$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57974.roa File: AS57974.roa (raw, json) Hash identifier: RjiyM8OKHrBwktMAlSTvZB2nmkIoOv1DNMDrPa9se+g= Subject key identifier: 27:3F:52:FE:EA:5F:5F:C6:A7:F4:45:CE:09:27:19:D1:AF:E5:B1:07 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 7B4932B9A98058795EC08036246788A63FA0BB55 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57974.roa Signing time: Sun 06 Oct 2024 04:44:55 +0000 ROA not before: Sun 06 Oct 2024 04:39:55 +0000 ROA not after: Sun 05 Oct 2025 04:44:55 +0000 asID: 57974 IP address blocks: 2a0a:6040:6f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:49:32:b9:a9:80:58:79:5e:c0:80:36:24:67:88:a6:3f:a0:bb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:39:55 2024 GMT Not After : Oct 5 04:44:55 2025 GMT Subject: CN=273F52FEEA5F5FC6A7F445CE092719D1AFE5B107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:a6:7d:0a:81:80:72:fc:f1:98:17:6b:02: 0d:90:55:b6:7d:7d:d6:83:f2:a2:7f:ff:84:0a:cf: 31:aa:fb:48:ec:a8:ef:71:86:24:d6:06:17:48:7f: ad:ba:66:e2:33:82:7b:19:20:30:34:11:1a:e4:ef: 42:1d:e8:0a:eb:e8:14:02:8e:75:65:f3:91:d2:a3: d6:c5:05:00:1a:6d:5a:e4:d8:a6:83:c2:9f:39:63: 5f:89:27:c6:27:8d:31:df:16:82:57:5c:ba:58:28: a1:0d:43:05:76:ad:8a:be:74:d0:89:75:c1:3a:0b: 31:92:08:7c:a8:56:ad:dd:0c:7e:bb:32:81:9e:38: d5:d9:27:6a:cf:07:9d:c0:a4:4d:88:e3:a4:68:bb: 9e:39:0e:c0:56:2a:60:d6:fe:d9:24:6e:e0:6c:6e: 32:b0:de:fc:05:c7:bc:b6:92:0d:ac:29:a8:8c:98: 6b:cd:04:25:1b:62:f3:ed:7c:cd:3a:52:78:3a:36: 91:bc:ef:88:cc:38:ff:2a:1a:59:74:0b:47:5d:65: 79:21:ef:70:cf:fa:00:ff:be:56:e2:ad:8b:19:9c: 5f:98:f7:b7:d3:8b:3e:dc:ec:bf:22:1c:de:ef:07: e4:4e:75:f2:fa:44:3c:6d:3a:31:9b:58:2e:cb:6b: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3F:52:FE:EA:5F:5F:C6:A7:F4:45:CE:09:27:19:D1:AF:E5:B1:07 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57974.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6f00::/40 Signature Algorithm: sha256WithRSAEncryption be:64:26:ba:1c:9c:b7:cd:29:6a:15:2e:d3:ac:f1:d3:20:2b: d1:09:68:f1:4c:d1:fe:9c:98:a4:49:57:7e:f2:03:5e:37:1c: 67:08:90:7e:6f:85:b3:5d:ac:8e:e6:d4:cd:34:c7:79:24:ab: 60:93:71:14:fe:53:54:b9:30:96:e3:e9:80:e2:4f:5c:2c:21: ba:1e:62:3b:1c:f7:9a:95:cb:c3:60:0e:66:81:41:84:cf:d6: 9e:ec:ec:45:2d:22:e8:d8:09:32:30:5d:f4:ae:8b:28:86:64: 56:b2:5d:e6:e5:4a:d0:20:dc:45:b3:cb:2c:92:7d:14:4a:89: 90:f6:2d:e6:21:c1:3e:f6:4e:81:ae:14:5d:28:5a:56:80:16: 36:52:9d:97:da:e5:9e:02:36:b5:21:d6:27:06:45:9f:74:33: d7:23:65:0a:0b:9d:e7:36:93:b6:06:3e:11:cf:8f:9b:74:75: cb:2f:78:73:c1:cb:e2:88:21:16:7c:9f:c6:b7:b2:1e:5d:ba: 8f:59:87:a3:31:9b:ec:37:c9:0e:22:56:bb:3c:fa:0c:a0:bb: 91:8a:62:45:46:49:33:41:14:3b:8e:79:b1:1b:16:cf:4a:21: a7:6c:ef:1a:76:5b:24:9e:24:63:05:b6:e5:16:a8:c2:bc:d5: ea:6c:68:57 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUe0kyuamAWHlewIA2JGeIpj+gu1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDM5NTVaFw0yNTEwMDUwNDQ0NTVaMDMxMTAvBgNV BAMTKDI3M0Y1MkZFRUE1RjVGQzZBN0Y0NDVDRTA5MjcxOUQxQUZFNUIxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+36Z9CoGAcvzxmBdrAg2QVbZ9 fdaD8qJ//4QKzzGq+0jsqO9xhiTWBhdIf626ZuIzgnsZIDA0ERrk70Id6Arr6BQC jnVl85HSo9bFBQAabVrk2KaDwp85Y1+JJ8YnjTHfFoJXXLpYKKENQwV2rYq+dNCJ dcE6CzGSCHyoVq3dDH67MoGeONXZJ2rPB53ApE2I46Rou545DsBWKmDW/tkkbuBs bjKw3vwFx7y2kg2sKaiMmGvNBCUbYvPtfM06Ung6NpG874jMOP8qGll0C0ddZXkh 73DP+gD/vlbirYsZnF+Y97fTiz7c7L8iHN7vB+ROdfL6RDxtOjGbWC7La319AgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUJz9S/upfX8an9EXOCScZ0a/lsQcwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTc5NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAbzANBgkqhkiG9w0BAQsFAAOCAQEAvmQm uhyct80pahUu06zx0yAr0Qlo8UzR/pyYpElXfvIDXjccZwiQfm+Fs12sjubUzTTH eSSrYJNxFP5TVLkwluPpgOJPXCwhuh5iOxz3mpXLw2AOZoFBhM/WnuzsRS0i6NgJ MjBd9K6LKIZkVrJd5uVK0CDcRbPLLJJ9FEqJkPYt5iHBPvZOga4UXShaVoAWNlKd l9rlngI2tSHWJwZFn3Qz1yNlCgud5zaTtgY+Ec+Pm3R1yy94c8HL4oghFnyfxrey Hl26j1mHozGb7DfJDiJWuzz6DKC7kYpiRUZJM0EUO455sRsWz0ohp2zvGnZbJJ4k YwW25RaowrzV6mxoVw== -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org