Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS13852.roa
File: AS13852.roa (raw, json)
Hash identifier: OX5RSc4B1eaNMAZVfdHI0RuXzZO4VmN6MkzW2sm87/8=
Subject key identifier: D9:DC:FA:7C:E3:55:D1:80:32:86:A7:71:69:C8:35:C0:F6:8B:9E:3A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 72BBC588D50E230204EE865808D38F2B84F479F6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS13852.roa
Signing time: Thu 28 Nov 2024 18:46:51 +0000
ROA not before: Thu 28 Nov 2024 18:41:51 +0000
ROA not after: Thu 27 Nov 2025 18:46:51 +0000
asID: 13852
IP address blocks: 2a0f:9400:610f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bb:c5:88:d5:0e:23:02:04:ee:86:58:08:d3:8f:2b:84:f4:79:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 28 18:41:51 2024 GMT
Not After : Nov 27 18:46:51 2025 GMT
Subject: CN=D9DCFA7CE355D1803286A77169C835C0F68B9E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:45:a9:ab:14:72:74:cf:37:6d:42:d0:f0:
83:3b:04:b9:9b:60:68:2a:67:1d:7e:a9:0d:fc:e5:
c2:dc:d9:97:6a:be:f5:bb:af:f0:7b:c4:a5:9c:2e:
f6:f7:78:cf:0d:71:d8:71:75:bd:f4:0f:36:70:47:
c9:61:4a:49:3d:11:4e:4b:90:c6:79:c1:00:13:b6:
18:7e:49:a9:f1:51:d0:ea:c0:16:71:80:86:0f:8d:
9b:70:80:ff:7d:5d:cb:87:13:ea:57:ae:e4:10:8c:
53:c2:93:c2:93:1f:cc:ba:10:8c:1d:68:cf:68:8c:
54:95:0b:b9:6c:9a:e5:4f:54:28:4f:40:8a:f4:24:
51:e3:fa:fd:85:78:37:49:79:97:8d:ba:2c:1c:29:
1b:cf:1c:c5:8c:22:4b:c4:e6:da:b4:b6:cf:9a:d6:
aa:7c:be:55:e1:c7:01:a1:10:b0:b6:0f:e9:36:8b:
ff:0c:1d:bd:5f:ce:da:b9:4c:21:31:08:71:35:ac:
2b:d5:46:ee:43:5f:5c:57:b5:4a:39:aa:41:72:b7:
c8:39:6d:34:69:7b:cc:75:bd:b3:d1:e4:e5:0f:ec:
09:9a:62:29:58:46:f2:15:84:5a:18:3f:90:02:7d:
33:3b:f8:67:3b:d3:21:0d:67:15:9d:f8:55:51:46:
df:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:FA:7C:E3:55:D1:80:32:86:A7:71:69:C8:35:C0:F6:8B:9E:3A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS13852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610f::/48
Signature Algorithm: sha256WithRSAEncryption
c9:9d:73:f5:ac:7e:27:cc:f1:3c:84:88:cc:47:b8:ab:bb:80:
00:94:60:f3:8c:3c:0a:ae:68:62:5f:23:26:d5:c0:c2:43:81:
b5:fd:68:b9:88:3f:16:6c:27:e4:c1:08:68:ba:5c:c6:4b:c6:
5b:f9:a0:e8:7d:d9:7a:1b:11:e8:2d:df:60:31:05:38:3f:05:
a5:a2:80:a7:53:66:80:f4:72:e9:e8:34:39:64:e1:21:71:3c:
ed:2f:99:c6:39:6e:a2:16:13:6c:8b:30:f7:3a:1f:f8:7e:64:
f0:5f:a8:28:81:ed:86:4c:a7:dc:3d:91:b0:49:2c:86:77:6b:
ce:bc:87:ff:7b:7f:80:f8:d0:c0:13:54:79:e5:14:93:f6:21:
39:d3:d3:c4:5b:7d:5c:db:76:6d:5f:03:cb:ce:e6:d3:aa:06:
02:49:0c:aa:92:4c:0f:0c:33:e2:b9:cc:6e:39:83:81:06:63:
63:34:3b:45:37:48:46:96:5b:36:13:cb:35:e4:18:27:74:b4:
6d:0d:d4:c6:a6:53:6d:e8:9f:ac:38:f6:88:33:f0:7a:eb:b1:
35:82:c8:c9:ad:48:2d:49:98:48:60:8d:8a:15:54:93:45:54:
a0:27:65:ef:08:af:a1:40:db:ad:b0:aa:a8:17:c6:ee:00:95:
d8:a7:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:51 2025 by rpki-client