$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49304.roa File: AS49304.roa (raw, json) Hash identifier: +1gT0KkGdR4hrCWPfyOtDjZDUKJ3FR8Zik7ibBUxN1U= Subject key identifier: 5F:12:28:DE:B0:D2:C7:55:9B:65:C5:83:71:CA:2D:52:90:4B:2E:BC Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5FC398E505ACDD3DC66F5B58358CF47DB8815132 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49304.roa Signing time: Wed 06 Sep 2023 06:01:37 +0000 ROA not before: Wed 06 Sep 2023 05:56:37 +0000 ROA not after: Wed 04 Sep 2024 06:01:37 +0000 asID: 49304 IP address blocks: 2a05:dfc1:8b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c3:98:e5:05:ac:dd:3d:c6:6f:5b:58:35:8c:f4:7d:b8:81:51:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Sep 6 05:56:37 2023 GMT Not After : Sep 4 06:01:37 2024 GMT Subject: CN=5F1228DEB0D2C7559B65C58371CA2D52904B2EBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:1f:c5:77:ae:a5:1a:8c:b2:8c:5b:03:ec: 10:6b:db:8f:69:2b:a5:81:e3:65:36:ee:9d:3d:38: bb:80:a8:37:25:47:90:af:34:6c:5e:e2:f1:95:15: 22:8e:8c:88:08:fd:90:d8:6c:6a:df:c6:ca:ed:62: 51:85:79:11:ad:4e:0a:49:99:8a:9e:e7:d0:4c:b4: 75:37:70:02:d6:69:b2:e7:3b:2d:e7:46:92:47:c3: a8:ae:b2:9c:54:95:95:d8:c3:29:27:dd:b9:e4:1f: 0f:ac:3a:48:ea:b7:79:7a:4c:6d:47:64:86:0a:29: 52:2c:b3:2a:56:ad:fd:84:d3:11:4c:b8:b6:0a:99: 02:16:94:94:63:a3:e3:6f:db:87:28:cd:b2:a8:63: 12:e8:49:63:e3:3f:11:6b:3d:5e:45:5a:b3:78:07: e1:b9:3d:f0:16:83:8a:71:25:a1:56:54:e2:67:da: f9:4b:10:9c:60:1f:4c:c2:53:a7:9a:ac:81:dc:54: 81:19:e6:da:90:39:90:4b:5c:e4:b5:e6:2e:11:c6: 4f:1e:23:0b:5e:bf:5f:d2:9d:fa:02:28:6b:89:8a: 7f:ff:4b:c6:c6:27:51:95:d1:f4:24:25:14:69:f2: cf:55:e7:28:c2:b8:aa:71:c9:37:e7:f5:6a:9e:3f: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:12:28:DE:B0:D2:C7:55:9B:65:C5:83:71:CA:2D:52:90:4B:2E:BC X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8b00::/40 Signature Algorithm: sha256WithRSAEncryption 36:c8:7d:a9:96:d5:5c:5a:6f:46:a4:41:04:c1:55:ce:92:79: 56:eb:86:ee:17:3c:a1:a1:b2:41:3d:5a:5c:95:eb:3d:d6:f3: cc:9a:d8:1c:2b:d0:fa:fd:a5:be:35:0f:46:bc:a2:00:c0:84: a6:24:c6:98:da:f2:20:ce:be:64:f9:f4:c2:2f:78:f8:48:38: be:d7:85:80:9c:1a:15:95:cf:cf:db:f3:34:14:20:02:a0:f7: b2:e1:c8:3e:c5:ad:00:e1:9e:cd:45:ed:e9:06:3e:d2:41:fd: f5:e0:19:f2:f3:b3:60:e4:62:c9:e0:9e:cb:9e:4f:ab:d6:9c: 19:7f:ab:fc:35:cf:b0:55:07:5c:6d:c0:d3:54:db:b9:07:df: 52:a3:2c:25:91:c4:d7:34:0d:08:4a:26:54:28:69:48:cf:d3: 25:17:cc:47:3e:f5:7b:85:c6:9a:2d:0d:7c:f6:70:75:6d:ee: c7:ca:a8:3b:4f:4d:2e:b2:0c:ea:95:48:bf:6d:a2:ed:72:82: af:9e:84:4e:5b:d4:07:28:5c:eb:ed:44:eb:d3:df:82:3a:e7: 00:ff:51:9d:17:b2:a0:88:41:90:f9:4a:22:64:0a:3a:1d:80: 1f:28:e9:e3:d3:01:05:a6:41:2d:51:fa:3d:70:a2:d1:b3:0f: 36:b8:89:35 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUX8OY5QWs3T3Gb1tYNYz0fbiBUTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzA5MDYwNTU2MzdaFw0yNDA5MDQwNjAxMzdaMDMxMTAvBgNV BAMTKDVGMTIyOERFQjBEMkM3NTU5QjY1QzU4MzcxQ0EyRDUyOTA0QjJFQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWB/Fd66lGoyyjFsD7BBr249p K6WB42U27p09OLuAqDclR5CvNGxe4vGVFSKOjIgI/ZDYbGrfxsrtYlGFeRGtTgpJ mYqe59BMtHU3cALWabLnOy3nRpJHw6iuspxUlZXYwykn3bnkHw+sOkjqt3l6TG1H ZIYKKVIssypWrf2E0xFMuLYKmQIWlJRjo+Nv24cozbKoYxLoSWPjPxFrPV5FWrN4 B+G5PfAWg4pxJaFWVOJn2vlLEJxgH0zCU6earIHcVIEZ5tqQOZBLXOS15i4Rxk8e Iwtev1/SnfoCKGuJin//S8bGJ1GV0fQkJRRp8s9V5yjCuKpxyTfn9WqeP2k5AgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUXxIo3rDSx1WbZcWDccotUpBLLrwwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNDkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BizANBgkqhkiG9w0BAQsFAAOCAQEANsh9 qZbVXFpvRqRBBMFVzpJ5VuuG7hc8oaGyQT1aXJXrPdbzzJrYHCvQ+v2lvjUPRryi AMCEpiTGmNryIM6+ZPn0wi94+Eg4vteFgJwaFZXPz9vzNBQgAqD3suHIPsWtAOGe zUXt6QY+0kH99eAZ8vOzYORiyeCey55Pq9acGX+r/DXPsFUHXG3A01TbuQffUqMs JZHE1zQNCEomVChpSM/TJRfMRz71e4XGmi0NfPZwdW3ux8qoO09NLrIM6pVIv22i 7XKCr56ETlvUByhc6+1E69PfgjrnAP9RnReyoIhBkPlKImQKOh2AHyjp49MBBaZB LVH6PXCi0bMPNriJNQ== -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org