Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
File: AS214910.roa (raw, json)
Hash identifier: 3ij1zYgPmisUDXL2p7GtXutng38ykGewD0AQQACKhKM=
Subject key identifier: F7:3E:54:C7:85:64:66:B2:30:D2:11:63:CD:C0:55:38:3D:E2:CF:6E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C0AC68BE724B56300A7E5E6D86C3E5B517D3B51
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
Signing time: Thu 06 Jun 2024 02:06:24 +0000
ROA not before: Thu 06 Jun 2024 02:01:24 +0000
ROA not after: Thu 05 Jun 2025 02:06:24 +0000
asID: 214910
IP address blocks: 2a0f:9400:6115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 21:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0a:c6:8b:e7:24:b5:63:00:a7:e5:e6:d8:6c:3e:5b:51:7d:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 6 02:01:24 2024 GMT
Not After : Jun 5 02:06:24 2025 GMT
Subject: CN=F73E54C7856466B230D21163CDC055383DE2CF6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:18:11:18:6e:6b:db:fe:51:53:01:89:ed:
b8:3f:5b:06:7b:04:21:03:60:5a:17:bf:67:e5:68:
87:27:65:8e:47:96:da:ff:c6:ad:4f:85:5f:c9:84:
c1:f0:0f:d7:4f:38:90:fc:18:2c:a8:d2:21:d0:9a:
f6:93:6f:10:ed:37:a6:c7:dd:ba:2b:b6:7c:5a:04:
2a:f1:0d:c8:e1:2b:d8:6c:fa:ff:61:59:3f:69:49:
73:06:77:71:84:b6:f1:7c:98:61:4c:7d:73:78:85:
f8:dc:62:14:62:54:d1:2c:cd:c4:3d:10:72:bf:43:
6c:c5:0a:46:b8:dd:ae:5e:5e:bf:6f:33:c0:16:00:
f7:25:18:7e:2a:1e:bb:d7:df:85:12:25:7a:47:7f:
d8:1e:ab:32:b2:42:a2:4f:32:64:93:82:ef:05:d1:
80:d0:54:eb:ae:7f:22:a2:af:a1:0b:cf:d2:3d:c1:
94:d4:03:63:67:c6:b3:2e:e2:3f:17:32:ed:ad:40:
c3:e7:dd:91:17:08:30:02:3c:02:76:21:bd:cb:ac:
88:b1:2c:8e:f1:c0:07:64:87:f1:c4:ab:72:56:41:
80:9d:f2:e6:3c:ee:b3:9c:ab:4f:a4:d5:7f:79:98:
4c:b1:33:3b:2b:95:2a:f5:53:58:93:06:65:29:5b:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:54:C7:85:64:66:B2:30:D2:11:63:CD:C0:55:38:3D:E2:CF:6E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6115::/48
Signature Algorithm: sha256WithRSAEncryption
8c:de:f6:e6:86:c3:99:2a:55:c8:2c:df:c0:2e:3e:1b:31:79:
f9:eb:7d:63:53:2c:33:ce:1c:da:db:e4:78:b1:25:78:68:09:
ee:d1:0c:b2:6d:50:4e:7a:3c:7c:36:66:58:2c:d0:ae:9a:ec:
9b:59:5e:b9:5a:1d:5f:78:05:54:df:f1:0a:56:46:ff:da:5c:
a2:10:0f:94:98:89:fb:66:dc:b0:2b:45:b5:5e:78:14:58:09:
74:be:38:11:fd:69:2a:5e:2a:fa:bd:48:78:b3:8d:e6:9f:4c:
ac:fc:5a:8e:46:44:55:23:e7:94:68:83:e1:f9:e1:29:25:e3:
7e:c1:de:17:6c:af:90:33:09:1b:88:16:85:75:91:00:db:44:
0d:79:06:80:ae:c6:66:1a:44:48:90:4f:e4:e1:fc:07:f1:a8:
cf:4c:00:27:62:55:28:7c:90:bd:a6:fa:b4:b5:3f:3b:0c:f1:
2c:5c:36:22:e2:7b:94:4d:88:4d:20:79:28:48:d0:99:10:42:
a0:3f:9b:50:eb:a8:fe:73:46:fd:04:3f:46:11:9e:55:44:48:
a3:46:b4:e7:30:26:9b:71:0a:07:18:68:63:df:69:26:a2:ae:
68:2c:dd:58:9a:d5:07:62:e1:07:d8:9d:1e:46:62:53:f2:0a:
8d:aa:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 01:54:41 2024 by rpki-client on console-fra.rpki-client.org