$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51089.roa File: AS51089.roa (raw, json) Hash identifier: oqRHNTgKr2HygFydWQ+HnVaisS6ZYdj1EFOMnueyQeU= Subject key identifier: CE:48:D2:9A:74:32:F5:29:CA:39:29:2B:61:3C:F8:5D:47:1D:9A:A3 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0FAC73BF4EC060FE0C14503B803EF42BC4D3900D Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51089.roa Signing time: Thu 18 Jul 2024 07:10:08 +0000 ROA not before: Thu 18 Jul 2024 07:05:08 +0000 ROA not after: Thu 17 Jul 2025 07:10:08 +0000 asID: 51089 IP address blocks: 2a06:9f81:5700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ac:73:bf:4e:c0:60:fe:0c:14:50:3b:80:3e:f4:2b:c4:d3:90:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jul 18 07:05:08 2024 GMT Not After : Jul 17 07:10:08 2025 GMT Subject: CN=CE48D29A7432F529CA39292B613CF85D471D9AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:24:ee:3b:c1:42:10:7f:86:1d:aa:f2:50: e1:d1:9f:82:aa:4a:20:bb:2d:3a:5b:6d:d1:ab:c3: 1f:39:31:0f:22:6c:64:7a:ea:b2:27:97:18:70:4f: 1a:ef:2d:4d:35:dd:b4:c3:99:21:56:fa:44:72:fa: 4a:e7:7c:39:21:cf:13:0b:11:dc:4e:e1:02:67:e8: 5d:47:fc:a7:e3:a0:75:58:48:25:10:a3:31:1c:72: af:f0:c4:cb:95:93:82:eb:77:07:5b:e3:04:b4:96: 3d:94:c4:28:33:6f:42:c2:b8:2e:28:c6:04:3d:73: 44:0c:be:83:94:46:ba:de:24:6e:c2:e2:c7:5d:93: ac:ad:99:a0:2d:69:db:60:ef:52:68:2c:1b:34:59: 01:be:95:19:4c:d6:50:c0:bf:48:17:69:e3:44:75: ec:43:3a:79:2f:2e:b2:2c:27:df:5b:8f:b0:7c:84: dd:d0:4e:bd:16:51:48:a0:d5:b6:94:52:2b:c8:ed: 6a:56:e9:a2:1c:71:23:b5:95:3f:0a:c8:64:b8:08: 52:d0:6d:7b:50:ca:59:62:1a:17:d2:3b:fc:16:75: a0:a8:18:da:26:07:27:db:58:94:3b:2c:dd:37:6f: 85:5d:00:76:cc:f0:18:00:92:60:65:47:cc:5a:bd: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:D2:9A:74:32:F5:29:CA:39:29:2B:61:3C:F8:5D:47:1D:9A:A3 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51089.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5700::/40 Signature Algorithm: sha256WithRSAEncryption b1:2d:6c:77:05:b5:22:d0:47:08:7c:c1:37:b4:12:e7:43:5d: fd:86:15:20:fe:c9:21:e7:e7:66:e5:a5:54:df:3c:58:27:7d: da:82:5b:3b:28:00:6d:da:10:88:2a:0b:37:17:e5:83:19:bc: c0:4e:bc:d3:86:69:23:6e:d1:0b:6d:19:37:fb:45:1d:06:af: eb:39:ce:4f:f8:69:a8:93:38:5b:3c:e8:33:48:33:f5:18:aa: 46:7a:27:3b:52:eb:12:c3:80:73:f2:df:0b:f5:88:71:0a:63: 7e:23:e1:cb:b8:95:89:a4:78:d6:ae:9f:b2:68:56:da:d5:03: ac:ae:7c:56:11:da:79:7f:06:2c:8e:ea:fb:24:05:6c:71:55: 54:71:fd:d5:b9:f5:4e:d8:2b:43:ed:18:54:64:b1:76:32:82: b7:a8:cd:d5:e8:10:2c:f7:86:32:54:de:a4:f7:e5:be:f7:a6: 59:03:20:f7:74:6f:f7:68:d3:44:e9:9d:e1:29:60:a1:66:30: 6a:0b:8f:66:30:d5:79:e7:23:e5:fc:8c:8e:6b:56:02:51:63: 49:ec:7b:1f:e7:e9:71:f2:03:13:54:92:52:e8:a7:c2:b7:22: c1:cf:67:51:28:59:fc:6c:14:b7:a5:c6:24:1f:e2:41:9e:46: 66:42:9c:ad -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUD6xzv07AYP4MFFA7gD70K8TTkA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA3MTgwNzA1MDhaFw0yNTA3MTcwNzEwMDhaMDMxMTAvBgNV BAMTKENFNDhEMjlBNzQzMkY1MjlDQTM5MjkyQjYxM0NGODVENDcxRDlBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0CTuO8FCEH+GHaryUOHRn4Kq SiC7LTpbbdGrwx85MQ8ibGR66rInlxhwTxrvLU013bTDmSFW+kRy+krnfDkhzxML EdxO4QJn6F1H/KfjoHVYSCUQozEccq/wxMuVk4Lrdwdb4wS0lj2UxCgzb0LCuC4o xgQ9c0QMvoOURrreJG7C4sddk6ytmaAtadtg71JoLBs0WQG+lRlM1lDAv0gXaeNE dexDOnkvLrIsJ99bj7B8hN3QTr0WUUig1baUUivI7WpW6aIccSO1lT8KyGS4CFLQ bXtQylliGhfSO/wWdaCoGNomByfbWJQ7LN03b4VdAHbM8BgAkmBlR8xavSvdAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUzkjSmnQy9SnKOSkrYTz4XUcdmqMwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTEwODkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BVzANBgkqhkiG9w0BAQsFAAOCAQEAsS1s dwW1ItBHCHzBN7QS50Nd/YYVIP7JIefnZuWlVN88WCd92oJbOygAbdoQiCoLNxfl gxm8wE6804ZpI27RC20ZN/tFHQav6znOT/hpqJM4WzzoM0gz9RiqRnonO1LrEsOA c/LfC/WIcQpjfiPhy7iViaR41q6fsmhW2tUDrK58VhHaeX8GLI7q+yQFbHFVVHH9 1bn1TtgrQ+0YVGSxdjKCt6jN1egQLPeGMlTepPflvvemWQMg93Rv92jTROmd4Slg oWYwaguPZjDVeecj5fyMjmtWAlFjSex7H+fpcfIDE1SSUuinwrciwc9nUShZ/GwU t6XGJB/iQZ5GZkKcrQ== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org