$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa File: AS51019.roa (raw, json) Hash identifier: 2cEiKQ6U85s1Z/97Tm2eIHuvYpl//6sERUbLROrriDc= Subject key identifier: 4A:7D:3B:05:2C:30:4A:19:B9:04:EE:C0:70:C8:B0:1B:CE:25:EB:F7 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1F478E63FD12C5A27655093DCDDD783456B9EEB2 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa Signing time: Mon 24 Feb 2025 02:45:54 +0000 ROA not before: Mon 24 Feb 2025 02:40:54 +0000 ROA not after: Mon 23 Feb 2026 02:45:54 +0000 asID: 51019 IP address blocks: 2a05:dfc1:b00f::/48 maxlen: 48 2a05:dfc1:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 04:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:47:8e:63:fd:12:c5:a2:76:55:09:3d:cd:dd:78:34:56:b9:ee:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Feb 24 02:40:54 2025 GMT Not After : Feb 23 02:45:54 2026 GMT Subject: CN=4A7D3B052C304A19B904EEC070C8B01BCE25EBF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:b8:41:b9:6c:7b:65:d6:84:7e:4a:f7:56: b2:d0:94:dd:d7:c0:57:5a:d1:c4:c6:9f:1c:fe:ee: a6:c6:be:10:42:c6:85:82:71:a7:5a:2d:80:eb:85: 15:ca:ba:70:39:12:4f:0d:2d:2f:a4:bf:ba:fa:b2: 22:8c:aa:4b:c9:d6:16:8e:3b:08:8f:a0:75:62:fa: 96:67:b7:bc:b3:8e:f1:0b:be:4a:57:5e:ad:e2:db: 1f:0d:f9:01:26:6f:37:82:98:72:4d:36:d1:3e:11: e4:ea:69:39:21:a0:80:68:7f:88:da:21:2c:c7:67: 66:97:fb:75:79:0f:f1:74:03:5e:b1:3e:26:41:d0: 0d:0e:ef:42:99:13:10:f4:c4:cd:0a:2b:d0:af:38: 07:a5:b3:32:3f:ab:62:c5:c6:37:05:eb:74:10:d5: 7a:b3:1f:c3:22:26:d6:6f:69:4f:73:a2:a6:7f:a7: 7c:fa:ce:76:bb:16:76:9b:c3:e4:6d:3a:2b:91:86: 7c:62:1c:e8:5b:99:12:32:5b:39:74:d4:a0:f4:8c: c3:46:af:15:f6:d7:c9:44:28:86:34:be:13:b2:ed: f4:5b:4f:d5:6f:62:77:1d:31:f7:c5:50:f2:4c:3a: 12:19:84:77:d3:ac:a4:07:0a:93:2c:4f:a7:6c:35: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7D:3B:05:2C:30:4A:19:B9:04:EE:C0:70:C8:B0:1B:CE:25:EB:F7 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS51019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:b00f::/48 2a05:dfc1:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 02:6d:d6:a1:f4:66:9b:cf:91:a2:8a:3d:d3:cb:37:04:93:77: e8:d7:19:a4:71:d7:5c:28:47:92:81:98:23:ba:8f:a5:30:c8: d5:b3:cd:4c:7c:f0:19:26:d9:0f:de:f9:20:c2:32:10:fe:04: 2a:5f:5a:28:61:bc:d1:33:45:98:4f:0b:ef:21:31:3a:2c:21: ac:7a:8c:96:3f:a9:83:6c:c7:d5:75:f2:b6:61:90:c1:9a:c5: d2:8d:e0:df:fe:5b:83:b6:3b:d9:db:a4:ed:9e:27:89:27:1b: d1:40:de:f8:73:d1:1e:7c:9d:6d:c7:db:12:46:63:0e:ca:58: b0:99:d3:08:69:f1:c6:85:3c:4c:79:7f:41:86:db:d5:8d:ce: 80:f6:30:76:ff:bc:8e:2d:cb:f7:38:a1:17:79:30:04:6a:c0: e8:c1:1d:87:25:5f:df:09:19:48:6d:63:75:e0:8a:e8:8f:77: e5:c2:cf:7a:40:df:43:0e:9b:2d:9a:b7:9f:48:d1:59:82:3b: be:ec:04:8c:97:62:83:b4:42:73:1c:2c:fe:9f:04:3a:0a:53: be:c6:c8:08:fd:2f:51:b1:da:07:29:42:6a:57:e0:f5:f8:85: 77:e9:63:18:cc:37:26:a2:c5:0e:6b:6d:58:b2:99:3c:fe:bb: e7:d9:a3:d9 -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUH0eOY/0SxaJ2VQk9zd14NFa57rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNTAyMjQwMjQwNTRaFw0yNjAyMjMwMjQ1NTRaMDMxMTAvBgNV BAMTKDRBN0QzQjA1MkMzMDRBMTlCOTA0RUVDMDcwQzhCMDFCQ0UyNUVCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/7hBuWx7ZdaEfkr3VrLQlN3X wFda0cTGnxz+7qbGvhBCxoWCcadaLYDrhRXKunA5Ek8NLS+kv7r6siKMqkvJ1haO OwiPoHVi+pZnt7yzjvELvkpXXq3i2x8N+QEmbzeCmHJNNtE+EeTqaTkhoIBof4ja ISzHZ2aX+3V5D/F0A16xPiZB0A0O70KZExD0xM0KK9CvOAelszI/q2LFxjcF63QQ 1XqzH8MiJtZvaU9zoqZ/p3z6zna7Fnabw+RtOiuRhnxiHOhbmRIyWzl01KD0jMNG rxX218lEKIY0vhOy7fRbT9VvYncdMffFUPJMOhIZhHfTrKQHCpMsT6dsNR8FAgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQUSn07BSwwShm5BO7AcMiwG84l6/cwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTNTEwMTkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgACMBEDBwAqBd/BsA8DBgAqBd/B/zANBgkqhkiG9w0BAQsF AAOCAQEAAm3WofRmm8+Rooo908s3BJN36NcZpHHXXChHkoGYI7qPpTDI1bPNTHzw GSbZD975IMIyEP4EKl9aKGG80TNFmE8L7yExOiwhrHqMlj+pg2zH1XXytmGQwZrF 0o3g3/5bg7Y72duk7Z4niScb0UDe+HPRHnydbcfbEkZjDspYsJnTCGnxxoU8THl/ QYbb1Y3OgPYwdv+8ji3L9zihF3kwBGrA6MEdhyVf3wkZSG1jdeCK6I935cLPekDf Qw6bLZq3n0jRWYI7vuwEjJdig7RCcxws/p8EOgpTvsbICP0vUbHaBylCalfg9fiF d+ljGMw3JqLFDmttWLKZPP6759mj2Q== -----END CERTIFICATE-----Generated at Mon Apr 28 13:15:06 2025 by rpki-client