$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS924.roa File: AS924.roa (raw, json) Hash identifier: P99r7H37UFFGpY4wprchkrq9xiRFT6dZWdFKNTqbd/E= Subject key identifier: D3:85:EA:A3:9A:A6:07:FA:E8:E8:D7:40:59:17:94:68:13:F4:7F:04 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 6C52E8CA1DD69D20D9B8E9F6E1D97AA6ED21B9B4 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS924.roa Signing time: Tue 14 Nov 2023 09:11:03 +0000 ROA not before: Tue 14 Nov 2023 09:06:03 +0000 ROA not after: Tue 12 Nov 2024 09:11:03 +0000 asID: 924 IP address blocks: 2a06:9f80::/32 maxlen: 36 2a06:9f81::/32 maxlen: 48 2a06:9f82::/32 maxlen: 48 2a06:9f83::/32 maxlen: 48 2a06:9f84::/32 maxlen: 48 2a06:9f86::/32 maxlen: 48 2a06:9f87::/32 maxlen: 48 2a0a:6040:5f00::/40 maxlen: 48 2a0a:6040:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:52:e8:ca:1d:d6:9d:20:d9:b8:e9:f6:e1:d9:7a:a6:ed:21:b9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Nov 14 09:06:03 2023 GMT Not After : Nov 12 09:11:03 2024 GMT Subject: CN=D385EAA39AA607FAE8E8D7405917946813F47F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:9e:c8:12:28:39:e0:89:39:78:04:85:3c: e4:75:0f:84:b5:f2:6d:a8:ee:bf:16:c5:a2:c7:b4: 70:ed:86:10:c8:de:d8:12:c7:5e:e0:86:90:4e:ba: 4f:bc:4a:2b:85:72:44:c7:a9:4b:4b:fb:a3:0f:dd: 2d:8d:de:b2:cd:ba:4e:2b:01:71:3d:9f:6d:4b:54: 06:cd:e7:2d:34:e3:5e:6d:49:70:6d:b8:74:11:08: 3e:10:c1:95:98:29:68:de:28:76:8b:99:84:ba:90: de:99:d7:23:7c:74:19:03:19:8d:df:60:31:6f:dd: cf:98:10:76:74:a3:45:89:92:41:1d:63:4e:89:26: 4b:7f:b0:7e:e9:9c:31:31:df:a4:b0:e8:a1:f0:05: 36:d4:64:86:8e:eb:b9:11:53:ab:37:de:8c:76:8c: e1:64:7b:0c:e3:e3:54:5a:35:09:54:a0:cd:bf:15: d9:87:85:08:b6:85:0a:6c:96:1e:d2:69:93:98:28: b7:f2:b9:1a:9b:49:7f:a2:65:08:27:95:d0:8c:c9: f2:c6:60:0b:3d:91:c4:f7:19:27:17:c2:47:51:8d: 44:cb:4c:45:92:06:bd:33:33:65:eb:9c:9c:05:46: fc:51:ca:b2:10:8e:63:da:b9:b6:3a:d9:4d:31:51: 61:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:85:EA:A3:9A:A6:07:FA:E8:E8:D7:40:59:17:94:68:13:F4:7F:04 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f80::-2a06:9f84:ffff:ffff:ffff:ffff:ffff:ffff 2a06:9f86::/31 2a0a:6040:5f00::/40 2a0a:6040:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 37:83:8d:f4:1c:04:d2:33:ae:3a:bc:fc:ac:3b:42:09:7a:3b: ad:11:41:ca:5b:92:3d:18:a7:91:7c:b0:04:68:59:8e:ce:42: 30:6a:7c:f7:b8:f0:95:b1:cc:d7:79:d1:d2:6e:d9:00:ce:c6: 88:b6:88:0b:3f:ae:a7:12:48:c0:68:e8:86:04:ee:51:bf:1b: 80:40:02:33:9f:b1:5f:33:43:c6:d1:46:61:1c:f1:d2:55:04: 00:52:c0:8b:78:9a:e6:47:58:81:df:a3:52:2e:5e:b4:a6:83: fb:d1:08:39:68:fd:d1:5d:12:e8:e0:43:30:62:99:d6:04:7a: f0:0b:d9:76:a1:38:ec:b0:64:cf:61:1d:e7:73:92:9d:12:73: 55:5c:a2:ea:d9:5d:93:ca:13:f2:58:5f:ec:31:2d:d4:95:61: 46:61:03:2c:29:b9:47:1e:f5:db:77:0b:18:29:a8:e3:32:23: af:ff:de:0f:ed:de:e5:3d:51:21:bd:c0:a8:af:f8:93:09:92: a4:1b:dd:99:ad:39:60:8f:18:5c:fd:2b:83:7c:8b:65:92:d8: 12:ac:99:8e:0e:45:64:ec:9e:53:25:5a:f5:24:d0:52:2a:c3: 82:73:0a:be:6b:a1:7c:11:6a:a7:db:01:32:92:9e:8c:ae:cc: 54:d5:1d:f8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUbFLoyh3WnSDZuOn24dl6pu0hubQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yMzExMTQwOTA2MDNaFw0yNDExMTIwOTExMDNaMDMxMTAvBgNV BAMTKEQzODVFQUEzOUFBNjA3RkFFOEU4RDc0MDU5MTc5NDY4MTNGNDdGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiZ7IEig54Ik5eASFPOR1D4S1 8m2o7r8WxaLHtHDthhDI3tgSx17ghpBOuk+8SiuFckTHqUtL+6MP3S2N3rLNuk4r AXE9n21LVAbN5y00415tSXBtuHQRCD4QwZWYKWjeKHaLmYS6kN6Z1yN8dBkDGY3f YDFv3c+YEHZ0o0WJkkEdY06JJkt/sH7pnDEx36Sw6KHwBTbUZIaO67kRU6s33ox2 jOFkewzj41RaNQlUoM2/FdmHhQi2hQpslh7SaZOYKLfyuRqbSX+iZQgnldCMyfLG YAs9kcT3GScXwkdRjUTLTEWSBr0zM2XrnJwFRvxRyrIQjmPaubY62U0xUWHNAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU04Xqo5qmB/ro6NdAWReUaBP0fwQwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjty c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTOTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH AQH/BDEwLzAtBAIAAjAnMA4DBQcqBp+AAwUAKgafhAMFASoGn4YDBgAqCmBAXwMG ACoKYED/MA0GCSqGSIb3DQEBCwUAA4IBAQA3g430HATSM646vPysO0IJejutEUHK W5I9GKeRfLAEaFmOzkIwanz3uPCVsczXedHSbtkAzsaItogLP66nEkjAaOiGBO5R vxuAQAIzn7FfM0PG0UZhHPHSVQQAUsCLeJrmR1iB36NSLl60poP70Qg5aP3RXRLo 4EMwYpnWBHrwC9l2oTjssGTPYR3nc5KdEnNVXKLq2V2TyhPyWF/sMS3UlWFGYQMs KblHHvXbdwsYKajjMiOv/94P7d7lPVEhvcCor/iTCZKkG92ZrTlgjxhc/SuDfItl ktgSrJmODkVk7J5TJVr1JNBSKsOCcwq+a6F8EWqn2wEykp6MrsxU1R34 -----END CERTIFICATE-----Generated at Fri May 17 14:07:01 2024 by rpki-client on console-fra.rpki-client.org