQ1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2sg8wHzIIJU/v5x0oNGzGLqf goM/ckQJ0Q0P7lYSoPpGD5bwoSkJU57CXsCHS5N3LRyS/DfUl6OSqgBwlRmbQXYF 11y5YNZSfsrUUuCTqfFPw4VJNxv2/P03hGqlYzL4hd6BV2LvTpdt7Egqnb3KfTPG MwNf5Dtk5Kk4jvp7O/Ypqhy8P2KTAoDVzO7Xw2uSJsWlUu61aG2NBelQH1mP1MuU 15go9hwhLW52gy2Vh/n/2vDBmo5fIlqONPXuy2CnRQhvfO/tIEHOtJT9FJX1x/g9 R4OHCthK4THSVUAa79sPeVCGC8aj8lPMjoCK9kcN/IDEsBKLHqJRZ4DAIn3VAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUODqd463PNTgVdav11iLA/Bm0RQswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE1OTcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgafgRIwDQYJKoZIhvcNAQELBQADggEBAHIC j4soLPdFckkxDWJHcz3re+koj3iQsP2WO9F9yK9ui4tY8vhK2OgtelCrL6/kNq5z //m6orlRdoMUrLYz/C8LDqnQ9SgxxoIU8bbsAikBomcJZAzLAnc28iAOZTgayNAj JQ+3jS7vVI5Pml9NsTuttSdeqff2/NKkZKUS1BwtZoD0zqP57q686MTt8JsKvQmV V9G0mFOwFX88JfwxBDKfmyDq4cD8e2eFS5OqgR3kjPV+DFlE2L5vaUCTLZfNsHuH r4bGfUsvMw0xJs6MrIoaaCaCPhiSNm18yLzxSN4V8LFIzMqfxCKlQuyF9+oHZy/e h5p/vu08XhKOhXvgbhA= -----END CERTIFICATE-----Generated at Mon May 20 13:08:22 2024 by rpki-client on console-fra.rpki-client.org