$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60391.roa File: AS60391.roa (raw, json) Hash identifier: ZJHwjFwAJ23oQbMYPl36eebpkU+RXQmbDLHmtyCMdNc= Subject key identifier: EB:94:CB:AE:A9:BE:E7:45:C2:C6:13:42:2B:A4:B3:71:DC:C8:86:A1 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0C5FDEFC8C8B4B56818954D2444C4B002C5E40BF Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60391.roa Signing time: Sun 05 Nov 2023 04:07:12 +0000 ROA not before: Sun 05 Nov 2023 04:02:12 +0000 ROA not after: Sun 03 Nov 2024 04:07:12 +0000 asID: 60391 IP address blocks: 2a0a:6040:9e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5f:de:fc:8c:8b:4b:56:81:89:54:d2:44:4c:4b:00:2c:5e:40:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 5 04:02:12 2023 GMT Not After : Nov 3 04:07:12 2024 GMT Subject: CN=EB94CBAEA9BEE745C2C613422BA4B371DCC886A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:73:f1:44:b8:f1:df:ee:58:7c:ba:d2:dc: 4c:7e:e0:03:ee:82:d4:cf:38:9a:42:1f:ec:a0:21: 33:b5:c1:57:f2:cf:06:f0:63:3f:6e:7b:3e:9d:91: c0:30:2b:b8:ef:d1:c6:40:cd:ea:a2:a9:08:33:55: d9:ab:65:f4:ad:25:68:e6:f8:87:19:82:ea:d9:d2: 5f:33:31:1e:de:4d:0b:45:0f:0f:d8:dc:51:45:83: 8c:df:71:ce:7b:ba:44:01:e8:f9:d8:30:00:d8:bf: 24:4e:7d:7b:d5:b4:b6:06:17:08:e0:c1:2a:34:9c: ee:99:cf:4e:48:53:f7:80:da:e1:00:30:9b:9f:38: 38:6e:a3:a9:aa:65:05:40:39:22:cb:a8:7a:79:fa: ce:fc:74:54:7d:c2:88:ad:f6:dd:a5:78:5f:bf:6f: b9:cd:f9:ef:40:a4:0d:8d:25:50:90:98:27:1c:83: 16:22:18:ce:94:3b:4c:fd:11:4a:25:94:35:c8:5a: 84:04:3f:14:8a:eb:02:30:54:90:a8:bf:30:e8:98: da:05:a0:a1:f6:d8:3d:df:52:9d:b5:c6:33:dd:e5: a4:7a:81:43:f6:3d:f9:a9:1c:44:ad:4f:2d:0f:da: 66:ff:97:c1:06:5e:d1:51:5a:2e:0d:da:77:4d:45: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:94:CB:AE:A9:BE:E7:45:C2:C6:13:42:2B:A4:B3:71:DC:C8:86:A1 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS60391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:9e00::/40 Signature Algorithm: sha256WithRSAEncryption 2a:b5:bc:66:17:2b:b7:fe:a1:a2:54:51:0f:f4:fa:fc:7d:5b: f8:11:6b:47:2e:53:98:fa:64:77:2b:ad:27:2b:e6:3a:9f:20: 37:0b:a8:49:df:c6:74:3b:ba:1f:45:bb:3e:e6:5d:c1:83:27: 96:f6:bb:51:cd:bc:7d:43:e9:af:02:c0:fd:8f:34:c4:73:2b: 89:81:c3:80:8f:1a:80:50:3e:5e:4d:36:0c:fc:8f:28:6a:ac: 9d:bf:39:fa:b5:6c:0a:58:36:f8:bb:f7:f7:c3:31:f3:9d:08: b2:bd:26:5f:b7:ec:6f:01:1d:9d:ed:e0:30:f9:57:24:dc:89: d2:94:cb:7f:3b:e2:4b:e7:68:ea:7d:af:17:23:15:8c:56:de: ea:fa:20:33:c4:90:82:be:a4:0a:43:d7:3d:ef:73:bd:a1:4d: ca:41:a5:34:dc:36:4b:fa:2c:5b:ee:a0:0a:df:f9:d0:af:64: 80:51:74:68:37:af:b2:5b:f4:b8:a2:1f:ba:b7:64:1f:91:02: 0a:76:14:6a:8a:04:d0:b4:6b:8d:a2:54:dc:ef:b5:55:bb:0a: 91:40:db:3a:c9:a6:1b:c7:c0:f0:a4:8b:82:21:4f:94:b6:72: e4:3d:44:74:cc:28:d6:1d:a4:1e:6b:5d:8b:05:95:f5:13:94: b4:f2:f6:6d -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUDF/e/IyLS1aBiVTSRExLACxeQL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMDUwNDAyMTJaFw0yNDExMDMwNDA3MTJaMDMxMTAvBgNV BAMTKEVCOTRDQkFFQTlCRUU3NDVDMkM2MTM0MjJCQTRCMzcxRENDODg2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZnPxRLjx3+5YfLrS3Ex+4APu gtTPOJpCH+ygITO1wVfyzwbwYz9uez6dkcAwK7jv0cZAzeqiqQgzVdmrZfStJWjm +IcZgurZ0l8zMR7eTQtFDw/Y3FFFg4zfcc57ukQB6PnYMADYvyROfXvVtLYGFwjg wSo0nO6Zz05IU/eA2uEAMJufODhuo6mqZQVAOSLLqHp5+s78dFR9woit9t2leF+/ b7nN+e9ApA2NJVCQmCccgxYiGM6UO0z9EUollDXIWoQEPxSK6wIwVJCovzDomNoF oKH22D3fUp21xjPd5aR6gUP2PfmpHEStTy0P2mb/l8EGXtFRWi4N2ndNRaOFAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQU65TLrqm+50XCxhNCK6SzcdzIhqEwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNjAzOTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqCmBAnjANBgkqhkiG9w0BAQsFAAOCAQEAKrW8 Zhcrt/6holRRD/T6/H1b+BFrRy5TmPpkdyutJyvmOp8gNwuoSd/GdDu6H0W7PuZd wYMnlva7Uc28fUPprwLA/Y80xHMriYHDgI8agFA+Xk02DPyPKGqsnb85+rVsClg2 +Lv398Mx850Isr0mX7fsbwEdne3gMPlXJNyJ0pTLfzviS+do6n2vFyMVjFbe6vog M8SQgr6kCkPXPe9zvaFNykGlNNw2S/osW+6gCt/50K9kgFF0aDevslv0uKIfurdk H5ECCnYUaooE0LRrjaJU3O+1VbsKkUDbOsmmG8fA8KSLgiFPlLZy5D1EdMwo1h2k HmtdiwWV9ROUtPL2bQ== -----END CERTIFICATE-----Generated at Fri May 17 13:11:28 2024 by rpki-client on console-ams.rpki-client.org