$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216079.roa File: AS216079.roa (raw, json) Hash identifier: cCLklOilXRXFV9L3KKA3wpVBL3hmNY6ZY+jHbz+02yE= Subject key identifier: 4F:E3:CD:E6:60:81:50:8D:29:82:F7:96:B4:D0:CD:EA:D2:C8:AA:C2 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2DFDA810F645F020362FD58BFE2DEAADE2CDFABB Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216079.roa Signing time: Fri 27 Oct 2023 10:35:29 +0000 ROA not before: Fri 27 Oct 2023 10:30:29 +0000 ROA not after: Fri 25 Oct 2024 10:35:29 +0000 asID: 216079 IP address blocks: 2a05:dfc1:c300::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fd:a8:10:f6:45:f0:20:36:2f:d5:8b:fe:2d:ea:ad:e2:cd:fa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 27 10:30:29 2023 GMT Not After : Oct 25 10:35:29 2024 GMT Subject: CN=4FE3CDE66081508D2982F796B4D0CDEAD2C8AAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:25:37:76:47:ff:c1:47:e3:d9:ad:25:23: 8f:6c:fa:c0:37:cd:9b:dd:22:a3:a1:10:1b:6e:eb: f7:41:75:d1:93:e3:6c:fe:81:73:b5:3c:71:a5:da: 88:6b:fe:b8:a0:7c:9b:be:03:7e:18:e5:f4:a8:c0: 9f:46:a7:f5:54:9f:c1:1a:4d:b0:11:78:be:f0:38: 81:a6:de:0b:cd:85:e1:2e:53:69:c9:1a:a5:3e:ea: db:d1:ba:55:22:1d:df:64:be:1a:de:ae:17:1a:3c: 2b:73:f7:24:4a:9e:8e:ba:4a:60:10:5c:01:c2:11: 40:cd:d2:ee:12:7a:ff:5a:ed:af:69:33:38:66:00: cd:5a:80:15:36:99:b3:97:f0:d2:cf:b5:86:ef:8d: b9:b1:01:05:22:5e:e3:95:8d:c6:a7:82:07:98:a5: c2:4e:f1:17:cb:33:07:a6:9e:3a:ce:43:9d:22:59: 1f:3d:af:1b:9e:05:05:9f:42:5e:f3:48:7e:a8:53: cc:8b:c4:b4:10:42:10:83:47:3c:de:76:d5:f3:af: a2:1c:2e:e1:f5:56:f5:3f:82:af:4d:db:3f:ea:dd: 0b:d2:f6:b9:a3:59:ca:b9:71:fe:65:f8:8a:92:de: eb:ce:f8:13:97:7a:26:5a:71:af:2d:b5:e9:a7:bd: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E3:CD:E6:60:81:50:8D:29:82:F7:96:B4:D0:CD:EA:D2:C8:AA:C2 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c300::/40 Signature Algorithm: sha256WithRSAEncryption 04:2a:88:05:aa:8e:73:25:b3:2b:1a:9d:77:2d:f7:a5:f9:43: 19:3b:26:73:ee:e1:ad:b5:6b:12:aa:f2:48:85:35:38:ed:ad: 8f:f1:67:24:e8:98:52:4d:ba:66:c2:01:d3:c4:5f:06:f7:62: 9d:cc:b4:09:e8:31:ad:11:8e:d5:ba:39:f7:c8:df:5a:8f:e5: d9:54:08:ee:5d:b8:26:6e:d4:a7:df:63:8f:86:de:95:c9:58: db:4a:25:72:6c:1f:8b:f0:24:24:35:c1:4e:64:f1:5a:9f:22: 9d:d5:27:4b:b3:8b:f6:66:38:8c:bc:08:c6:c4:f9:2e:f7:8a: 0a:f5:fd:53:c7:96:e4:7b:8a:51:92:08:f6:24:c7:12:01:62: bd:92:36:6c:25:25:50:c3:43:8b:11:3a:83:c9:c4:aa:ac:16: 3d:1b:7e:52:3e:ce:89:c1:b3:f2:96:91:10:7b:9f:fc:8a:2c: a2:9d:19:37:d0:21:65:6e:15:a4:51:17:24:0d:64:3c:80:a3: 32:94:a8:b8:b1:3d:05:7f:56:98:17:a4:de:a4:a5:b5:33:c7: 8e:ac:6a:7b:fc:04:ab:5e:36:90:6d:b7:84:b8:89:16:0b:e8: 00:35:62:b2:ed:e6:41:ec:35:04:84:f6:cf:b0:0f:90:21:09: a3:44:34:11 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULf2oEPZF8CA2L9WL/i3qreLN+rswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEwMjcxMDMwMjlaFw0yNDEwMjUxMDM1MjlaMDMxMTAvBgNV BAMTKDRGRTNDREU2NjA4MTUwOEQyOTgyRjc5NkI0RDBDREVBRDJDOEFBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjLSU3dkf/wUfj2a0lI49s+sA3 zZvdIqOhEBtu6/dBddGT42z+gXO1PHGl2ohr/rigfJu+A34Y5fSowJ9Gp/VUn8Ea TbAReL7wOIGm3gvNheEuU2nJGqU+6tvRulUiHd9kvhrerhcaPCtz9yRKno66SmAQ XAHCEUDN0u4Sev9a7a9pMzhmAM1agBU2mbOX8NLPtYbvjbmxAQUiXuOVjcanggeY pcJO8RfLMwemnjrOQ50iWR89rxueBQWfQl7zSH6oU8yLxLQQQhCDRzzedtXzr6Ic LuH1VvU/gq9N2z/q3QvS9rmjWcq5cf5l+IqS3uvO+BOXeiZaca8ttemnvf3rAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUT+PN5mCBUI0pgveWtNDN6tLIqsIwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2MDc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwcMwDQYJKoZIhvcNAQELBQADggEBAAQq iAWqjnMlsysanXct96X5Qxk7JnPu4a21axKq8kiFNTjtrY/xZyTomFJNumbCAdPE Xwb3Yp3MtAnoMa0RjtW6OffI31qP5dlUCO5duCZu1KffY4+G3pXJWNtKJXJsH4vw JCQ1wU5k8VqfIp3VJ0uzi/ZmOIy8CMbE+S73igr1/VPHluR7ilGSCPYkxxIBYr2S NmwlJVDDQ4sROoPJxKqsFj0bflI+zonBs/KWkRB7n/yKLKKdGTfQIWVuFaRRFyQN ZDyAozKUqLixPQV/VpgXpN6kpbUzx46sanv8BKteNpBtt4S4iRYL6AA1YrLt5kHs NQSE9s+wD5AhCaNENBE= -----END CERTIFICATE-----Generated at Thu May 16 11:56:10 2024 by rpki-client on console-fra.rpki-client.org