$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS63150.roa File: AS63150.roa (raw, json) Hash identifier: gS3j/+o/0l+zbGsdZ9daMNchDpCBlIBhRcO5BOdRNUU= Subject key identifier: 19:58:F5:79:0C:E9:3A:5B:FE:DA:B2:B5:ED:45:A0:F8:B6:81:E1:70 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 67E2DDA223652C2B93CB3D2E8966E594D3A74812 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS63150.roa Signing time: Fri 24 May 2024 11:13:47 +0000 ROA not before: Fri 24 May 2024 11:08:47 +0000 ROA not after: Fri 23 May 2025 11:13:47 +0000 asID: 63150 IP address blocks: 2a06:9f81:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e2:dd:a2:23:65:2c:2b:93:cb:3d:2e:89:66:e5:94:d3:a7:48:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: May 24 11:08:47 2024 GMT Not After : May 23 11:13:47 2025 GMT Subject: CN=1958F5790CE93A5BFEDAB2B5ED45A0F8B681E170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:00:28:c0:e2:f9:25:f1:7c:a4:f3:14:be: b4:58:de:e7:40:eb:eb:12:53:d8:a9:0a:f5:dd:07: 85:17:47:bd:79:70:2a:09:f2:72:f0:c4:41:42:b3: 09:b6:af:dd:3e:46:5d:60:02:66:3c:37:30:fc:05: 31:e3:a6:53:27:e1:42:9d:4b:42:1e:43:be:ea:8c: 14:bb:8a:67:67:fa:52:bb:8d:59:0c:43:10:07:5b: 5c:a7:5a:87:c5:78:f1:41:a5:73:9d:9d:83:36:90: 39:7a:68:ed:2b:49:a0:36:84:c9:94:c0:7b:c0:05: 34:51:27:fc:db:41:65:fb:3d:93:0c:3b:a3:27:c3: 98:04:1d:f6:12:c2:c3:33:e0:57:b9:76:27:6b:8b: 9a:e0:d2:4e:b7:05:3b:f8:63:e6:fb:2f:2d:26:1a: 9e:cf:9c:88:bb:97:9a:58:36:70:5d:d3:b8:72:de: 71:3f:cd:2b:76:be:a7:39:06:ab:78:2e:e2:4e:6c: 22:85:f6:d0:9e:1b:55:75:b7:96:cd:83:fc:fc:41: 1b:89:30:a6:3e:8c:e2:5a:a8:c8:9f:48:52:0b:9a: 99:84:e8:ce:d7:26:e9:dd:46:a3:f0:0f:9d:9e:1e: bc:16:64:e8:d7:6d:fa:4b:b4:1d:16:19:e5:a9:4b: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:F5:79:0C:E9:3A:5B:FE:DA:B2:B5:ED:45:A0:F8:B6:81:E1:70 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS63150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:4000::/40 Signature Algorithm: sha256WithRSAEncryption 73:58:9c:91:d6:45:d9:e2:8a:bf:3d:0f:a3:f0:c3:dd:4a:54: 98:54:e5:8c:b4:e5:7f:0b:09:05:45:24:f0:2d:51:fd:b0:86: 89:76:32:57:ee:44:05:58:18:12:f2:2b:6a:d0:4d:e5:a3:04: e8:7d:e6:e8:d5:46:1b:dd:56:84:70:44:f4:41:81:fc:f0:84: 81:77:d1:d8:4b:f0:fe:62:d9:10:b4:cb:9d:aa:4c:ca:a3:e2: fc:52:14:3c:ce:ff:03:51:ed:41:ca:53:bb:ce:33:a5:64:83: 66:75:18:78:26:a5:6a:72:60:d3:4c:cb:46:14:30:8a:9d:3b: 93:1b:79:3a:5b:a4:50:39:a3:8e:29:db:6c:eb:55:6e:38:59: 3a:c1:bd:9f:cd:6b:7a:d3:03:fb:e1:c2:71:ef:f4:01:f3:f2: 74:92:37:5e:48:eb:87:69:30:44:c4:ea:6b:ef:61:66:fa:9e: 1c:27:01:ff:4c:3b:2d:6f:2b:c7:f0:9d:87:52:63:53:9e:a2: f6:ef:48:9c:e2:ec:d4:f7:83:bb:41:54:4c:96:a1:80:ae:e8: 80:66:15:89:e3:35:88:1d:4b:4e:a9:7c:b7:ca:d7:fc:58:56: fa:47:44:c1:64:a2:33:23:1c:a7:b8:dd:7f:c5:f4:40:54:e7: 1c:9d:45:b9 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUZ+LdoiNlLCuTyz0uiWbllNOnSBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDA1MjQxMTA4NDdaFw0yNTA1MjMxMTEzNDdaMDMxMTAvBgNV BAMTKDE5NThGNTc5MENFOTNBNUJGRURBQjJCNUVENDVBMEY4QjY4MUUxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NQAowOL5JfF8pPMUvrRY3udA 6+sSU9ipCvXdB4UXR715cCoJ8nLwxEFCswm2r90+Rl1gAmY8NzD8BTHjplMn4UKd S0IeQ77qjBS7imdn+lK7jVkMQxAHW1ynWofFePFBpXOdnYM2kDl6aO0rSaA2hMmU wHvABTRRJ/zbQWX7PZMMO6Mnw5gEHfYSwsMz4Fe5didri5rg0k63BTv4Y+b7Ly0m Gp7PnIi7l5pYNnBd07hy3nE/zSt2vqc5Bqt4LuJObCKF9tCeG1V1t5bNg/z8QRuJ MKY+jOJaqMifSFILmpmE6M7XJundRqPwD52eHrwWZOjXbfpLtB0WGeWpS2BRAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUGVj1eQzpOlv+2rK17UWg+LaB4XAwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNjMxNTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAqBp+BQDANBgkqhkiG9w0BAQsFAAOCAQEAc1ic kdZF2eKKvz0Po/DD3UpUmFTljLTlfwsJBUUk8C1R/bCGiXYyV+5EBVgYEvIratBN 5aME6H3m6NVGG91WhHBE9EGB/PCEgXfR2Evw/mLZELTLnapMyqPi/FIUPM7/A1Ht QcpTu84zpWSDZnUYeCalanJg00zLRhQwip07kxt5OlukUDmjjinbbOtVbjhZOsG9 n81retMD++HCce/0AfPydJI3Xkjrh2kwRMTqa+9hZvqeHCcB/0w7LW8rx/Cdh1Jj U56i9u9InOLs1PeDu0FUTJahgK7ogGYVieM1iB1LTql8t8rX/FhW+kdEwWSiMyMc p7jdf8X0QFTnHJ1FuQ== -----END CERTIFICATE-----Generated at Sat Sep 28 05:42:00 2024 by rpki-client on console-fra.rpki-client.org