$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216268.roa File: AS216268.roa (raw, json) Hash identifier: si6ChVAl72AUeQSrOszF+Z/NSDujSrvNhs8Y4ziRBo0= Subject key identifier: D8:5A:D5:E3:45:E6:45:AA:7A:31:74:32:96:35:59:13:56:64:A4:79 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 2A96D880615C03360CAA1B8543306853A5384E02 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216268.roa Signing time: Thu 08 Feb 2024 08:03:49 +0000 ROA not before: Thu 08 Feb 2024 07:58:49 +0000 ROA not after: Thu 06 Feb 2025 08:03:49 +0000 asID: 216268 IP address blocks: 2a05:dfc1:8600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:96:d8:80:61:5c:03:36:0c:aa:1b:85:43:30:68:53:a5:38:4e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 8 07:58:49 2024 GMT Not After : Feb 6 08:03:49 2025 GMT Subject: CN=D85AD5E345E645AA7A317432963559135664A479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:79:21:94:53:31:5d:16:01:16:86:ae:fe: 2c:74:86:6b:1e:9c:f2:16:7b:ca:5c:02:52:4a:c0: b0:9d:e0:73:3c:e6:94:20:d2:23:48:64:65:8e:8a: 69:a3:02:61:4c:68:95:e0:f1:52:fe:63:17:3f:80: 07:e0:cc:79:f1:38:4f:9e:8f:2c:92:df:92:ee:5c: ce:b0:58:a6:2b:0b:19:ef:c3:9e:cb:0f:01:74:23: 8c:77:a1:8a:32:f8:8b:de:09:15:9f:d2:af:57:cf: 18:9a:ce:43:67:c2:02:4b:f4:99:90:25:63:03:bb: b1:9e:9d:e5:6b:6e:96:42:43:77:5a:36:d2:69:2b: ca:16:54:2a:1b:88:f7:c4:a2:79:cf:52:f6:ef:e3: e9:d5:11:fb:dd:f5:b4:60:11:df:1e:53:f5:65:f8: 58:01:fe:17:08:fb:bc:91:48:7c:72:ec:94:f3:c8: 13:20:99:e5:25:71:95:0f:87:06:ce:7e:c6:07:70: ea:eb:e0:2a:da:8f:e7:36:e5:ce:e8:23:3d:56:6e: 0e:42:bc:c7:95:e8:b3:d0:66:7e:32:2b:e2:e2:3f: 4d:3e:a0:3b:d7:96:d6:d6:c6:89:87:fb:53:2a:9b: b8:3f:03:8b:39:44:a2:7e:bc:70:9d:e7:32:36:0f: c4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5A:D5:E3:45:E6:45:AA:7A:31:74:32:96:35:59:13:56:64:A4:79 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216268.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8600::/40 Signature Algorithm: sha256WithRSAEncryption c3:fc:7a:2e:76:6c:6d:39:83:6a:b8:14:49:1f:bd:dc:16:37: 21:6b:84:57:5d:a3:db:dd:ed:be:0a:3b:7c:c2:71:22:93:26: b2:8c:1a:ad:30:54:10:a2:41:fe:0f:50:09:71:a4:50:d9:bc: 9d:63:e0:b0:11:7b:d4:74:7a:e0:0a:e9:d4:0a:d6:6c:e8:d8: a2:47:3c:58:52:ec:42:45:97:b5:6e:a1:84:bb:11:cf:54:74: b0:77:ee:1c:33:13:22:fe:00:80:ff:16:6b:4c:b0:c1:6b:aa: bc:78:c6:2d:16:63:03:f0:eb:b8:52:f6:34:1e:77:67:36:69: ff:f3:2d:95:89:55:69:b3:58:5f:ce:d0:4e:3f:8a:e4:8a:4a: 32:42:7b:79:93:2f:a8:43:f4:6f:21:f3:c2:9d:3f:4c:b4:b5: 23:c1:e0:6f:ef:62:88:31:20:ae:79:0c:43:b8:72:d4:92:94: bf:34:d2:1b:d9:13:52:28:6b:b6:92:b7:65:76:f7:cd:c3:b8: ba:a6:49:a7:af:56:cf:b7:9e:b4:e5:1d:1a:0b:25:de:95:af: c4:f3:91:fd:b2:44:41:40:e2:32:03:a6:44:bb:71:47:c3:30: 37:4f:52:70:69:14:f5:c2:a4:91:63:0a:78:62:bd:7c:25:b2: d1:d9:5e:91 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUKpbYgGFcAzYMqhuFQzBoU6U4TgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAyMDgwNzU4NDlaFw0yNTAyMDYwODAzNDlaMDMxMTAvBgNV BAMTKEQ4NUFENUUzNDVFNjQ1QUE3QTMxNzQzMjk2MzU1OTEzNTY2NEE0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNHkhlFMxXRYBFoau/ix0hmse nPIWe8pcAlJKwLCd4HM85pQg0iNIZGWOimmjAmFMaJXg8VL+Yxc/gAfgzHnxOE+e jyyS35LuXM6wWKYrCxnvw57LDwF0I4x3oYoy+IveCRWf0q9XzxiazkNnwgJL9JmQ JWMDu7GeneVrbpZCQ3daNtJpK8oWVCobiPfEonnPUvbv4+nVEfvd9bRgEd8eU/Vl +FgB/hcI+7yRSHxy7JTzyBMgmeUlcZUPhwbOfsYHcOrr4Craj+c25c7oIz1Wbg5C vMeV6LPQZn4yK+LiP00+oDvXltbWxomH+1Mqm7g/A4s5RKJ+vHCd5zI2D8RbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU2FrV40XmRap6MXQyljVZE1ZkpHkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjE2MjY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfwYYwDQYJKoZIhvcNAQELBQADggEBAMP8 ei52bG05g2q4FEkfvdwWNyFrhFddo9vd7b4KO3zCcSKTJrKMGq0wVBCiQf4PUAlx pFDZvJ1j4LARe9R0euAK6dQK1mzo2KJHPFhS7EJFl7VuoYS7Ec9UdLB37hwzEyL+ AID/FmtMsMFrqrx4xi0WYwPw67hS9jQed2c2af/zLZWJVWmzWF/O0E4/iuSKSjJC e3mTL6hD9G8h88KdP0y0tSPB4G/vYogxIK55DEO4ctSSlL800hvZE1Ioa7aSt2V2 983DuLqmSaevVs+3nrTlHRoLJd6Vr8Tzkf2yREFA4jIDpkS7cUfDMDdPUnBpFPXC pJFjCnhivXwlstHZXpE= -----END CERTIFICATE-----Generated at Thu May 16 13:03:38 2024 by rpki-client on console-ams.rpki-client.org