Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
File: AS38173.roa (raw, json)
Hash identifier: +vsro/jPvdaiLyremZcJBOvSjTVUI8jp32OI3G+6npA=
Subject key identifier: 53:0A:E1:E6:2C:E0:F0:34:54:33:15:88:EF:45:D8:79:1A:C4:BA:6D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 716CED2D5A1635F4E348456BE806D8D7D9EDC468
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
Signing time: Tue 15 Aug 2023 02:00:26 +0000
ROA not before: Tue 15 Aug 2023 01:55:26 +0000
ROA not after: Tue 13 Aug 2024 02:00:26 +0000
asID: 38173
IP address blocks: 2a0f:9400:8022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:6c:ed:2d:5a:16:35:f4:e3:48:45:6b:e8:06:d8:d7:d9:ed:c4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:26 2023 GMT
Not After : Aug 13 02:00:26 2024 GMT
Subject: CN=530AE1E62CE0F03454331588EF45D8791AC4BA6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:0e:91:fe:13:09:fc:ce:aa:7e:09:28:35:
03:43:59:d9:6c:6b:74:7a:4f:af:52:49:2f:5d:d5:
dd:b0:65:de:32:a4:62:b3:e6:a2:75:7b:d2:d8:e6:
02:a1:de:26:fc:c3:34:b4:97:c6:5d:d6:d7:fb:cd:
23:38:ef:ab:2d:f4:26:88:75:3a:02:97:4b:47:fd:
d4:34:0d:48:02:59:6d:fc:df:e5:32:ab:76:21:84:
f7:17:0d:5f:5f:7d:cb:4b:08:56:50:9e:09:1d:a3:
ed:01:09:f7:39:3b:2e:3e:9e:b5:a5:db:5b:37:b9:
89:4b:80:b5:b0:9c:95:dd:59:68:68:12:14:81:15:
4a:08:1d:9a:a1:5e:83:d2:2a:a9:08:3f:cc:a4:2b:
f4:6c:63:a7:32:ee:28:ea:aa:8e:c3:71:c4:05:e5:
3d:68:cd:7b:2a:66:b5:92:42:e6:1c:d7:e3:75:2e:
f5:33:53:8c:08:dd:e5:49:76:44:41:a2:d5:c7:c5:
b3:4a:5e:f7:9a:3e:da:e2:bf:ba:42:61:a8:bc:c8:
84:0c:0d:56:ff:fb:3f:7f:0b:f5:f6:ff:d5:f9:6d:
9f:13:06:9b:a7:47:6d:56:a8:2d:14:53:89:02:b1:
3a:a9:8a:1d:e9:97:cf:42:08:29:40:2d:d3:c9:c8:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:E1:E6:2C:E0:F0:34:54:33:15:88:EF:45:D8:79:1A:C4:BA:6D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8022::/48
Signature Algorithm: sha256WithRSAEncryption
86:55:4b:0c:a9:81:28:d4:dd:74:be:e5:8f:d6:14:b0:ed:b0:
9a:72:54:71:2e:7c:79:10:1d:0f:e8:e8:af:38:50:66:82:2a:
f5:2f:f9:45:dd:14:65:be:2a:c6:32:0e:e4:07:a9:e4:1c:14:
01:e4:b7:f0:89:9a:35:35:96:51:a5:a9:65:1d:da:01:b3:d9:
95:95:2f:76:41:b0:a5:70:2b:b3:85:00:c7:6b:ef:14:49:56:
eb:99:31:31:d8:cd:89:6d:d2:8b:d4:33:4e:04:b0:63:e4:d0:
cd:7d:10:f7:ec:7a:eb:be:a4:ad:1a:6a:5a:26:e4:13:30:27:
82:6e:b0:63:65:c5:63:a9:99:0a:da:c8:63:f5:01:db:0c:01:
9c:cb:ac:d1:e2:1d:26:cf:60:8d:9e:2e:99:8f:3f:76:e9:b4:
8e:d3:11:c1:7a:86:49:12:a3:39:0f:68:93:5a:0d:f9:ec:7c:
78:0d:27:bb:5c:e7:de:25:62:85:30:cd:35:d9:61:87:46:bc:
ff:96:a5:ed:af:c8:8d:c1:ff:9f:62:dc:b0:b6:17:40:f6:96:
ab:10:e6:39:da:6c:44:ba:53:7b:e1:ec:1f:2c:60:7a:a9:14:
da:04:e2:e3:2c:70:18:c3:76:26:1d:d1:81:ac:d3:26:a0:b8:
3b:63:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:56 2024 by rpki-client on console-ams.rpki-client.org