$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57308.roa File: AS57308.roa (raw, json) Hash identifier: 1TBzMm8HyjT6c3aiRM6E1wQWbFbWZOHt2zscKBIt4Nk= Subject key identifier: AF:C3:A2:C6:F8:E9:54:73:18:48:5D:4F:13:BF:5D:C0:5D:D7:FB:7D Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0B0A4A4C6412E2D51B48BA76715F3D7CD8C20AEB Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57308.roa Signing time: Fri 31 May 2024 07:59:47 +0000 ROA not before: Fri 31 May 2024 07:54:47 +0000 ROA not after: Fri 30 May 2025 07:59:47 +0000 asID: 57308 IP address blocks: 2a05:dfc1:4e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0a:4a:4c:64:12:e2:d5:1b:48:ba:76:71:5f:3d:7c:d8:c2:0a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 31 07:54:47 2024 GMT Not After : May 30 07:59:47 2025 GMT Subject: CN=AFC3A2C6F8E9547318485D4F13BF5DC05DD7FB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:d2:6d:0d:ad:be:3a:9b:ea:79:03:46:6b: 80:3a:ae:a1:f0:c9:69:49:2b:40:2f:6a:f1:f2:85: 32:4b:f6:38:ef:af:d3:ae:e5:17:ed:7e:0c:54:f1: b3:15:68:d8:43:93:42:7d:cb:dd:d3:e6:e2:b8:9e: 1d:bf:fb:11:7d:7a:f6:41:55:17:9f:70:bc:40:be: c7:d0:5e:1f:26:f4:d0:2e:cd:e1:f7:9d:18:d4:3a: f7:5a:a8:7d:68:c7:60:82:1f:1e:66:29:ba:53:1f: 1f:38:79:8e:1c:47:28:11:5c:27:3d:17:89:8c:e6: f7:f6:af:ba:5f:44:37:22:af:17:88:78:53:00:ad: 72:27:20:c3:fa:38:31:ee:db:b7:0b:c2:5d:09:ef: 5b:3e:13:2f:ea:94:cf:b9:d7:7f:85:62:7a:02:51: a3:3f:ea:8b:93:97:a0:28:1f:d3:e8:88:7f:18:21: 49:22:27:bf:55:21:2c:ee:d6:9f:16:33:4b:57:bc: f4:10:5c:8a:92:ec:08:a3:cf:3e:c8:fc:4b:ce:cc: a8:54:b1:f4:82:b3:d5:6d:de:44:9f:9f:a4:b5:ce: 41:7e:dd:06:23:e5:2c:5f:d8:74:0d:e3:16:e5:f9: 38:7d:1b:0b:3e:d8:f4:ea:f7:c8:27:0d:f9:c4:b4: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C3:A2:C6:F8:E9:54:73:18:48:5D:4F:13:BF:5D:C0:5D:D7:FB:7D X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57308.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:4e00::/40 Signature Algorithm: sha256WithRSAEncryption ae:54:0d:b0:d2:22:15:54:e4:d1:00:18:b7:1f:0c:cd:1d:33: 8c:90:93:80:ed:dc:9f:1d:de:78:f1:c0:ec:0f:8c:bd:17:c6: 66:ef:d5:f4:32:fe:86:c2:3c:49:83:7c:32:56:54:02:7d:40: 88:ba:03:55:58:76:c9:7f:39:5b:92:f6:ff:a5:d6:b8:5e:55: 98:c1:28:95:3b:68:bb:08:db:76:5c:43:4a:23:22:d7:4c:37: 16:0f:df:8d:69:73:65:f3:1d:0b:d3:af:b9:96:0c:ae:8c:84: a8:f1:97:24:6e:85:9b:70:47:23:07:eb:64:53:98:56:3f:96: dd:a5:35:35:3e:9d:4a:c4:bd:37:03:c6:53:fe:af:fb:67:e7: 1f:cb:99:ef:f0:d9:c0:f2:ef:75:eb:5e:bf:2d:b1:55:e5:b5: f9:79:1d:b8:2c:ef:9a:56:9a:8e:99:2f:7b:76:4b:5b:72:e9: 9b:d7:c6:ea:0d:8e:63:16:59:12:93:e9:52:9b:5d:85:1d:29: 84:ca:06:3a:b5:49:5c:04:7c:c4:fb:dd:53:02:c0:1f:18:18: 8a:3e:6f:38:ca:fa:0c:d0:80:c5:52:7a:56:e2:6a:51:d4:e4: a0:42:df:88:6b:78:37:e2:de:76:dd:8c:6b:d5:23:ab:44:47: 6b:18:d3:14 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUCwpKTGQS4tUbSLp2cV89fNjCCuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MzEwNzU0NDdaFw0yNTA1MzAwNzU5NDdaMDMxMTAvBgNV BAMTKEFGQzNBMkM2RjhFOTU0NzMxODQ4NUQ0RjEzQkY1REMwNUREN0ZCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVB9JtDa2+OpvqeQNGa4A6rqHw yWlJK0AvavHyhTJL9jjvr9Ou5RftfgxU8bMVaNhDk0J9y93T5uK4nh2/+xF9evZB VRefcLxAvsfQXh8m9NAuzeH3nRjUOvdaqH1ox2CCHx5mKbpTHx84eY4cRygRXCc9 F4mM5vf2r7pfRDcirxeIeFMArXInIMP6ODHu27cLwl0J71s+Ey/qlM+513+FYnoC UaM/6ouTl6AoH9PoiH8YIUkiJ79VISzu1p8WM0tXvPQQXIqS7Aijzz7I/EvOzKhU sfSCs9Vt3kSfn6S1zkF+3QYj5Sxf2HQN4xbl+Th9Gws+2PTq98gnDfnEtHTPAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUr8OixvjpVHMYSF1PE79dwF3X+30wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTczMDgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BTjANBgkqhkiG9w0BAQsFAAOCAQEArlQN sNIiFVTk0QAYtx8MzR0zjJCTgO3cnx3eePHA7A+MvRfGZu/V9DL+hsI8SYN8MlZU An1AiLoDVVh2yX85W5L2/6XWuF5VmMEolTtouwjbdlxDSiMi10w3Fg/fjWlzZfMd C9OvuZYMroyEqPGXJG6Fm3BHIwfrZFOYVj+W3aU1NT6dSsS9NwPGU/6v+2fnH8uZ 7/DZwPLvdetevy2xVeW1+XkduCzvmlaajpkve3ZLW3Lpm9fG6g2OYxZZEpPpUptd hR0phMoGOrVJXAR8xPvdUwLAHxgYij5vOMr6DNCAxVJ6VuJqUdTkoELfiGt4N+Le dt2Ma9Ujq0RHaxjTFA== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org