Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS10104.roa
File: AS10104.roa (raw, json)
Hash identifier: v13sL9ZBFXg3RisAN5v3z7NITVKu6n47GGZ3XwP1DDE=
Subject key identifier: 82:DA:E7:A7:9D:25:57:52:42:7B:28:3D:6D:2B:2A:59:5D:83:48:BE
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1FDEF0C3E61507978C2D063D115C5EEB22BE0006
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS10104.roa
Signing time: Fri 31 May 2024 04:14:52 +0000
ROA not before: Fri 31 May 2024 04:09:52 +0000
ROA not after: Fri 30 May 2025 04:14:52 +0000
asID: 10104
IP address blocks: 2a0f:9400:770a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 21:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:de:f0:c3:e6:15:07:97:8c:2d:06:3d:11:5c:5e:eb:22:be:00:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 31 04:09:52 2024 GMT
Not After : May 30 04:14:52 2025 GMT
Subject: CN=82DAE7A79D255752427B283D6D2B2A595D8348BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c4:09:43:ce:eb:95:a3:7c:c3:64:d0:96:f5:
a6:dc:2d:f0:d7:de:ce:25:34:86:c6:4b:45:f1:c8:
59:98:bc:27:bc:e5:84:72:b1:0f:c2:14:c4:61:73:
2c:35:21:35:54:7c:58:a4:75:4e:0b:41:19:ac:85:
96:79:d9:79:2b:b0:e1:3f:5c:0a:17:d7:14:28:ec:
42:bc:8b:79:09:44:a6:6f:2d:18:4b:72:bf:78:9e:
33:d5:69:70:ca:3e:02:a9:71:e2:91:77:6c:ad:34:
69:bc:42:7b:4a:b8:23:60:67:79:7f:74:16:38:ec:
ed:a7:af:18:84:73:25:1c:82:cc:cd:39:b9:c8:7c:
78:3e:06:9e:88:87:d1:ca:b7:45:ab:97:87:66:90:
4c:a9:1d:fd:d2:9b:49:44:6d:2d:35:e7:5c:8d:a2:
f5:f6:b1:37:40:fe:c8:93:45:47:0a:f3:be:6f:27:
1f:59:a0:7b:de:e8:17:df:65:00:7b:0a:87:fc:3f:
8f:13:8d:ab:01:10:0f:42:90:47:02:12:17:85:b7:
ca:78:e8:ec:f5:75:a2:23:46:3c:9e:3d:d4:a8:49:
e7:66:93:55:2b:31:78:aa:b4:cf:bb:8a:58:8d:cd:
01:5d:83:ab:8d:3d:a0:08:5c:62:73:0d:e8:76:83:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:E7:A7:9D:25:57:52:42:7B:28:3D:6D:2B:2A:59:5D:83:48:BE
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS10104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770a::/48
Signature Algorithm: sha256WithRSAEncryption
68:59:5b:a2:f6:c0:07:0e:a4:74:c6:52:c7:84:8f:a7:72:1e:
15:80:3b:50:ff:d5:07:a4:bf:4e:0c:94:4e:44:33:92:03:d7:
0d:44:21:bd:c2:e4:d8:47:9b:a3:62:e0:71:77:40:6b:96:ca:
9d:6b:27:0d:1b:08:6a:13:17:fc:b2:1a:6b:36:de:81:83:53:
cc:b0:46:b8:f4:de:df:70:92:5b:fe:93:8c:16:7b:e8:04:dc:
20:b4:fd:62:f6:0e:cf:70:d8:45:85:90:c6:11:6d:48:20:cd:
3a:b2:a6:8b:1f:65:8d:18:ac:fa:33:5d:64:2d:fc:fc:ac:35:
b5:82:7e:57:99:0f:d0:9d:ac:b8:74:57:20:ce:83:c7:8d:a0:
bd:bb:7a:f4:dd:b3:79:97:58:85:e7:b8:b0:66:60:db:23:c6:
63:33:d1:0d:da:9f:83:ee:41:c7:9f:d1:4b:a1:da:5c:59:9c:
48:91:70:7e:b9:d0:a6:b0:2c:14:80:4b:fa:7f:59:7d:62:af:
9f:fd:a0:8e:56:2b:69:bd:95:17:dc:fe:78:b0:89:6d:46:fe:
b0:8b:8a:2f:0b:b8:4d:91:3e:32:56:c2:8d:d5:60:38:98:82:
c0:3f:58:c4:42:f7:f6:37:94:69:be:bb:39:a7:33:89:88:47:
71:9a:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 03:15:40 2024 by rpki-client on console-ams.rpki-client.org