$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23449.roa File: AS23449.roa (raw, json) Hash identifier: CLu10zNaZ5lHnCI80tkwDtyI19AFqimlSWBD21/xBFg= Subject key identifier: 73:70:6E:99:BC:A6:78:41:D5:E1:1F:D4:E4:40:37:1A:AA:98:57:96 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 3A2E4488BC9F5B91EB2CED603B7752B482ECE28A Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23449.roa Signing time: Mon 29 Jul 2024 22:59:07 +0000 ROA not before: Mon 29 Jul 2024 22:54:07 +0000 ROA not after: Mon 28 Jul 2025 22:59:07 +0000 asID: 23449 IP address blocks: 2a05:dfc1:9700::/40 maxlen: 48 2a06:9f81:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2e:44:88:bc:9f:5b:91:eb:2c:ed:60:3b:77:52:b4:82:ec:e2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jul 29 22:54:07 2024 GMT Not After : Jul 28 22:59:07 2025 GMT Subject: CN=73706E99BCA67841D5E11FD4E440371AAA985796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5c:35:85:df:95:b5:5b:87:5b:d5:11:80:71: e5:ef:ed:1a:fc:5d:a5:d8:21:df:8f:51:55:bb:80: 47:93:a7:87:2f:08:80:93:64:b2:5e:08:e4:5c:ed: ec:8d:ba:87:d6:16:38:28:27:49:dc:0d:bd:ef:5d: d6:40:00:11:13:4d:69:f5:74:70:de:05:29:d6:c3: 6b:0b:14:24:a1:0e:50:ba:00:bb:1b:44:f0:62:7b: e0:c0:01:7a:2d:ce:9d:52:08:fc:fc:20:4b:94:52: 16:e3:8e:5a:9a:dd:8f:a3:8a:18:f3:ca:48:64:0a: 56:42:81:ad:18:f5:11:fc:d0:8d:7c:c1:a9:33:24: 20:bb:90:d0:7f:aa:34:ad:dc:1c:19:af:72:28:83: 4e:0b:9f:e2:64:33:0c:08:0b:9e:02:c1:5d:21:98: 17:f2:4a:1e:9a:a8:43:ef:42:83:a0:fb:7a:6d:c3: 30:97:cf:02:d3:6d:7a:bb:56:c0:37:81:7e:29:ca: 74:cd:a2:29:77:72:8b:66:ac:03:b2:0a:86:32:af: f6:a3:f1:2e:ec:f1:a0:2a:ea:96:e7:72:04:32:40: ea:1e:ca:2f:52:38:63:05:9a:7c:4e:3f:8a:f0:e5: 28:27:ee:15:74:ef:95:f8:df:47:64:a4:bf:60:e8: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:70:6E:99:BC:A6:78:41:D5:E1:1F:D4:E4:40:37:1A:AA:98:57:96 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS23449.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:9700::/40 2a06:9f81:6000::/40 Signature Algorithm: sha256WithRSAEncryption a9:9c:6b:8b:58:05:d8:ee:db:6a:f0:0f:ad:07:d4:6e:a3:00: f5:0f:da:e9:a8:ef:e6:d0:01:34:32:e6:23:e3:93:e5:2e:3d: 2c:25:c8:b6:39:74:83:3c:f7:54:cc:fb:e3:58:58:e4:fa:ca: 25:7b:29:2e:b8:f2:b4:22:22:e5:bb:7b:26:04:94:3f:95:9b: f1:c4:12:86:f1:ec:91:03:93:58:d9:77:3e:63:92:85:4c:75: c2:e7:5d:5e:4d:bb:13:ea:1c:3e:e3:f3:eb:15:16:5f:b2:53: e4:33:c3:c7:a1:40:d6:fd:03:6f:c4:7a:91:02:9d:93:9a:65: 81:1f:41:c2:93:cc:fa:4f:72:c7:53:9e:b7:82:81:8b:b7:b4: f9:73:5d:e9:44:c4:c7:4f:c6:46:20:5b:eb:dc:72:56:52:11: 05:36:ad:c4:ea:a8:af:6b:bf:07:cb:bd:63:e2:60:9d:5b:58: c6:ed:18:c2:d3:fd:21:fd:ea:ff:64:39:b4:65:e5:9b:13:cc: c5:6b:2f:60:aa:2f:90:fa:27:e5:0a:8f:72:dd:c6:e5:76:e5: 52:38:f2:63:bd:d1:84:4f:4f:6b:cd:0c:95:ed:41:55:a4:b3: db:9c:48:a9:32:d0:28:16:cd:1d:88:7a:03:1f:27:d9:3f:f1: 46:b0:09:99 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUOi5EiLyfW5HrLO1gO3dStILs4oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA3MjkyMjU0MDdaFw0yNTA3MjgyMjU5MDdaMDMxMTAvBgNV BAMTKDczNzA2RTk5QkNBNjc4NDFENUUxMUZENEU0NDAzNzFBQUE5ODU3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXDWF35W1W4db1RGAceXv7Rr8 XaXYId+PUVW7gEeTp4cvCICTZLJeCORc7eyNuofWFjgoJ0ncDb3vXdZAABETTWn1 dHDeBSnWw2sLFCShDlC6ALsbRPBie+DAAXotzp1SCPz8IEuUUhbjjlqa3Y+jihjz ykhkClZCga0Y9RH80I18wakzJCC7kNB/qjSt3BwZr3Iog04Ln+JkMwwIC54CwV0h mBfySh6aqEPvQoOg+3ptwzCXzwLTbXq7VsA3gX4pynTNoil3cotmrAOyCoYyr/aj 8S7s8aAq6pbncgQyQOoeyi9SOGMFmnxOP4rw5Sgn7hV075X430dkpL9g6Ks9AgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUc3BumbymeEHV4R/U5EA3GqqYV5YwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjM0NDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgACMBADBgAqBd/BlwMGACoGn4FgMA0GCSqGSIb3DQEBCwUA A4IBAQCpnGuLWAXY7ttq8A+tB9RuowD1D9rpqO/m0AE0MuYj45PlLj0sJci2OXSD PPdUzPvjWFjk+soleykuuPK0IiLlu3smBJQ/lZvxxBKG8eyRA5NY2Xc+Y5KFTHXC 511eTbsT6hw+4/PrFRZfslPkM8PHoUDW/QNvxHqRAp2TmmWBH0HCk8z6T3LHU563 goGLt7T5c13pRMTHT8ZGIFvr3HJWUhEFNq3E6qiva78Hy71j4mCdW1jG7RjC0/0h /er/ZDm0ZeWbE8zFay9gqi+Q+iflCo9y3cblduVSOPJjvdGET09rzQyV7UFVpLPb nEipMtAoFs0diHoDHyfZP/FGsAmZ -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org