$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49304.roa File: AS49304.roa (raw, json) Hash identifier: vdTfW+36JgFM0UTy2+Bv7TMePoxNKlXD9L5o8hj7cWQ= Subject key identifier: 9E:CC:91:40:20:A2:94:70:89:D9:15:E2:20:AF:3C:72:14:24:F4:C3 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1B84B50645244800F9959CEA1CDA1B6C27836A72 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49304.roa Signing time: Wed 07 Aug 2024 06:49:44 +0000 ROA not before: Wed 07 Aug 2024 06:44:44 +0000 ROA not after: Wed 06 Aug 2025 06:49:44 +0000 asID: 49304 IP address blocks: 2a05:dfc1:8b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:84:b5:06:45:24:48:00:f9:95:9c:ea:1c:da:1b:6c:27:83:6a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Aug 7 06:44:44 2024 GMT Not After : Aug 6 06:49:44 2025 GMT Subject: CN=9ECC914020A2947089D915E220AF3C721424F4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:b9:a6:e2:3b:0e:cb:e6:3a:df:22:c8:cb: e2:15:23:32:70:4d:67:79:51:ba:a0:a1:e2:03:17: 98:1c:2e:4b:f3:7b:a2:be:97:41:1c:09:7b:71:28: de:23:74:f1:39:4e:a4:5c:3d:9b:4a:36:0f:ac:94: a0:f8:9f:79:b9:94:35:d1:e8:d2:a1:ff:c0:01:7f: 0c:5e:cb:86:16:bd:8c:04:a0:10:90:1c:48:1a:d3: f5:31:cd:40:40:5f:dd:b2:61:02:49:73:af:b1:40: 7a:13:83:1c:15:aa:ff:e3:eb:8d:9f:4d:f1:13:b8: 84:44:c0:6d:35:cd:5b:b1:f0:73:05:15:96:7f:e8: c8:46:53:40:45:ca:16:07:2e:6a:ac:8e:b5:25:75: 40:98:7b:b6:f1:b6:6b:c8:2a:f4:64:59:ae:fd:99: 68:af:30:56:49:c8:60:2a:4f:cb:a1:2e:51:f2:b8: f4:85:b1:f0:2d:3a:45:44:4c:a6:55:cb:eb:6a:e2: 38:67:a5:a7:c8:46:fa:38:68:13:c9:41:3c:65:20: b3:69:2a:0d:e7:1b:60:6c:3a:16:62:fd:aa:d0:aa: 9c:9f:c9:69:b0:ce:4c:50:5e:5a:6a:f1:cd:3f:e6: 00:63:56:b1:89:52:5e:7c:0a:5f:f6:52:65:85:92: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CC:91:40:20:A2:94:70:89:D9:15:E2:20:AF:3C:72:14:24:F4:C3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8b00::/40 Signature Algorithm: sha256WithRSAEncryption a8:a8:93:00:d0:c0:31:ba:b2:7e:10:57:fe:e9:7d:0e:4e:47: 48:c5:1d:ce:b7:e7:58:2c:25:5b:52:da:47:9c:2d:be:3e:78: 9e:84:1a:f6:a9:7b:c7:96:65:08:e1:7a:87:3c:67:a0:04:7a: 85:06:ad:18:d9:fa:54:57:0a:59:76:43:1e:5b:21:79:d9:23: 5f:7d:d4:3b:d1:e6:24:11:11:b4:e3:3f:fb:72:2e:2a:7f:54: af:9c:b0:d1:d4:ea:aa:e4:1d:bf:4d:65:23:48:26:37:53:47: 1f:20:c3:80:34:64:3e:4d:1e:34:fe:ee:bc:03:6f:fa:d8:28: 4e:66:6a:0c:82:4b:d0:76:7d:70:74:d8:16:c3:20:a4:32:4f: 36:c9:e3:9b:c5:7f:63:40:64:f6:4d:f6:88:3b:2d:c9:1a:ed: 2f:0c:10:a5:4f:de:a8:fe:58:58:52:7c:14:37:52:8b:49:d0: 52:1c:e8:0e:6b:c8:4a:81:96:35:bc:18:4a:1d:3e:fc:43:35: 20:0b:32:06:a1:93:58:c5:24:af:cb:37:e4:f3:78:ff:85:40: 39:a1:77:60:1a:8a:31:5d:d9:4b:ca:12:dc:77:1f:6e:9c:11: c5:f5:a0:4d:18:d0:e0:f6:cf:b0:93:2c:88:98:42:2f:11:47: 0e:ed:ff:66 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUG4S1BkUkSAD5lZzqHNobbCeDanIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA4MDcwNjQ0NDRaFw0yNTA4MDYwNjQ5NDRaMDMxMTAvBgNV BAMTKDlFQ0M5MTQwMjBBMjk0NzA4OUQ5MTVFMjIwQUYzQzcyMTQyNEY0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D7mm4jsOy+Y63yLIy+IVIzJw TWd5UbqgoeIDF5gcLkvze6K+l0EcCXtxKN4jdPE5TqRcPZtKNg+slKD4n3m5lDXR 6NKh/8ABfwxey4YWvYwEoBCQHEga0/UxzUBAX92yYQJJc6+xQHoTgxwVqv/j642f TfETuIREwG01zVux8HMFFZZ/6MhGU0BFyhYHLmqsjrUldUCYe7bxtmvIKvRkWa79 mWivMFZJyGAqT8uhLlHyuPSFsfAtOkVETKZVy+tq4jhnpafIRvo4aBPJQTxlILNp Kg3nG2BsOhZi/arQqpyfyWmwzkxQXlpq8c0/5gBjVrGJUl58Cl/2UmWFkllxAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUnsyRQCCilHCJ2RXiIK88chQk9MMwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNDkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BizANBgkqhkiG9w0BAQsFAAOCAQEAqKiT ANDAMbqyfhBX/ul9Dk5HSMUdzrfnWCwlW1LaR5wtvj54noQa9ql7x5ZlCOF6hzxn oAR6hQatGNn6VFcKWXZDHlshedkjX33UO9HmJBERtOM/+3IuKn9Ur5yw0dTqquQd v01lI0gmN1NHHyDDgDRkPk0eNP7uvANv+tgoTmZqDIJL0HZ9cHTYFsMgpDJPNsnj m8V/Y0Bk9k32iDstyRrtLwwQpU/eqP5YWFJ8FDdSi0nQUhzoDmvISoGWNbwYSh0+ /EM1IAsyBqGTWMUkr8s35PN4/4VAOaF3YBqKMV3ZS8oS3HcfbpwRxfWgTRjQ4PbP sJMsiJhCLxFHDu3/Zg== -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org