Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197292.roa
File: AS197292.roa (raw, json)
Hash identifier: sgR+TijJ6i5cNyUkahk7gGKiJlyYj1fyZ/rW/nhRrMs=
Subject key identifier: 2B:32:62:74:A7:6D:C2:17:59:C7:B4:7B:E5:DC:E5:F9:69:F4:4E:8A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 57EA3A5BC4ABA50792D4973BD5DB74493412CEC5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197292.roa
Signing time: Fri 26 Apr 2024 23:40:14 +0000
ROA not before: Fri 26 Apr 2024 23:35:14 +0000
ROA not after: Fri 25 Apr 2025 23:40:14 +0000
asID: 197292
IP address blocks: 2a0f:9400:691f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ea:3a:5b:c4:ab:a5:07:92:d4:97:3b:d5:db:74:49:34:12:ce:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 26 23:35:14 2024 GMT
Not After : Apr 25 23:40:14 2025 GMT
Subject: CN=2B326274A76DC21759C7B47BE5DCE5F969F44E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:28:bf:f5:92:2e:e4:67:24:64:2d:02:14:
84:44:3d:e2:35:97:2e:2f:86:6c:92:76:db:59:da:
d9:d8:f3:1c:83:6a:21:86:1e:c1:4a:b9:5a:03:28:
c5:66:6d:78:c6:f4:a0:23:ad:d1:96:3e:d8:7d:a6:
7b:b2:11:1b:76:d1:96:25:1e:0a:b1:8b:95:bb:a4:
ba:00:b1:32:38:14:9c:09:a7:8c:a0:0b:43:04:71:
9b:3e:ff:64:09:dd:da:48:3b:fe:c9:a0:db:11:9d:
26:6b:36:32:00:af:ee:3d:af:07:c5:66:85:48:5c:
df:4c:b0:33:23:dd:2f:b4:30:d4:4b:ca:25:0b:02:
50:eb:af:4c:b5:57:33:b9:48:7e:b2:25:d6:8d:23:
5e:02:ca:09:65:14:c5:6d:f5:83:7a:eb:1a:a9:af:
20:43:fc:46:b4:d4:9d:86:d5:be:04:73:10:7c:43:
ea:67:6a:15:aa:0e:bb:72:5e:ea:b3:98:aa:00:8b:
b5:10:eb:13:22:9e:b7:43:50:70:c5:ce:5c:dd:0d:
cb:67:5f:c5:ad:5e:b7:f7:22:3b:90:38:f3:2f:b8:
ac:37:cf:e8:97:fd:22:46:87:f7:38:be:2e:55:24:
8a:5e:62:e9:f6:fc:88:ea:fd:b4:25:a1:0b:c8:31:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:62:74:A7:6D:C2:17:59:C7:B4:7B:E5:DC:E5:F9:69:F4:4E:8A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691f::/48
Signature Algorithm: sha256WithRSAEncryption
69:6d:29:d7:f7:1d:8e:17:97:ba:73:cc:e2:d9:89:80:a7:d5:
af:5a:22:79:2b:9d:bf:97:ff:b4:78:67:c8:a9:9d:10:6d:80:
ba:80:bf:21:71:9b:44:cf:4a:af:3d:0b:5c:89:da:14:1a:96:
53:7a:68:5b:ac:47:b3:96:d6:0f:16:77:c4:50:d2:1c:29:c6:
da:95:d6:5a:d7:c4:b3:af:a3:4c:87:fc:c4:98:9d:af:80:ca:
77:4b:c8:84:bb:18:89:d1:70:16:a5:d4:02:7f:d0:d4:e8:61:
26:97:80:9f:71:1b:02:57:c2:71:0a:11:3a:9e:b5:b8:70:1e:
5c:0e:17:bb:07:32:ba:36:d7:85:c8:d7:ba:2f:03:8e:07:b2:
4d:df:14:f3:bd:0d:f3:86:b7:2d:1d:a9:38:05:30:6d:f1:3d:
ad:e6:a7:0d:75:da:df:83:f9:28:d0:08:87:23:ec:21:c3:ef:
26:6a:25:2a:3a:2f:24:06:1b:06:66:63:a8:8d:11:9b:e2:71:
23:05:d3:a2:a3:7b:76:0a:58:b6:c1:c4:c2:d3:0a:f9:b9:78:
7f:3a:1b:71:76:44:c0:81:26:6f:fd:af:5d:4e:9a:12:ca:eb:
ec:10:e6:27:03:5f:fa:63:11:5e:80:52:49:ac:64:74:21:a1:
25:00:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:30 2024 by rpki-client on console-ams.rpki-client.org