Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS198487.roa
File:                     AS198487.roa (raw, json)
Hash identifier:          iIqr9lA29AnzBxD7ZvyIWyzP50jgaTjfEqt2QONIf2w=
Subject key identifier:   06:31:E9:B7:59:03:04:37:F1:A2:D6:60:64:87:E6:CB:CB:E7:E7:C7
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       6F03521D4D98B2429A412A7746B95EB1A8318C9D
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS198487.roa
Signing time:             Sat 04 May 2024 10:17:03 +0000
ROA not before:           Sat 04 May 2024 10:12:03 +0000
ROA not after:            Sat 03 May 2025 10:17:03 +0000
asID:                     198487
IP address blocks:        2602:fed2:770d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 00:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:03:52:1d:4d:98:b2:42:9a:41:2a:77:46:b9:5e:b1:a8:31:8c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May  4 10:12:03 2024 GMT
            Not After : May  3 10:17:03 2025 GMT
        Subject: CN=0631E9B759030437F1A2D6606487E6CBCBE7E7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:47:81:0e:dc:27:4a:49:a1:8f:7c:ca:80:
                    62:e9:75:54:1d:d6:8e:31:60:e9:ed:56:b2:f7:6b:
                    d6:d2:01:f3:f0:05:62:78:8f:c3:ff:3f:82:20:f3:
                    a4:cf:44:f4:a8:b8:6e:71:fd:da:e5:99:07:bd:de:
                    4d:5c:f3:ab:17:3a:c4:5f:e3:f2:42:5b:53:55:68:
                    b1:a7:e6:24:87:90:4e:b6:a7:4c:a9:04:5c:fe:aa:
                    57:de:82:1b:43:69:d1:b7:62:dd:54:3d:2b:2e:6a:
                    7c:3c:2a:de:6e:85:9b:45:46:db:8e:01:a8:58:3d:
                    e5:c4:59:c6:5a:4f:69:3e:6b:e0:d4:90:9b:dd:87:
                    ba:bd:c2:d4:e9:cb:11:13:53:cd:e1:74:ec:ab:7d:
                    3f:91:a6:6a:89:21:ea:3c:27:55:20:0a:ea:14:69:
                    2a:6a:17:a3:c5:3b:4c:b1:a7:41:ef:dd:60:43:00:
                    35:bb:9c:aa:f9:26:93:2c:b9:fb:89:ce:cc:f9:7c:
                    83:88:e1:04:ef:55:0c:fa:7e:cf:69:e4:f4:09:1f:
                    d0:d9:38:71:d5:15:74:14:dd:52:3c:77:e0:fb:f4:
                    8b:4d:68:a8:16:f6:bf:2e:0b:be:1a:00:7e:f6:f5:
                    b4:49:86:ca:71:1b:d3:29:d8:2c:01:9f:dd:6c:16:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:31:E9:B7:59:03:04:37:F1:A2:D6:60:64:87:E6:CB:CB:E7:E7:C7
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS198487.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:770d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:80:34:f7:5a:e4:45:e8:d5:16:cd:20:4a:54:7d:11:b1:
         36:e1:c1:79:27:b9:90:08:6c:13:ff:c3:d1:24:05:eb:94:c4:
         cb:bb:23:9d:6a:55:c2:b0:31:e3:3c:62:96:16:4b:7e:df:81:
         bb:38:bc:ef:56:a6:e9:13:48:a3:f0:36:32:16:e5:27:1d:b5:
         d8:c6:64:03:80:3d:80:b9:ef:a1:36:23:7f:1a:7c:41:4b:56:
         be:9f:56:b2:28:3b:04:eb:8d:bf:78:bf:c8:72:18:fe:ed:9b:
         6c:57:c9:10:54:38:6d:b6:d0:01:7b:92:2e:1e:d5:4b:61:89:
         cd:92:61:ad:e3:55:e6:f6:aa:50:3a:2b:b9:76:a2:3c:d8:ec:
         b3:ab:a7:94:7b:94:45:19:46:cc:57:cd:9a:58:50:2c:bc:47:
         6f:bd:85:c1:ff:18:d9:cb:a5:8a:eb:bc:45:ed:14:ea:cb:f9:
         6d:a3:22:67:a4:b3:bd:7b:fc:e7:07:fb:c9:78:b3:d9:51:4a:
         5e:ea:99:2f:31:93:8b:7b:f5:82:37:3c:93:cf:7c:63:77:63:
         6f:94:b4:ba:88:81:e4:9a:ef:7c:38:a5:58:65:b0:10:28:7b:
         26:fd:1d:d1:fc:0f:bc:37:8e:16:cf:2d:dc:d6:fb:47:e6:9b:
         5f:46:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:53:03 2024 by rpki-client on console-fra.rpki-client.org