$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216089.roa File: AS216089.roa (raw, json) Hash identifier: YRyt6k2siaF/ZUbiTWINZjo0525rBhxYmN2KtWtCx/A= Subject key identifier: C5:37:6D:87:34:68:13:27:4A:0A:03:94:35:63:37:35:E7:3A:2D:88 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 16FA6084A12AA2388A49C45E11BF0CD1B51562EF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216089.roa Signing time: Thu 26 Sep 2024 12:44:49 +0000 ROA not before: Thu 26 Sep 2024 12:39:49 +0000 ROA not after: Thu 25 Sep 2025 12:44:49 +0000 asID: 216089 IP address blocks: 2a05:dfc1:a800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fa:60:84:a1:2a:a2:38:8a:49:c4:5e:11:bf:0c:d1:b5:15:62:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 26 12:39:49 2024 GMT Not After : Sep 25 12:44:49 2025 GMT Subject: CN=C5376D87346813274A0A039435633735E73A2D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:a4:ee:93:8f:77:3c:51:7a:0c:84:2b:31: 19:69:1a:f0:bd:bf:dc:af:b3:cf:ff:63:54:51:49: 6a:79:d3:6c:8a:51:01:2c:b6:61:86:45:48:c6:c5: 65:2a:6a:58:af:f2:7c:18:e9:dc:f3:06:77:60:17: 45:30:cf:aa:1a:41:ed:a4:3b:71:4d:27:36:1c:f4: 9e:a1:4d:4f:08:86:be:3b:5e:e9:fb:ad:46:e6:83: 55:5c:84:3b:36:ff:91:14:3e:85:10:90:96:3f:a6: 28:b8:b8:01:df:c9:58:62:d9:fe:c9:f7:86:91:83: 11:42:55:25:37:bf:fb:40:8d:0d:00:a0:11:2f:c0: 15:06:0a:44:8e:ae:20:b6:49:64:2d:0e:77:d9:1e: a9:3c:76:5b:f5:1f:c4:1e:d3:21:98:bf:58:20:8d: 67:e8:93:fc:52:26:45:96:cf:35:16:d3:09:28:98: 13:2e:9e:6d:e8:b7:9b:56:5b:5a:f6:5e:98:4f:0b: 7d:dd:4d:00:c7:ae:ab:d4:ed:77:27:59:3b:77:37: 37:2b:cf:34:f3:b6:e1:be:d4:ce:52:08:22:68:00: 6a:29:37:c4:02:83:6e:59:6a:09:38:fb:3a:f7:59: 1c:32:a1:bf:5c:73:f7:fb:b8:86:68:41:c4:e2:1c: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:6D:87:34:68:13:27:4A:0A:03:94:35:63:37:35:E7:3A:2D:88 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:a800::/40 Signature Algorithm: sha256WithRSAEncryption 92:0b:24:10:60:62:d7:92:97:c8:4d:45:b5:cd:59:c8:0a:27: f1:d1:7e:44:d2:2f:ee:d0:d0:4e:7b:61:c7:a9:46:3c:49:12: 50:87:4a:ac:a7:95:91:a1:a1:e2:d6:6e:2b:03:7b:7c:01:41: 6f:a2:2a:66:2b:fd:ec:a7:ec:e8:a9:fc:32:68:76:6c:bb:b1: e6:16:bf:93:97:d1:a9:3e:29:2b:6d:f8:e4:4f:b8:69:58:33: c3:83:88:7c:b4:6d:fb:e7:58:7a:12:4f:20:29:5e:f4:94:1e: 2e:5b:c7:24:e0:f8:1e:90:c7:27:b7:02:98:71:18:e6:df:d7: 33:20:9c:4b:37:4f:9b:a1:15:f0:7f:8e:a9:34:1a:f1:28:70: bc:75:52:e9:b4:99:54:96:75:1a:d9:f4:89:03:84:90:13:b0: c4:ef:d4:5e:5e:40:bc:9f:4f:5c:ef:1c:1a:6a:8b:74:24:34: ea:dc:1d:4d:97:16:5f:7c:b4:52:ab:4d:03:92:1d:ad:9e:a3: a7:7b:ae:7b:f5:ca:97:ce:07:63:9e:2d:8b:e9:c1:03:58:32: 80:b4:95:a3:87:5f:80:8f:51:f6:7d:3c:94:c7:d2:71:65:9b: e7:39:44:70:88:a1:a2:3f:f6:92:b1:29:92:fa:9e:8f:8a:6e: cb:4d:c1:91 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUFvpghKEqojiKScReEb8M0bUVYu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA5MjYxMjM5NDlaFw0yNTA5MjUxMjQ0NDlaMDMxMTAvBgNV BAMTKEM1Mzc2RDg3MzQ2ODEzMjc0QTBBMDM5NDM1NjMzNzM1RTczQTJEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC056Tuk493PFF6DIQrMRlpGvC9 v9yvs8//Y1RRSWp502yKUQEstmGGRUjGxWUqaliv8nwY6dzzBndgF0Uwz6oaQe2k O3FNJzYc9J6hTU8Ihr47Xun7rUbmg1VchDs2/5EUPoUQkJY/pii4uAHfyVhi2f7J 94aRgxFCVSU3v/tAjQ0AoBEvwBUGCkSOriC2SWQtDnfZHqk8dlv1H8Qe0yGYv1gg jWfok/xSJkWWzzUW0wkomBMunm3ot5tWW1r2XphPC33dTQDHrqvU7XcnWTt3Nzcr zzTztuG+1M5SCCJoAGopN8QCg25Zagk4+zr3WRwyob9cc/f7uIZoQcTiHPfZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUxTdthzRoEydKCgOUNWM3Nec6LYgwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2MDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwagwDQYJKoZIhvcNAQELBQADggEBAJIL JBBgYteSl8hNRbXNWcgKJ/HRfkTSL+7Q0E57YcepRjxJElCHSqynlZGhoeLWbisD e3wBQW+iKmYr/eyn7Oip/DJodmy7seYWv5OX0ak+KStt+ORPuGlYM8ODiHy0bfvn WHoSTyApXvSUHi5bxyTg+B6Qxye3AphxGObf1zMgnEs3T5uhFfB/jqk0GvEocLx1 Uum0mVSWdRrZ9IkDhJATsMTv1F5eQLyfT1zvHBpqi3QkNOrcHU2XFl98tFKrTQOS Ha2eo6d7rnv1ypfOB2OeLYvpwQNYMoC0laOHX4CPUfZ9PJTH0nFlm+c5RHCIoaI/ 9pKxKZL6no+KbstNwZE= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org