Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS135395.roa
File: AS135395.roa (raw, json)
Hash identifier: CXi0sBqUDrr0KL9VmYiAXIJKxB0V+dsbg2sH/q5Pciw=
Subject key identifier: D3:C4:9A:E3:07:C1:E5:1C:C5:C1:39:22:95:F6:03:33:5D:FE:41:26
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1284EFB3E39D2F820AAB6A12492077704E9961E3
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS135395.roa
Signing time: Tue 16 Jul 2024 02:42:22 +0000
ROA not before: Tue 16 Jul 2024 02:37:22 +0000
ROA not after: Tue 15 Jul 2025 02:42:22 +0000
asID: 135395
IP address blocks: 2a0f:9400:7a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:84:ef:b3:e3:9d:2f:82:0a:ab:6a:12:49:20:77:70:4e:99:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:22 2024 GMT
Not After : Jul 15 02:42:22 2025 GMT
Subject: CN=D3C49AE307C1E51CC5C1392295F603335DFE4126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:3b:95:f7:55:9d:ba:a0:0c:2c:5d:af:f6:
ff:3d:86:6b:93:c8:5a:04:b6:4b:63:2f:a2:49:72:
d1:96:75:16:59:d0:e8:4b:96:00:48:ec:63:28:c6:
de:fd:e4:a0:fb:30:63:2b:37:ba:e6:de:b0:50:b3:
d0:ca:7a:e6:9b:d2:54:c8:52:b1:dc:7c:86:53:12:
ac:74:e3:70:3b:cd:73:32:7a:af:b4:cc:3a:59:c2:
ce:33:4d:7d:6f:4c:2b:d7:11:34:6b:6a:a1:70:c9:
34:c4:82:ad:9b:2c:45:ae:41:df:62:a0:c8:9f:53:
5c:76:55:a3:4d:1d:a3:d7:56:95:a2:fb:d9:d3:62:
87:df:37:6f:7d:fc:d8:84:bb:2b:a6:a4:96:2c:3e:
12:c1:48:1d:f3:f8:58:b6:a1:97:4b:4b:d8:19:d3:
de:5f:b0:10:02:39:71:8f:be:41:e4:de:39:0d:83:
a5:d2:4c:ed:3c:5c:44:b3:54:b0:5e:6a:6e:47:54:
03:f8:8b:5f:36:58:d6:11:fd:e3:48:5a:b0:a0:42:
a0:e8:da:e2:6d:92:7f:d9:a8:f4:0e:19:67:45:ff:
9e:25:05:05:5f:82:f2:14:c6:78:bc:b8:bd:1f:65:
41:6a:13:4b:c6:15:6f:69:cc:0b:c9:c6:ef:fa:00:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C4:9A:E3:07:C1:E5:1C:C5:C1:39:22:95:F6:03:33:5D:FE:41:26
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS135395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7a00::/44
Signature Algorithm: sha256WithRSAEncryption
77:d8:f1:37:4c:46:4a:58:40:f3:69:87:4c:df:d8:75:b4:ae:
80:52:37:5c:4d:4d:5c:4b:b8:24:fa:3c:95:f8:af:af:0b:63:
62:ac:93:57:43:f7:0f:2c:17:c0:16:01:a0:24:d5:a7:9e:3f:
8b:47:39:d1:e1:ac:16:68:fc:5b:60:44:e2:35:31:1e:1a:25:
ab:cc:a0:f1:f6:bb:10:78:57:e8:ec:2d:0e:f3:69:39:70:db:
29:18:5e:6e:11:9d:4f:7a:8c:27:2f:cb:c2:71:4e:b0:46:22:
13:a2:91:b0:30:80:8a:03:74:ee:4a:6d:97:38:10:84:9a:4c:
62:0f:c1:ed:46:74:83:74:e4:50:87:ed:d8:a9:90:1d:a2:d0:
d8:6d:87:c8:bf:b1:ef:1b:a0:ae:0f:01:08:99:51:8b:73:e6:
59:73:7b:0e:98:da:44:93:e1:07:16:47:3b:d3:24:f4:3c:04:
e2:3c:4b:c7:aa:32:ab:68:30:d5:7e:33:79:35:00:74:48:09:
8d:8e:4e:46:f6:9b:f6:37:01:af:62:67:6b:6e:93:18:61:f5:
e6:8e:c6:27:6c:8a:47:9a:72:8e:39:8f:38:6a:43:44:48:15:
05:e0:db:fd:72:2d:db:75:04:3e:39:e4:cc:74:1b:75:04:f4:
79:30:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org