$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216079.roa File: AS216079.roa (raw, json) Hash identifier: Qq/nbWgAK48jAxBlZjDueU5VTpLmqUCk6QEqTwMC3J8= Subject key identifier: 59:28:8E:54:B5:47:7A:B9:26:26:62:B3:63:80:65:2D:FF:BC:F0:2C Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 50E130E574F089191F75B0FF9502C850600F2C27 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216079.roa Signing time: Fri 27 Sep 2024 10:44:51 +0000 ROA not before: Fri 27 Sep 2024 10:39:51 +0000 ROA not after: Fri 26 Sep 2025 10:44:51 +0000 asID: 216079 IP address blocks: 2a05:dfc1:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 14:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e1:30:e5:74:f0:89:19:1f:75:b0:ff:95:02:c8:50:60:0f:2c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 27 10:39:51 2024 GMT Not After : Sep 26 10:44:51 2025 GMT Subject: CN=59288E54B5477AB9262662B36380652DFFBCF02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:ad:ac:59:6f:2b:44:07:48:74:d7:6b:82: 0f:22:dc:75:cf:8f:cd:8a:d0:5d:cb:7b:64:a6:b5: f1:71:99:fe:83:2b:a0:31:75:96:49:16:52:ab:ba: 46:89:eb:f1:5e:31:2c:6a:b4:2f:bd:88:8d:15:68: 82:e5:1a:2a:9a:9b:07:56:ec:61:13:c8:2b:f7:6d: a9:bb:52:8d:54:c5:23:16:88:cc:25:95:55:66:c2: 7f:92:39:a1:5f:8e:aa:49:db:75:b0:8d:34:0f:ec: e3:d2:08:51:87:26:05:6a:32:82:39:68:b3:fd:be: 2f:9d:c7:d1:6a:8d:a1:e7:bc:b2:ba:18:04:ae:1a: 24:70:56:87:35:cd:2c:76:a0:05:fd:ff:60:47:98: db:8a:91:32:26:24:a8:d8:71:e8:f9:bb:66:0a:6c: 2c:08:01:a6:c0:25:b7:e1:63:ed:b5:45:d0:2c:8e: 80:fc:f2:42:2f:a8:48:d4:94:73:cd:be:7b:6d:23: 09:bc:33:c8:1c:0a:2e:5a:24:9d:df:66:d4:a8:5b: 82:b3:e5:32:51:ea:4e:17:4a:48:d6:79:4b:c9:b6: 71:20:e7:39:ef:7f:86:b5:61:ec:f0:fb:a6:0c:9f: 21:39:58:c6:b6:2b:b1:6c:c9:0b:8b:40:9f:a5:08: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:28:8E:54:B5:47:7A:B9:26:26:62:B3:63:80:65:2D:FF:BC:F0:2C X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c300::/40 Signature Algorithm: sha256WithRSAEncryption 47:76:24:91:19:36:9d:7a:7f:d8:f5:92:9c:d1:0a:7e:72:37: db:83:90:16:ba:73:8b:b5:75:41:ab:f2:7e:bb:65:65:75:7b: 0c:22:86:d5:ae:65:d0:70:03:8e:bd:cb:4e:9d:e0:7e:76:6e: bc:0d:5b:42:5a:b1:d2:6f:57:c6:bf:9f:cf:28:37:51:43:13: b5:de:43:28:a0:51:07:71:7a:84:07:f7:c9:96:a1:29:cf:c5: b9:6b:8a:0e:98:74:a7:b8:51:6d:4e:cb:0f:d2:a8:92:01:c0: 9b:01:99:f4:a5:64:7c:8f:1d:27:24:1b:f5:d4:23:cd:34:cc: 02:99:48:2d:29:9f:29:e5:01:3d:64:6d:53:a8:0a:04:49:da: ac:af:c6:be:76:84:d9:a7:48:15:7c:bf:05:f2:9b:d9:16:bf: 91:36:be:83:ac:ca:31:fd:36:66:0f:b3:0f:13:69:f3:02:b4: 50:7e:1d:6f:2c:f5:7d:78:a9:d6:77:51:e0:e4:e7:fd:47:06: bf:d6:f0:64:e0:17:89:70:79:06:cb:36:53:02:10:57:0d:c5: be:6b:ba:ed:e0:0b:de:ee:97:2e:87:38:1d:ad:bf:01:72:ee: 65:5e:c8:40:5a:f0:ca:54:32:aa:69:ec:76:bd:af:dd:fd:92: 25:82:25:2d -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUOEw5XTwiRkfdbD/lQLIUGAPLCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA5MjcxMDM5NTFaFw0yNTA5MjYxMDQ0NTFaMDMxMTAvBgNV BAMTKDU5Mjg4RTU0QjU0NzdBQjkyNjI2NjJCMzYzODA2NTJERkZCQ0YwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9oK2sWW8rRAdIdNdrgg8i3HXP j82K0F3Le2SmtfFxmf6DK6AxdZZJFlKrukaJ6/FeMSxqtC+9iI0VaILlGiqamwdW 7GETyCv3bam7Uo1UxSMWiMwllVVmwn+SOaFfjqpJ23WwjTQP7OPSCFGHJgVqMoI5 aLP9vi+dx9FqjaHnvLK6GASuGiRwVoc1zSx2oAX9/2BHmNuKkTImJKjYcej5u2YK bCwIAabAJbfhY+21RdAsjoD88kIvqEjUlHPNvnttIwm8M8gcCi5aJJ3fZtSoW4Kz 5TJR6k4XSkjWeUvJtnEg5znvf4a1Yezw+6YMnyE5WMa2K7FsyQuLQJ+lCLvvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUWSiOVLVHerkmJmKzY4BlLf+88CwwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2MDc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwcMwDQYJKoZIhvcNAQELBQADggEBAEd2 JJEZNp16f9j1kpzRCn5yN9uDkBa6c4u1dUGr8n67ZWV1ewwihtWuZdBwA469y06d 4H52brwNW0JasdJvV8a/n88oN1FDE7XeQyigUQdxeoQH98mWoSnPxblrig6YdKe4 UW1Oyw/SqJIBwJsBmfSlZHyPHSckG/XUI800zAKZSC0pnynlAT1kbVOoCgRJ2qyv xr52hNmnSBV8vwXym9kWv5E2voOsyjH9NmYPsw8TafMCtFB+HW8s9X14qdZ3UeDk 5/1HBr/W8GTgF4lweQbLNlMCEFcNxb5ruu3gC97uly6HOB2tvwFy7mVeyEBa8MpU Mqpp7Ha9r939kiWCJS0= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:14 2024 by rpki-client on console-fra.rpki-client.org