$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57974.roa File: AS57974.roa (raw, json) Hash identifier: gyUfneI8USIqbKna2uQa6T3l4cc0rTC7GO23zZPtFqE= Subject key identifier: 60:53:54:BC:12:21:3B:C7:31:C2:BE:54:B9:FF:19:32:C2:1D:58:BF Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 5D9B8A25369FB1050307160E5A22569C1E413449 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57974.roa Signing time: Sun 05 Nov 2023 04:07:19 +0000 ROA not before: Sun 05 Nov 2023 04:02:19 +0000 ROA not after: Sun 03 Nov 2024 04:07:19 +0000 asID: 57974 IP address blocks: 2a0a:6040:6f00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9b:8a:25:36:9f:b1:05:03:07:16:0e:5a:22:56:9c:1e:41:34:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:19 2023 GMT Not After : Nov 3 04:07:19 2024 GMT Subject: CN=605354BC12213BC731C2BE54B9FF1932C21D58BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:74:29:a0:7e:ec:9f:51:56:92:e7:3a:6b: 41:6f:e2:bf:0e:63:de:92:ab:06:88:6c:75:3f:4d: 67:b0:46:58:ec:11:d8:dc:63:5d:e7:65:29:8d:90: 00:a7:ab:9a:9f:a7:f7:10:15:69:f9:3d:e6:c1:67: d4:f5:bb:18:0c:bf:4b:52:e0:2f:28:3a:b7:1d:2e: 9d:2d:75:4b:87:a2:3a:3e:90:da:a8:bd:e2:5b:99: 91:e8:95:74:b4:2b:b2:45:89:9b:00:14:e8:cc:45: 8f:19:1b:a3:8b:f0:16:ba:d2:7b:f2:3f:16:7c:05: 37:e5:85:da:3d:cb:bf:c7:56:4e:9c:5e:29:2e:b2: 05:62:db:be:47:21:c6:8a:7f:43:4d:e1:24:1d:f7: 17:a3:15:d6:50:20:26:5b:14:2c:bc:dc:31:63:4f: 46:9d:78:74:03:f9:01:80:8d:dc:95:dd:6b:99:f0: 7e:23:24:bb:6c:8d:91:30:b6:ba:95:47:99:56:a9: 57:26:41:9f:ab:a1:dc:83:17:9e:38:8c:1a:21:d9: 88:08:73:db:a1:3f:b9:d0:79:63:8a:9f:37:33:0e: d7:11:96:5d:e3:66:4a:ec:bb:9c:0a:21:0a:f4:31: d8:b1:9c:e8:40:c5:5a:22:da:14:5c:a5:a6:f8:bd: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:53:54:BC:12:21:3B:C7:31:C2:BE:54:B9:FF:19:32:C2:1D:58:BF X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS57974.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:6f00::/40 Signature Algorithm: sha256WithRSAEncryption 8e:a0:d0:8d:d2:48:1d:a5:38:c0:ec:2a:ef:59:5b:dc:b7:3e: 98:cb:4d:6c:db:70:c5:cd:de:93:79:7e:97:96:9f:17:22:a6: 55:ea:13:00:bd:27:59:03:b7:09:db:56:62:a2:7c:a2:e7:02: a1:a4:b5:67:91:40:88:35:ae:94:3e:80:3f:96:75:e8:49:03: 50:ea:69:67:e8:35:04:af:00:f7:28:d5:15:1d:bf:5e:2f:48: 8b:f6:1e:e5:4a:45:8c:d6:95:32:46:4e:9f:23:12:d4:df:8b: 1e:51:5a:15:e8:a5:a1:5a:c9:7b:d7:30:ec:60:24:4c:70:f4: 1a:99:58:b5:be:06:cf:ca:41:40:29:1e:54:17:4d:3d:99:9d: 48:d4:b5:86:37:4d:5f:a0:7a:de:02:e9:07:90:66:4a:46:41: a0:c0:53:06:64:7b:fc:2e:c7:dd:e3:57:bc:61:6c:a8:b0:1f: 55:b7:9c:c0:23:c5:64:0c:94:08:36:59:c0:7b:da:41:57:13: 36:a7:e4:d6:8f:e3:3c:08:8f:4b:f7:60:a0:82:8d:6f:26:cc: 0b:fb:e6:51:b8:a9:0d:fe:bb:f8:ce:1d:74:48:0b:31:2b:84: 5e:c4:dc:e1:e9:1a:a1:b6:06:98:5c:bc:fa:56:11:c9:f9:d2: 6e:4a:b4:6f -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUXZuKJTafsQUDBxYOWiJWnB5BNEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTlaFw0yNDExMDMwNDA3MTlaMDMxMTAvBgNV BAMTKDYwNTM1NEJDMTIyMTNCQzczMUMyQkU1NEI5RkYxOTMyQzIxRDU4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5E3QpoH7sn1FWkuc6a0Fv4r8O Y96SqwaIbHU/TWewRljsEdjcY13nZSmNkACnq5qfp/cQFWn5PebBZ9T1uxgMv0tS 4C8oOrcdLp0tdUuHojo+kNqoveJbmZHolXS0K7JFiZsAFOjMRY8ZG6OL8Ba60nvy PxZ8BTflhdo9y7/HVk6cXikusgVi275HIcaKf0NN4SQd9xejFdZQICZbFCy83DFj T0adeHQD+QGAjdyV3WuZ8H4jJLtsjZEwtrqVR5lWqVcmQZ+rodyDF544jBoh2YgI c9uhP7nQeWOKnzczDtcRll3jZkrsu5wKIQr0MdixnOhAxVoi2hRcpab4vcCDAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUYFNUvBIhO8cxwr5Uuf8ZMsIdWL8wHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTc5NzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAbzANBgkqhkiG9w0BAQsFAAOCAQEAjqDQ jdJIHaU4wOwq71lb3Lc+mMtNbNtwxc3ek3l+l5afFyKmVeoTAL0nWQO3CdtWYqJ8 oucCoaS1Z5FAiDWulD6AP5Z16EkDUOppZ+g1BK8A9yjVFR2/Xi9Ii/Ye5UpFjNaV MkZOnyMS1N+LHlFaFeiloVrJe9cw7GAkTHD0GplYtb4Gz8pBQCkeVBdNPZmdSNS1 hjdNX6B63gLpB5BmSkZBoMBTBmR7/C7H3eNXvGFsqLAfVbecwCPFZAyUCDZZwHva QVcTNqfk1o/jPAiPS/dgoIKNbybMC/vmUbipDf67+M4ddEgLMSuEXsTc4ekaobYG mFy8+lYRyfnSbkq0bw== -----END CERTIFICATE-----Generated at Fri May 17 13:11:27 2024 by rpki-client on console-ams.rpki-client.org