Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
File: AS150645.roa (raw, json)
Hash identifier: VAPABHT301bycTHIdnOUJe6n59NIXWdNNE+YGPZ4dhM=
Subject key identifier: F2:B4:54:3C:04:89:89:23:94:4C:42:46:71:CF:2A:32:C8:01:92:5B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7E0FF608B0255BE6DD478C7F953BADB0A6CCC1B5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
Signing time: Sat 27 Apr 2024 12:31:15 +0000
ROA not before: Sat 27 Apr 2024 12:26:15 +0000
ROA not after: Sat 26 Apr 2025 12:31:15 +0000
asID: 150645
IP address blocks: 2a0f:9400:691d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 21:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0f:f6:08:b0:25:5b:e6:dd:47:8c:7f:95:3b:ad:b0:a6:cc:c1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 27 12:26:15 2024 GMT
Not After : Apr 26 12:31:15 2025 GMT
Subject: CN=F2B4543C04898923944C424671CF2A32C801925B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:e7:a2:c8:41:4f:7b:76:4b:54:ae:9a:7b:
78:71:0d:8f:ad:6c:6d:3a:60:7b:21:21:15:4f:ff:
2e:9f:73:38:11:91:11:6a:80:ff:c3:b1:0e:5c:40:
94:d7:b2:82:f7:e0:06:5e:df:04:7d:10:5c:d2:2d:
3d:38:52:f2:28:e4:93:13:74:a2:dc:e3:5b:db:eb:
75:fa:d1:c9:0c:83:f7:b7:03:b6:d2:c4:6b:b2:9d:
11:84:54:9a:79:e3:94:8a:f5:3b:b7:81:a2:59:89:
b7:e4:9f:cb:8d:3a:f8:53:b7:8e:e0:9d:14:c3:b1:
ca:d6:54:ca:36:f9:ec:7f:eb:10:c7:95:db:b2:16:
59:77:21:70:15:16:6e:41:0f:94:47:6f:b0:46:e9:
24:02:a2:a3:b8:62:61:fb:55:b9:f4:4b:34:c9:e8:
ec:a1:c7:2c:ca:54:18:31:f4:fc:e9:83:9b:01:84:
ee:26:d7:09:37:1f:d9:77:9a:7f:37:3d:be:31:73:
28:f6:2f:7c:7a:95:28:6f:6a:6b:34:92:01:1c:26:
dc:84:e6:dc:f6:9b:2b:b1:69:99:d6:5a:ba:25:63:
d6:eb:d2:a0:f0:34:d5:6f:d2:45:af:ae:6d:96:20:
93:f1:6f:05:f2:f1:46:be:38:df:66:39:79:4c:ae:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B4:54:3C:04:89:89:23:94:4C:42:46:71:CF:2A:32:C8:01:92:5B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691d::/48
Signature Algorithm: sha256WithRSAEncryption
1b:e0:03:6e:b9:80:ab:ad:50:12:02:1e:55:ed:6e:27:cf:02:
e7:ba:c9:41:cb:3c:15:b6:25:3f:5e:db:c5:00:26:ec:79:ca:
db:86:cc:16:c0:f5:be:dc:8d:ed:b9:66:93:12:3a:3d:33:ee:
59:a7:12:7a:b2:b5:38:5e:d8:ea:03:e9:0a:bb:4a:d2:52:7b:
a5:d1:fb:63:d1:07:b3:32:74:61:f3:62:a1:28:75:ca:c6:57:
98:9e:8d:62:b7:0f:bd:fc:26:e1:38:1b:57:5e:0e:4a:e8:2e:
db:7c:c1:bd:c0:7e:5d:68:c6:15:ff:97:f0:46:13:0f:e4:b8:
bd:04:7a:37:4d:d4:ea:0b:09:04:43:86:93:6c:c3:55:63:6c:
8c:b3:e7:4d:30:59:23:1e:f1:b2:16:7b:30:8d:e5:17:3b:68:
b3:02:e5:00:f4:c0:6a:39:91:73:14:6e:76:11:ed:91:83:7b:
fe:e4:a9:f3:19:bd:14:c4:6a:2d:94:80:80:a5:87:4a:3f:50:
16:a6:a2:1b:eb:ec:fe:23:79:45:fd:4f:32:5e:d3:2e:5a:6b:
4e:18:be:0c:1a:e0:bf:d4:d6:20:bd:df:fe:83:b5:41:26:55:
a5:aa:f4:95:da:c1:d2:c6:0d:c1:88:0a:00:77:2b:73:d1:2c:
9b:47:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 03:15:40 2024 by rpki-client on console-ams.rpki-client.org