$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS31867.roa File: AS31867.roa (raw, json) Hash identifier: yuN7IUxTsoJ6DdIDN3Xqf50yOkIYn2XSuG7fawebtOM= Subject key identifier: 72:C2:77:58:4D:8C:D5:61:C5:CA:4D:E4:58:4F:57:D9:94:9F:37:9E Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 56D14FF03918E5ED17769CC802EC5BA641CF65BA Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS31867.roa Signing time: Thu 08 Feb 2024 08:03:35 +0000 ROA not before: Thu 08 Feb 2024 07:58:35 +0000 ROA not after: Thu 06 Feb 2025 08:03:35 +0000 asID: 31867 IP address blocks: 2a05:dfc1:8600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 22:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d1:4f:f0:39:18:e5:ed:17:76:9c:c8:02:ec:5b:a6:41:cf:65:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 8 07:58:35 2024 GMT Not After : Feb 6 08:03:35 2025 GMT Subject: CN=72C277584D8CD561C5CA4DE4584F57D9949F379E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:4a:c3:0f:61:ee:3d:b7:94:c4:66:e4:36: 96:b0:55:a4:43:15:22:76:69:78:92:42:64:14:8a: c4:17:0b:71:99:fc:b7:e5:19:d1:1a:a4:e3:02:80: 0f:e8:00:a9:a0:f2:6c:ab:b2:be:4d:9a:8d:8b:f5: 21:d1:2f:7b:66:cc:a6:41:7a:52:3f:2a:ac:a0:1d: 96:a7:9a:81:db:ae:d8:6f:73:35:6c:1f:45:51:59: 95:c9:13:ab:1e:7b:02:79:bd:3f:33:18:df:45:35: 1e:51:82:75:d5:cd:b1:57:ae:5d:55:38:5e:af:e1: be:c7:74:18:9a:25:19:15:86:be:01:3b:0b:e6:02: 42:12:53:cc:65:b2:05:1b:64:5c:aa:18:cc:03:c9: de:a3:f3:7a:a2:38:a5:21:ed:a7:9e:b2:4f:4c:d9: 7a:5f:5d:50:93:88:69:1a:07:ea:a1:c4:21:55:18: ed:32:95:a1:6d:68:91:2a:d9:52:96:c2:b8:98:84: b2:78:81:07:1f:45:8a:a3:64:36:2f:86:f4:e1:a2: d5:cd:da:97:1d:ca:19:d6:d6:c7:7e:f3:b6:dc:6c: 94:26:97:9f:26:df:c5:1e:41:7f:f9:0c:b6:8a:e0: bf:c1:f9:75:6d:94:b3:88:b1:47:0b:e5:98:d9:aa: 90:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C2:77:58:4D:8C:D5:61:C5:CA:4D:E4:58:4F:57:D9:94:9F:37:9E X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS31867.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8600::/40 Signature Algorithm: sha256WithRSAEncryption 91:f4:a6:d3:ab:95:21:8e:ca:a7:31:86:73:9e:1a:82:34:e6: f0:c4:10:06:e3:21:d9:9d:e5:81:ac:74:92:24:91:d6:20:0a: 56:53:5d:07:7e:be:e3:cb:59:ea:60:df:db:96:d0:d1:90:41: d7:0d:31:4f:0d:dd:95:65:5a:21:22:17:4e:31:ae:75:4f:82: 90:c6:9f:be:2b:44:da:21:3f:bc:71:62:84:fd:86:6e:3d:e6: 24:fa:de:53:10:9d:8b:18:54:a5:d6:69:16:0b:e7:52:cf:17: 76:75:ca:1f:6d:aa:65:a5:42:94:58:24:f7:de:f0:c0:31:74: 4c:84:51:5f:05:02:5b:ef:a0:65:35:a5:bb:11:ee:5b:56:c8: 7a:70:3e:00:d5:52:87:40:ac:f1:05:4f:b1:92:cf:8e:38:43: 94:e7:0b:74:d7:3e:a7:ce:a7:8c:da:45:fb:ee:e4:ca:87:50: 1b:3f:4e:73:d7:4a:a3:42:9a:5e:4f:ec:89:f7:40:e7:af:39: a2:99:26:4f:5b:a5:8d:ba:8e:92:b4:4f:8d:f0:1d:36:14:fb: 03:7d:ce:f1:62:4b:3b:c7:4b:8f:fd:b0:4b:cc:61:d0:f7:bd: b5:11:e0:8d:48:b7:aa:9f:16:1b:a9:92:73:65:9d:d6:c6:9f: 15:1f:78:f4 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUVtFP8DkY5e0XdpzIAuxbpkHPZbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDAyMDgwNzU4MzVaFw0yNTAyMDYwODAzMzVaMDMxMTAvBgNV BAMTKDcyQzI3NzU4NEQ4Q0Q1NjFDNUNBNERFNDU4NEY1N0Q5OTQ5RjM3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bkrDD2HuPbeUxGbkNpawVaRD FSJ2aXiSQmQUisQXC3GZ/LflGdEapOMCgA/oAKmg8myrsr5Nmo2L9SHRL3tmzKZB elI/KqygHZanmoHbrthvczVsH0VRWZXJE6seewJ5vT8zGN9FNR5RgnXVzbFXrl1V OF6v4b7HdBiaJRkVhr4BOwvmAkISU8xlsgUbZFyqGMwDyd6j83qiOKUh7aeesk9M 2XpfXVCTiGkaB+qhxCFVGO0ylaFtaJEq2VKWwriYhLJ4gQcfRYqjZDYvhvThotXN 2pcdyhnW1sd+87bcbJQml58m38UeQX/5DLaK4L/B+XVtlLOIsUcL5ZjZqpCnAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUcsJ3WE2M1WHFyk3kWE9X2ZSfN54wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMzE4Njcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BhjANBgkqhkiG9w0BAQsFAAOCAQEAkfSm 06uVIY7KpzGGc54agjTm8MQQBuMh2Z3lgax0kiSR1iAKVlNdB36+48tZ6mDf25bQ 0ZBB1w0xTw3dlWVaISIXTjGudU+CkMafvitE2iE/vHFihP2Gbj3mJPreUxCdixhU pdZpFgvnUs8XdnXKH22qZaVClFgk997wwDF0TIRRXwUCW++gZTWluxHuW1bIenA+ ANVSh0Cs8QVPsZLPjjhDlOcLdNc+p86njNpF++7kyodQGz9Oc9dKo0KaXk/sifdA 5685opkmT1uljbqOkrRPjfAdNhT7A33O8WJLO8dLj/2wS8xh0Pe9tRHgjUi3qp8W G6mSc2Wd1safFR949A== -----END CERTIFICATE-----Generated at Tue May 21 05:34:02 2024 by rpki-client on console-ams.rpki-client.org