
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206919.roa
File: AS206919.roa (raw, json)
Hash identifier: loiUAEO4dG44YGDDxFhwUOJbo4QXVdW5vGa3sTwI/QU=
Subject key identifier: CF:6F:5A:C0:C4:F7:1A:B9:62:9E:03:19:C8:6D:85:10:82:7E:90:A8
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 7046C8E8041A1C299F63CC19F3DA6A636DDE9EC6
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206919.roa
Signing time: Fri 04 Jul 2025 06:53:27 +0000
ROA not before: Fri 04 Jul 2025 06:48:27 +0000
ROA not after: Fri 03 Jul 2026 06:53:27 +0000
asID: 206919
IP address blocks: 2a05:dfc1:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:46:c8:e8:04:1a:1c:29:9f:63:cc:19:f3:da:6a:63:6d:de:9e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jul 4 06:48:27 2025 GMT
Not After : Jul 3 06:53:27 2026 GMT
Subject: CN=CF6F5AC0C4F71AB9629E0319C86D8510827E90A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:bd:65:50:6c:6c:51:9f:ce:f6:6f:14:c7:
9f:dc:c0:66:85:15:77:ae:c8:c9:8a:6d:93:6d:ad:
56:22:08:e5:5a:92:0a:f3:f6:1d:9e:54:89:16:a2:
38:65:ce:96:eb:02:85:42:6e:98:26:c7:94:cd:fc:
a2:87:2c:0b:b1:5c:6c:d4:8f:70:a9:d3:63:e8:08:
5c:f8:96:70:b9:be:e7:ab:f7:7c:be:5a:2a:b3:a5:
c7:0d:65:30:d5:09:aa:a2:82:53:7f:3c:4d:ef:5b:
02:90:61:68:a4:48:6e:05:94:e9:52:a3:22:93:07:
b7:2b:dd:e5:21:10:ec:6b:9a:85:58:73:d3:fc:34:
51:f4:e2:bf:9c:65:e1:26:6f:6f:10:12:bc:0e:48:
2b:db:f3:93:18:ba:d5:1b:cb:89:ea:d8:24:74:74:
9b:91:48:8a:97:d9:05:77:ef:09:9f:23:b7:9d:de:
d3:a4:b3:d0:fc:4b:4e:1b:74:97:5a:3a:98:dc:70:
93:35:f0:ac:50:e9:b2:e8:7c:5c:77:d7:a3:0b:f6:
b6:e2:a3:2e:29:ac:b5:af:b7:32:71:09:eb:49:0f:
32:dc:ae:5b:e5:80:99:cd:dd:ad:e5:d7:4e:5c:cb:
c7:77:b2:1d:98:89:3d:78:d5:a2:ee:c0:af:f0:2a:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:5A:C0:C4:F7:1A:B9:62:9E:03:19:C8:6D:85:10:82:7E:90:A8
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS206919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:1600::/40
Signature Algorithm: sha256WithRSAEncryption
45:9a:22:bd:87:22:fc:b1:5e:9f:a2:26:32:c2:d8:27:17:2e:
6f:d0:07:af:60:a6:39:fa:4c:9e:69:19:e6:43:0c:8a:7e:63:
aa:fa:cd:3a:14:2c:3b:ec:24:9e:ff:33:68:be:98:b3:81:51:
0c:37:c5:e7:84:78:04:5d:12:66:41:7a:a8:db:95:01:8d:d4:
a5:23:2b:f8:5b:70:af:5b:0f:6b:97:10:6d:a3:91:33:96:87:
7a:5c:15:ae:1f:ef:d6:91:81:41:8f:28:ff:77:61:34:33:9b:
d4:dc:c4:77:f8:a5:da:a5:e8:31:24:fe:fc:be:03:8a:45:b0:
15:29:67:06:ab:52:ee:f9:0e:f3:f4:2f:cf:ef:71:62:75:89:
29:6e:5a:26:f7:ff:b3:45:b6:3d:47:f9:53:05:0c:cf:fc:ae:
aa:73:08:b5:78:91:94:ea:e0:68:44:17:79:cb:61:5a:a2:ce:
0c:5e:e7:28:7d:8a:4f:f3:ac:9b:3b:16:e9:2e:d8:73:f6:71:
2c:64:15:d9:3e:f1:c3:1b:28:0a:95:80:5a:8f:e9:5b:be:a6:
f0:dc:fa:67:27:63:83:a6:6d:6b:e4:fe:27:4b:1a:4f:7c:97:
86:08:42:f8:bf:e4:69:68:d7:02:eb:9c:e1:7e:7b:fa:ee:18:
23:19:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:42 2025 by rpki-client