$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49548.roa File: AS49548.roa (raw, json) Hash identifier: t2626gblxULwRmgHaSVXPpXCN8nxX+iJn6VBe5w/KCw= Subject key identifier: 96:DE:5F:32:53:DF:7C:63:E8:49:C0:8F:1A:C0:5B:D5:53:C1:D4:C0 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 291E43DA595A12131CE53218738319B9E7EB549E Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49548.roa Signing time: Sun 06 Oct 2024 04:45:08 +0000 ROA not before: Sun 06 Oct 2024 04:40:08 +0000 ROA not after: Sun 05 Oct 2025 04:45:08 +0000 asID: 49548 IP address blocks: 2a0a:6040:df00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1e:43:da:59:5a:12:13:1c:e5:32:18:73:83:19:b9:e7:eb:54:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:08 2024 GMT Not After : Oct 5 04:45:08 2025 GMT Subject: CN=96DE5F3253DF7C63E849C08F1AC05BD553C1D4C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:45:78:e2:dc:cb:12:65:a5:55:13:30:56: fb:c6:f0:62:29:fb:0e:75:93:22:12:92:13:0a:a0: bb:a5:ac:ae:f5:82:d5:70:67:2e:e5:f2:8a:bb:fb: 7c:29:0f:cf:1c:a6:bb:bf:ba:d8:c5:f6:33:d2:04: 23:c7:cf:77:0c:7e:7e:11:32:ed:83:dd:2c:b2:cc: 34:fa:46:35:0f:89:9b:9c:fa:32:9f:a3:98:f7:e9: 13:53:1b:f0:23:54:0c:c9:7e:83:ae:b6:13:51:02: 7f:02:a4:9e:8f:d5:98:f7:b8:ac:99:12:fe:63:3c: 02:84:f2:51:7f:ba:34:e7:fe:57:f7:e9:06:0b:c6: 8f:8a:8b:cd:56:5b:ee:84:84:47:44:ad:3a:0d:88: ef:a1:7c:0f:41:e9:bc:72:cd:a2:f1:b6:97:1a:bd: 47:09:14:b7:ba:b5:23:01:6b:ae:f2:6a:4d:c7:ea: fb:bd:a2:ee:c0:53:f3:b4:19:ba:68:3b:bf:2b:32: 53:ae:40:9b:b5:a2:45:be:7f:5b:46:c1:8e:d3:2b: e1:da:3f:b1:34:9f:85:95:60:60:58:0a:f3:40:2a: af:4f:e3:9c:e3:dc:2c:40:a0:a4:e8:99:5e:87:45: f3:7f:d4:5d:22:1b:8f:4d:b8:bd:30:58:e1:52:2e: 6f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DE:5F:32:53:DF:7C:63:E8:49:C0:8F:1A:C0:5B:D5:53:C1:D4:C0 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS49548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:df00::/40 Signature Algorithm: sha256WithRSAEncryption c4:b6:d4:c0:3b:c7:89:bd:af:ee:b3:be:84:ac:ca:32:8b:07: 60:e6:7d:20:b9:18:50:86:50:34:83:92:b6:0a:61:65:f1:e4: ef:48:0f:9c:bf:60:48:91:48:86:8e:af:c1:4e:12:df:34:58: 9c:15:a3:e1:ae:e0:17:72:2b:6b:c1:c8:be:83:e6:07:38:9f: da:a6:64:5f:58:ec:d8:d1:bb:30:80:70:3d:fc:8d:9c:00:9c: 86:10:de:80:fd:c5:7c:2f:82:12:26:c1:2b:ee:58:7e:be:da: d7:2b:44:11:cd:50:e9:58:5f:57:1d:d8:8f:0f:5f:04:49:7a: 8b:22:b9:ea:3e:24:74:c5:a9:ea:15:4a:cc:d9:3a:e4:98:48: 4f:ab:60:59:c7:ac:fa:55:9d:1c:d4:7b:68:e3:a1:e3:84:89: 52:9c:30:9b:86:6a:16:f7:f8:13:e4:6a:c9:fa:75:e0:10:f8: 19:c9:59:c9:64:fb:99:0e:75:7b:54:03:b7:2e:50:eb:d8:0a: b3:ed:93:05:de:15:5d:d2:a6:76:26:03:d9:6d:7e:7f:04:56: 8a:78:36:03:26:49:63:81:cb:c1:81:9f:4e:44:66:9f:72:14: b5:56:11:a3:94:37:61:31:1b:1b:f2:05:e8:92:b4:3d:6c:ad: fc:25:a6:3a -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUKR5D2llaEhMc5TIYc4MZuefrVJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMDhaFw0yNTEwMDUwNDQ1MDhaMDMxMTAvBgNV BAMTKDk2REU1RjMyNTNERjdDNjNFODQ5QzA4RjFBQzA1QkQ1NTNDMUQ0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCemUV44tzLEmWlVRMwVvvG8GIp +w51kyISkhMKoLulrK71gtVwZy7l8oq7+3wpD88cpru/utjF9jPSBCPHz3cMfn4R Mu2D3SyyzDT6RjUPiZuc+jKfo5j36RNTG/AjVAzJfoOuthNRAn8CpJ6P1Zj3uKyZ Ev5jPAKE8lF/ujTn/lf36QYLxo+Ki81WW+6EhEdErToNiO+hfA9B6bxyzaLxtpca vUcJFLe6tSMBa67yak3H6vu9ou7AU/O0GbpoO78rMlOuQJu1okW+f1tGwY7TK+Ha P7E0n4WVYGBYCvNAKq9P45zj3CxAoKTomV6HRfN/1F0iG49NuL0wWOFSLm+jAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUlt5fMlPffGPoScCPGsBb1VPB1MAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNDk1NDgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBA3zANBgkqhkiG9w0BAQsFAAOCAQEAxLbU wDvHib2v7rO+hKzKMosHYOZ9ILkYUIZQNIOStgphZfHk70gPnL9gSJFIho6vwU4S 3zRYnBWj4a7gF3Ira8HIvoPmBzif2qZkX1js2NG7MIBwPfyNnACchhDegP3FfC+C EibBK+5Yfr7a1ytEEc1Q6VhfVx3Yjw9fBEl6iyK56j4kdMWp6hVKzNk65JhIT6tg Wces+lWdHNR7aOOh44SJUpwwm4ZqFvf4E+Rqyfp14BD4GclZyWT7mQ51e1QDty5Q 69gKs+2TBd4VXdKmdiYD2W1+fwRWing2AyZJY4HLwYGfTkRmn3IUtVYRo5Q3YTEb G/IF6JK0PWyt/CWmOg== -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org