$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61350.roa File: AS61350.roa (raw, json) Hash identifier: ERy54L/S10QbrI8KBogPgMCvlV718yroDKgI/86xIok= Subject key identifier: 09:0D:31:D2:34:83:30:AB:39:84:75:A3:B4:B0:09:03:87:13:2F:06 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 0A96AB9D01C42A4F8C4903E1E19C7D54664F84F7 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61350.roa Signing time: Thu 18 Jul 2024 09:04:35 +0000 ROA not before: Thu 18 Jul 2024 08:59:35 +0000 ROA not after: Thu 17 Jul 2025 09:04:35 +0000 asID: 61350 IP address blocks: 2a06:9f81:5700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:96:ab:9d:01:c4:2a:4f:8c:49:03:e1:e1:9c:7d:54:66:4f:84:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Jul 18 08:59:35 2024 GMT Not After : Jul 17 09:04:35 2025 GMT Subject: CN=090D31D2348330AB398475A3B4B0090387132F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:de:18:53:e2:51:8e:e5:d0:eb:9b:e5:18: dc:06:50:c9:d4:1e:c5:24:82:7a:21:d1:e4:a6:05: 2e:6c:5f:78:1c:de:0e:88:23:6e:2e:3d:53:48:58: b0:15:30:26:07:6f:03:02:69:eb:39:f6:40:e0:ae: 2b:4f:e8:4a:78:e8:29:18:2f:6b:19:bc:19:19:c2: 58:7f:36:82:90:6f:c5:94:ef:70:6a:6d:72:57:69: 27:7f:21:2e:68:54:b0:a6:c6:69:4f:5a:e6:9f:73: 86:9b:89:77:c1:d6:4d:dc:d1:b1:19:c1:36:d7:22: 1b:20:86:ba:ab:63:ac:1e:6d:e0:76:73:5d:eb:1b: be:ba:ee:f2:1d:7b:e2:b3:79:bc:dc:f7:bf:68:ea: 53:1f:ae:e2:5c:42:f3:b8:74:e1:73:3d:51:11:d8: b5:5f:63:ff:f5:2a:1c:64:75:93:18:47:75:af:d6: 3d:1b:00:ef:6f:0c:c0:ce:15:92:85:f0:54:e2:1c: 08:5f:62:5d:a7:05:8b:78:81:86:fc:0f:e1:55:1c: e1:69:d6:ef:98:1d:b0:47:21:81:fb:2d:98:11:65: f6:9c:dc:ad:8f:f7:e1:bf:8a:9d:52:b5:c3:9a:98: b2:cc:dc:2f:79:f1:ff:1e:d5:de:1d:ac:19:1a:4a: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:31:D2:34:83:30:AB:39:84:75:A3:B4:B0:09:03:87:13:2F:06 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:5700::/40 Signature Algorithm: sha256WithRSAEncryption 55:f6:37:b3:73:32:18:90:e5:3e:85:a3:14:05:31:0d:5c:80: 33:28:2b:8b:82:37:1d:ba:b0:71:5d:8f:1d:0d:83:e0:48:d9: 83:0a:2b:c2:ba:81:2d:7a:e4:a5:16:7a:79:ec:8a:8c:3c:d2: 14:8f:e6:13:36:61:ec:72:e0:68:b0:35:48:6b:89:6f:76:14: 5e:f6:6b:ec:63:fb:5c:91:8d:9a:ac:a9:c0:f4:6c:09:c4:4b: a5:fe:18:f3:97:3b:8a:00:9c:4e:00:2a:01:0b:db:ee:86:6f: 19:a8:df:ce:07:c6:7e:61:5b:b3:d4:f3:05:5a:3b:ef:fb:fe: 36:db:b0:69:bb:30:e0:91:09:6c:35:e4:a1:1b:d6:6a:a8:6b: 0a:0b:48:4d:10:80:88:97:6a:69:9b:d1:d2:45:5a:cc:c9:54: 66:ad:bc:3a:a2:33:97:9e:59:f4:c8:30:b6:ab:77:4b:35:01: ef:00:35:16:8a:76:84:f1:2c:e9:d0:1b:36:be:37:77:21:45: ae:d1:e2:67:1e:e9:59:da:d8:f5:cd:11:42:0f:77:33:23:9b: 68:1d:82:20:98:52:53:b2:ea:9f:7d:7e:9c:1d:e8:ae:c4:20: f7:c4:21:66:66:4c:d0:2a:3d:d2:d3:b9:8a:bd:2d:82:7c:f9: 4d:ef:f6:03 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUCparnQHEKk+MSQPh4Zx9VGZPhPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA3MTgwODU5MzVaFw0yNTA3MTcwOTA0MzVaMDMxMTAvBgNV BAMTKDA5MEQzMUQyMzQ4MzMwQUIzOTg0NzVBM0I0QjAwOTAzODcxMzJGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34d4YU+JRjuXQ65vlGNwGUMnU HsUkgnoh0eSmBS5sX3gc3g6II24uPVNIWLAVMCYHbwMCaes59kDgritP6Ep46CkY L2sZvBkZwlh/NoKQb8WU73BqbXJXaSd/IS5oVLCmxmlPWuafc4abiXfB1k3c0bEZ wTbXIhsghrqrY6webeB2c13rG7667vIde+Kzebzc979o6lMfruJcQvO4dOFzPVER 2LVfY//1KhxkdZMYR3Wv1j0bAO9vDMDOFZKF8FTiHAhfYl2nBYt4gYb8D+FVHOFp 1u+YHbBHIYH7LZgRZfac3K2P9+G/ip1StcOamLLM3C958f8e1d4drBkaSqrfAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUCQ0x0jSDMKs5hHWjtLAJA4cTLwYwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNjEzNTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BVzANBgkqhkiG9w0BAQsFAAOCAQEAVfY3 s3MyGJDlPoWjFAUxDVyAMygri4I3HbqwcV2PHQ2D4EjZgworwrqBLXrkpRZ6eeyK jDzSFI/mEzZh7HLgaLA1SGuJb3YUXvZr7GP7XJGNmqypwPRsCcRLpf4Y85c7igCc TgAqAQvb7oZvGajfzgfGfmFbs9TzBVo77/v+Ntuwabsw4JEJbDXkoRvWaqhrCgtI TRCAiJdqaZvR0kVazMlUZq28OqIzl55Z9Mgwtqt3SzUB7wA1Fop2hPEs6dAbNr43 dyFFrtHiZx7pWdrY9c0RQg93MyObaB2CIJhSU7Lqn31+nB3orsQg98QhZmZM0Co9 0tO5ir0tgnz5Te/2Aw== -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org