$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216087.roa File: AS216087.roa (raw, json) Hash identifier: rG2joKrlWTjMxpIv4waQanQYu+OEfeiBDR9NtYluP5Y= Subject key identifier: 65:60:83:21:20:64:8A:AB:49:8B:E3:AD:47:87:FE:AD:13:01:DE:4B Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 60F166DB4FD87746F7A1C3247C27AEA064744C97 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216087.roa Signing time: Thu 26 Oct 2023 21:38:23 +0000 ROA not before: Thu 26 Oct 2023 21:33:23 +0000 ROA not after: Thu 24 Oct 2024 21:38:23 +0000 asID: 216087 IP address blocks: 2a05:dfc1:c200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f1:66:db:4f:d8:77:46:f7:a1:c3:24:7c:27:ae:a0:64:74:4c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 26 21:33:23 2023 GMT Not After : Oct 24 21:38:23 2024 GMT Subject: CN=6560832120648AAB498BE3AD4787FEAD1301DE4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:9c:26:db:27:ba:03:b3:d7:f1:6b:ca:a2: 6d:56:e4:c7:d6:a5:cd:28:c2:35:09:da:58:d8:c7: e1:89:fd:5c:08:b9:43:2d:33:3e:90:76:18:36:fd: 70:cd:a4:ac:4b:a4:b0:99:71:00:37:ff:5a:e8:bb: 0e:df:47:43:3d:cd:b5:35:2e:92:75:29:d4:ae:ed: 7e:8e:c8:70:fe:c5:c7:0d:52:46:3a:ed:23:03:01: b8:7c:c4:4b:68:8a:09:6f:17:02:d0:f2:15:ee:fb: 82:08:b1:49:98:b8:d6:66:fc:41:cf:ca:d0:96:93: d5:59:17:04:89:f0:f7:dd:7e:f0:0e:66:09:da:c2: 72:7e:0e:f6:f3:06:d6:39:fb:d0:fc:5c:89:1d:62: c2:42:9c:70:8f:8d:9b:db:54:6b:30:61:09:0b:04: e7:d0:29:68:42:89:91:23:7c:f1:bf:86:ee:57:40: 08:0f:40:4d:a5:c9:5e:78:8e:aa:db:e7:ec:9b:df: 55:0a:4d:c3:74:88:63:5b:73:2e:57:b7:19:5e:f1: ea:72:51:21:9a:ed:07:54:62:29:b9:e5:fc:5b:d7: af:27:82:43:6c:d9:93:80:e7:3a:1f:00:05:1d:bf: fc:b2:cb:d0:8e:57:1a:76:7a:c5:ea:75:d5:e5:a0: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:60:83:21:20:64:8A:AB:49:8B:E3:AD:47:87:FE:AD:13:01:DE:4B X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:c200::/40 Signature Algorithm: sha256WithRSAEncryption 78:9f:dc:ba:14:8d:92:54:56:ae:b4:f5:37:dc:61:0d:6a:ae: 1f:4b:9a:35:6f:58:9b:8d:53:19:4d:16:23:ab:b5:dd:58:83: 3e:e7:34:7c:f3:68:dd:89:10:a3:1b:df:7d:4e:8a:ea:16:82: 57:da:a5:43:ec:d5:1d:05:0c:99:87:85:71:a7:79:14:e6:78: c7:bb:bc:da:a1:14:46:90:a4:1d:35:77:c7:bb:a0:7f:75:d6: 6f:5b:05:95:6b:99:84:e4:27:1f:27:9d:7a:be:20:7e:6a:89: 1a:5a:8b:98:15:29:08:d4:ad:5c:68:52:7f:60:42:86:a9:72: 86:6e:38:69:da:df:a2:4c:83:a7:a0:af:be:38:b2:c1:70:d7: 0c:b4:7e:65:1e:f0:40:d3:a2:d0:05:69:38:43:8c:80:19:16: 4f:69:63:34:8a:69:7e:13:39:28:3d:ef:7c:89:dd:8d:52:29: 1b:31:14:36:bd:a2:20:e8:c2:38:26:d7:db:e1:b2:85:24:72: 6f:cc:73:03:14:8a:12:12:1b:74:f4:ed:d9:5c:23:34:d4:8c: 8d:8e:01:49:b9:26:75:34:53:72:b8:69:67:de:7e:e9:c9:e6: db:71:3f:94:d6:9f:9f:92:13:a4:43:28:34:bd:16:f2:67:cd: 87:14:3b:80 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUYPFm20/Yd0b3ocMkfCeuoGR0TJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzEwMjYyMTMzMjNaFw0yNDEwMjQyMTM4MjNaMDMxMTAvBgNV BAMTKDY1NjA4MzIxMjA2NDhBQUI0OThCRTNBRDQ3ODdGRUFEMTMwMURFNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTpwm2ye6A7PX8WvKom1W5MfW pc0owjUJ2ljYx+GJ/VwIuUMtMz6Qdhg2/XDNpKxLpLCZcQA3/1rouw7fR0M9zbU1 LpJ1KdSu7X6OyHD+xccNUkY67SMDAbh8xEtoiglvFwLQ8hXu+4IIsUmYuNZm/EHP ytCWk9VZFwSJ8PfdfvAOZgnawnJ+DvbzBtY5+9D8XIkdYsJCnHCPjZvbVGswYQkL BOfQKWhCiZEjfPG/hu5XQAgPQE2lyV54jqrb5+yb31UKTcN0iGNbcy5Xtxle8epy USGa7QdUYim55fxb168ngkNs2ZOA5zofAAUdv/yyy9COVxp2esXqddXloGsTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUZWCDISBkiqtJi+OtR4f+rRMB3kswHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2MDg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwcIwDQYJKoZIhvcNAQELBQADggEBAHif 3LoUjZJUVq609TfcYQ1qrh9LmjVvWJuNUxlNFiOrtd1Ygz7nNHzzaN2JEKMb331O iuoWglfapUPs1R0FDJmHhXGneRTmeMe7vNqhFEaQpB01d8e7oH911m9bBZVrmYTk Jx8nnXq+IH5qiRpai5gVKQjUrVxoUn9gQoapcoZuOGna36JMg6egr744ssFw1wy0 fmUe8EDTotAFaThDjIAZFk9pYzSKaX4TOSg973yJ3Y1SKRsxFDa9oiDowjgm19vh soUkcm/McwMUihISG3T07dlcIzTUjI2OAUm5JnU0U3K4aWfefunJ5ttxP5TWn5+S E6RDKDS9FvJnzYcUO4A= -----END CERTIFICATE-----Generated at Mon May 20 13:08:22 2024 by rpki-client on console-fra.rpki-client.org