$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49548.roa File: AS49548.roa (raw, json) Hash identifier: e5eRJgn9I2mCeqQ8C4Ra4LDX5StfwbSN3BUhALyxRmY= Subject key identifier: 25:51:C7:19:55:38:1B:7B:EC:C7:F0:8C:F6:1E:3A:0A:A7:E6:06:26 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 4C4CFAFC742532012F462E590E47BC9607168CF4 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49548.roa Signing time: Sun 05 Nov 2023 04:07:17 +0000 ROA not before: Sun 05 Nov 2023 04:02:17 +0000 ROA not after: Sun 03 Nov 2024 04:07:17 +0000 asID: 49548 IP address blocks: 2a0a:6040:df00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 May 2024 07:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4c:fa:fc:74:25:32:01:2f:46:2e:59:0e:47:bc:96:07:16:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:17 2023 GMT Not After : Nov 3 04:07:17 2024 GMT Subject: CN=2551C71955381B7BECC7F08CF61E3A0AA7E60626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:5c:66:10:81:d0:cf:82:29:1c:30:e5:74: fa:c0:13:16:81:78:b7:47:9d:c3:83:2d:83:bb:62: 87:5d:79:33:ff:74:8f:33:4e:d3:e9:b1:17:db:2c: 6b:e3:69:02:ea:ad:43:d6:5c:18:42:cb:6b:d9:4f: a5:e1:cb:3b:98:8a:98:9d:22:af:95:e1:9a:76:33: 26:b0:7f:fc:90:b6:82:8c:f7:9b:b9:88:5f:a4:f7: 31:75:92:5b:77:72:59:56:24:2a:77:8b:a6:eb:c3: 2c:89:4b:96:18:21:a8:d4:7e:ac:77:12:ad:19:a9: bd:01:f8:9c:fb:55:99:d7:19:94:cb:80:6a:2a:a8: ac:7c:d7:09:95:64:c1:74:d8:65:30:f8:da:d0:2d: 22:ca:74:56:29:c3:6a:80:b0:d4:82:66:29:d4:8c: d7:0a:ce:62:67:40:1c:80:97:5f:b8:aa:d4:36:6d: 09:d8:b8:98:f8:0b:e1:9c:26:7a:7a:c3:47:be:41: 47:bf:c3:9d:71:e4:85:9d:82:8a:ff:9d:9e:41:c2: 14:76:bb:b1:8a:00:be:00:5d:bb:73:15:97:14:64: b6:3e:9a:c6:9d:90:21:d1:6f:72:af:39:80:e0:29: 75:6e:7b:19:a9:0f:43:5a:f7:cd:fa:d8:12:c0:e2: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:51:C7:19:55:38:1B:7B:EC:C7:F0:8C:F6:1E:3A:0A:A7:E6:06:26 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:df00::/40 Signature Algorithm: sha256WithRSAEncryption 45:f5:40:48:8f:17:06:6f:f7:e9:16:a6:f0:fc:da:51:eb:94: ee:3b:1e:0f:ce:40:56:7d:0c:e2:12:40:1d:29:fb:dc:a1:0a: 16:65:16:05:91:50:a4:99:95:96:e0:47:65:ec:0c:59:12:b3: 03:da:b7:96:fb:0c:fc:0b:13:84:33:c8:3c:56:3e:db:da:0e: 0b:4c:42:81:af:17:13:48:c5:f1:38:3a:9a:fa:9c:a5:56:ca: 48:91:a9:66:c5:78:a0:4f:b0:55:c1:fc:ad:51:a5:6e:fe:62: 24:35:66:4f:64:be:0a:64:8d:98:ad:16:28:08:ab:fb:b5:c2: 30:48:12:8d:3d:a3:60:86:59:1e:5f:7c:7f:88:c8:86:04:f2: 4a:63:92:e2:a1:f4:fd:41:60:59:52:26:91:c6:ff:a6:c3:95: fe:64:1c:19:74:c4:b3:ce:77:71:3a:ff:2a:ae:fc:a0:bd:5e: ca:8f:61:5a:65:41:a6:b2:3d:c3:f8:92:07:77:3d:7d:b5:63: 8c:65:36:26:34:43:5c:2f:e2:45:82:2d:f9:d9:48:77:7a:72: 51:0a:9c:ff:60:43:bd:3c:6f:e8:db:57:8b:00:a6:cf:5f:b4: 4d:95:68:d1:e0:52:93:d4:6b:bd:83:cd:fe:92:17:50:84:0c: 4d:e2:83:1e -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUTEz6/HQlMgEvRi5ZDke8lgcWjPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTdaFw0yNDExMDMwNDA3MTdaMDMxMTAvBgNV BAMTKDI1NTFDNzE5NTUzODFCN0JFQ0M3RjA4Q0Y2MUUzQTBBQTdFNjA2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnOFxmEIHQz4IpHDDldPrAExaB eLdHncODLYO7YoddeTP/dI8zTtPpsRfbLGvjaQLqrUPWXBhCy2vZT6XhyzuYipid Iq+V4Zp2Myawf/yQtoKM95u5iF+k9zF1klt3cllWJCp3i6brwyyJS5YYIajUfqx3 Eq0Zqb0B+Jz7VZnXGZTLgGoqqKx81wmVZMF02GUw+NrQLSLKdFYpw2qAsNSCZinU jNcKzmJnQByAl1+4qtQ2bQnYuJj4C+GcJnp6w0e+QUe/w51x5IWdgor/nZ5BwhR2 u7GKAL4AXbtzFZcUZLY+msadkCHRb3KvOYDgKXVuexmpD0Na98362BLA4oBfAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUJVHHGVU4G3vsx/CM9h46CqfmBiYwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNDk1NDgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBA3zANBgkqhkiG9w0BAQsFAAOCAQEARfVA SI8XBm/36Ram8PzaUeuU7jseD85AVn0M4hJAHSn73KEKFmUWBZFQpJmVluBHZewM WRKzA9q3lvsM/AsThDPIPFY+29oOC0xCga8XE0jF8Tg6mvqcpVbKSJGpZsV4oE+w VcH8rVGlbv5iJDVmT2S+CmSNmK0WKAir+7XCMEgSjT2jYIZZHl98f4jIhgTySmOS 4qH0/UFgWVImkcb/psOV/mQcGXTEs853cTr/Kq78oL1eyo9hWmVBprI9w/iSB3c9 fbVjjGU2JjRDXC/iRYIt+dlId3pyUQqc/2BDvTxv6NtXiwCmz1+0TZVo0eBSk9Rr vYPN/pIXUIQMTeKDHg== -----END CERTIFICATE-----Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org