Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa
File: AS11721.roa (raw, json)
Hash identifier: 5FgrKDB2F3gnnUPvygvYMRXJM5tXXVZSXQ4eA246ulQ=
Subject key identifier: 09:FC:45:45:B9:3F:49:2D:EA:58:12:5D:5E:1D:7F:CA:C9:5C:C8:74
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 27EC3EEC8A69837BD22A37DD3AB66776529F21E9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa
Signing time: Mon 11 Mar 2024 22:32:59 +0000
ROA not before: Mon 11 Mar 2024 22:27:59 +0000
ROA not after: Mon 10 Mar 2025 22:32:59 +0000
asID: 11721
IP address blocks: 2a0f:9400:7384::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ec:3e:ec:8a:69:83:7b:d2:2a:37:dd:3a:b6:67:76:52:9f:21:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 11 22:27:59 2024 GMT
Not After : Mar 10 22:32:59 2025 GMT
Subject: CN=09FC4545B93F492DEA58125D5E1D7FCAC95CC874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:07:dc:d7:a6:00:0a:25:74:46:6b:17:9f:
53:f8:6b:35:02:90:fe:0f:2a:02:95:57:9a:b7:36:
30:54:71:c6:6b:4a:76:62:41:c7:95:76:b6:5d:58:
97:97:42:a5:8b:65:38:1c:a3:e1:f7:15:a9:b9:70:
10:6d:83:65:b3:1c:09:e2:b4:4e:8e:60:90:6b:cd:
c9:63:b9:8d:61:2d:7d:93:5c:f5:89:cf:37:28:9f:
8b:df:f2:3d:66:dc:08:17:7a:a1:c0:bd:38:03:df:
09:b6:ca:9f:a3:4e:67:f2:ee:38:eb:7f:75:d7:29:
4b:97:dc:c9:af:e5:e6:9c:4d:d6:1f:5f:11:ad:79:
4c:70:77:2f:47:13:6a:94:bb:67:c1:f0:43:ea:15:
16:e6:1f:a6:44:e0:09:e6:ca:8d:c6:23:a5:95:97:
63:72:70:05:82:fb:30:96:9c:ca:f8:9e:d9:ca:15:
2f:f0:ce:a8:8e:54:9a:96:3e:98:62:bf:18:3d:3a:
ec:0c:f2:1e:1d:79:a7:a7:c4:ec:49:45:60:06:4e:
91:b7:df:4d:4e:0c:75:2a:f2:3d:75:e5:11:13:e4:
a8:ad:5f:24:46:82:43:16:28:4b:68:ff:67:1a:a3:
f0:b8:fd:47:2e:02:cb:fc:de:37:0c:9e:8b:5b:d5:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:45:45:B9:3F:49:2D:EA:58:12:5D:5E:1D:7F:CA:C9:5C:C8:74
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7384::/48
Signature Algorithm: sha256WithRSAEncryption
5e:08:4c:fb:37:3b:eb:ca:23:6b:63:09:83:0e:9c:14:17:60:
50:7c:ef:4f:52:fa:73:e9:79:a0:28:d9:98:38:3c:76:e1:a2:
9f:f4:a0:ab:58:f0:26:bc:22:3c:b8:c4:ff:d2:10:d7:ef:6b:
fa:0d:d5:eb:1b:19:c6:31:20:47:1b:c4:11:00:10:db:bc:36:
0b:25:ab:d0:54:0e:c4:ae:01:18:23:c0:a0:c1:bb:c9:2c:ad:
f9:b8:81:f9:08:ac:52:5e:4c:cc:d4:b0:6f:78:16:e8:22:9b:
6d:75:98:fe:4f:0a:84:44:9c:9a:eb:24:4b:4a:cd:31:4d:0d:
9e:88:4c:d3:17:4d:12:fe:75:f9:8c:31:09:6f:c5:64:d6:58:
31:c0:31:e7:bc:2a:c0:22:8c:7c:6c:60:76:d2:72:8b:84:ea:
ed:f1:cf:96:1c:0c:c7:c9:ae:e5:11:20:7e:40:46:62:bf:2f:
64:0d:0f:aa:36:c8:94:a3:3e:ba:89:98:c5:e3:00:a1:6a:e2:
ec:4d:42:7d:e9:e4:2e:0a:be:0d:01:36:65:b6:b3:66:a7:3e:
0b:36:ab:e1:95:cb:d2:79:99:52:5d:a9:d0:d0:ee:6d:e1:14:
9d:e4:a1:4a:55:37:00:c9:92:97:8e:d5:75:99:f9:55:d4:31:
53:6a:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org