Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS135395.roa
File: AS135395.roa (raw, json)
Hash identifier: 0IEAZXdUdg1HnbbfSVY6fSPxPtN2ohiM18xvkz27cgA=
Subject key identifier: 42:73:CE:C8:9A:08:C6:E1:59:7D:8E:D3:3D:80:35:BF:06:A2:39:29
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6268C5E1F1A15DF224C5399FBF790F6027149D35
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS135395.roa
Signing time: Tue 15 Aug 2023 02:00:23 +0000
ROA not before: Tue 15 Aug 2023 01:55:23 +0000
ROA not after: Tue 13 Aug 2024 02:00:23 +0000
asID: 135395
IP address blocks: 2a0f:9400:7a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:68:c5:e1:f1:a1:5d:f2:24:c5:39:9f:bf:79:0f:60:27:14:9d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:23 2023 GMT
Not After : Aug 13 02:00:23 2024 GMT
Subject: CN=4273CEC89A08C6E1597D8ED33D8035BF06A23929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:3e:d5:df:78:40:80:d1:1b:61:71:0c:af:
9a:41:8a:7a:1f:04:5f:84:7a:70:3e:b7:c5:c6:b9:
11:2f:be:35:8e:00:39:95:36:5f:8e:d5:33:9d:eb:
92:1c:f2:fc:d1:ac:c9:b6:57:71:83:1f:8d:b7:06:
26:00:5d:f3:ff:fa:29:2b:00:55:e3:02:e6:e4:fb:
3a:ec:03:36:df:15:9e:91:b0:92:3a:bd:6c:76:67:
5e:85:a6:09:13:e0:2e:a4:ec:41:b3:3e:1f:20:bd:
7f:a0:41:1f:04:dd:91:4b:61:54:90:af:73:b5:81:
39:8d:51:3d:28:5b:55:09:16:66:64:20:f6:39:8a:
e4:d4:d1:f3:70:f4:f3:76:de:69:4a:9b:e1:6a:6d:
bd:2c:ce:38:ac:19:71:a7:8a:ff:70:a2:09:90:0b:
34:91:8e:a0:fc:c3:98:6e:8e:85:82:7f:e3:f3:69:
86:92:8f:15:08:90:a7:8c:4d:2e:d3:6c:7c:19:85:
fd:53:7f:5f:ac:96:b4:4c:5a:3e:4f:08:f4:fa:c2:
27:48:76:c3:af:b3:6c:2f:8b:98:26:8c:68:4a:3e:
2a:63:b0:0c:a6:9f:0f:41:c9:56:fb:33:1b:ed:14:
47:66:ff:31:43:2a:33:e0:49:9d:94:01:fd:64:82:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:CE:C8:9A:08:C6:E1:59:7D:8E:D3:3D:80:35:BF:06:A2:39:29
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS135395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7a00::/44
Signature Algorithm: sha256WithRSAEncryption
92:cb:dc:ce:1a:e2:15:be:41:7e:a8:9d:4f:0d:c9:c0:e8:6a:
2d:41:ee:90:65:59:ea:e1:87:a8:75:13:40:34:26:70:af:cc:
f6:93:c5:45:4d:af:a2:1b:90:aa:46:d2:9f:66:3e:13:a6:b7:
2b:12:17:21:1c:2a:6e:b6:2c:00:4e:02:f7:f0:f3:b5:5e:33:
f9:30:c4:01:59:a3:5c:37:7e:56:0b:9b:f1:c5:4a:25:f5:08:
af:5a:70:fd:d3:b2:81:71:28:72:be:aa:27:ce:cb:36:9a:0e:
88:7d:f0:b2:81:b3:90:08:34:96:07:ff:f9:6f:83:0b:e2:e9:
a0:0c:c7:be:8f:86:e3:be:28:4d:8d:7d:66:66:38:49:ea:00:
c7:70:2b:e3:f7:e1:6a:7e:9b:06:61:cf:d8:da:4a:f7:5f:51:
6f:ec:14:34:bc:37:50:ab:ef:e2:96:e6:8f:22:2c:dd:40:bb:
b4:d1:c1:13:01:99:07:fd:dd:61:df:d9:91:ab:0c:8d:42:de:
42:fb:a3:b0:04:62:cf:f2:c3:63:9c:73:03:f0:ee:a7:d1:51:
6a:89:4b:d1:8d:ce:21:0a:8f:6c:55:da:17:56:e6:76:67:1f:
62:07:fa:97:f0:18:fa:a1:5f:ad:34:a4:ea:94:fa:e0:4e:03:
e7:52:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org