Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: EUxM1lPKahuMJeqPqGFSr2wFCe7Y9NojinrY2XLciSA=
Subject key identifier: 61:DC:1E:93:49:04:9B:43:68:99:E9:A8:C2:B8:70:AA:47:B7:B7:BB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 11CF34347DA292B19F25BDD5109B1646326B0513
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS14618.roa
Signing time: Sat 11 Nov 2023 01:51:41 +0000
ROA not before: Sat 11 Nov 2023 01:46:41 +0000
ROA not after: Sat 09 Nov 2024 01:51:41 +0000
asID: 14618
IP address blocks: 2a0f:9400:6150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cf:34:34:7d:a2:92:b1:9f:25:bd:d5:10:9b:16:46:32:6b:05:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 11 01:46:41 2023 GMT
Not After : Nov 9 01:51:41 2024 GMT
Subject: CN=61DC1E9349049B436899E9A8C2B870AA47B7B7BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:98:b1:58:23:3c:d2:82:d3:7f:6e:8d:9e:
ce:0b:79:69:6c:02:b4:2e:d3:2f:43:54:89:c6:2c:
f3:05:fb:08:0b:bc:94:62:ca:e2:53:7d:06:e9:7d:
e6:df:be:a4:b0:35:7b:f7:e5:98:1a:af:c6:4c:db:
f7:ef:3a:b5:7a:a1:6a:bf:1d:24:09:31:24:88:40:
f6:53:09:90:c2:50:65:75:b6:94:fe:2b:d6:b1:f1:
1a:45:29:08:cb:5e:ed:da:85:0f:73:7f:e0:f8:dd:
5a:51:91:82:98:99:e1:4e:da:af:21:4b:db:11:05:
19:cd:e7:1a:12:df:2e:80:43:97:d0:66:0f:18:aa:
88:f0:81:7f:4c:00:ce:6f:b4:9f:97:ef:42:9d:2d:
7c:9b:bc:22:d3:46:da:fa:df:a5:5a:d5:9e:db:82:
27:d1:52:2b:ae:6e:80:72:d9:df:ea:31:ee:7a:f1:
7c:70:f9:2b:ac:c9:6e:b3:14:e0:1d:78:e7:32:98:
1f:79:26:3f:c2:7a:4a:68:7e:14:aa:96:17:9d:4e:
56:a9:80:7a:fb:83:ef:b7:6f:46:38:e7:81:1b:6e:
61:b2:56:72:f4:15:45:4b:4a:ec:c6:54:21:b5:5c:
19:1e:8d:2b:19:2f:18:b6:3f:72:40:7d:a7:6d:ad:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DC:1E:93:49:04:9B:43:68:99:E9:A8:C2:B8:70:AA:47:B7:B7:BB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6150::/48
Signature Algorithm: sha256WithRSAEncryption
d0:42:32:8e:ef:66:a4:90:9e:d7:cb:9a:ba:10:95:53:60:27:
1f:61:e3:41:50:bf:5a:76:dc:4c:f3:8a:25:93:45:1f:81:95:
3d:ff:b8:a1:19:4d:b8:4b:a4:83:00:41:82:6e:44:34:77:13:
ae:70:6d:55:4e:1f:e9:a4:16:dc:ab:a6:5b:b0:50:10:a8:35:
b5:93:15:96:95:a2:f5:86:b2:b8:ae:ab:a5:5f:b9:4f:59:7d:
59:7e:b7:b7:89:77:df:b1:9b:43:ef:6d:29:db:72:f6:e9:40:
6d:39:70:b5:0c:18:e9:57:ed:fb:2c:6d:b5:2e:15:92:c5:67:
30:b9:a5:7e:56:1c:2c:66:1d:bd:67:db:b8:df:0b:6a:34:8c:
81:f8:24:37:f5:40:8c:4b:8e:7b:a5:9d:3e:61:a2:5a:e4:14:
de:b8:aa:7d:58:8a:34:63:73:0d:a8:0b:ba:06:6a:2b:54:d5:
e7:4d:2f:c0:d1:07:14:1c:6e:36:ba:a1:12:f0:7c:df:aa:5a:
a5:40:cb:4f:9a:ff:b3:21:85:04:8e:87:18:c2:59:c7:2f:3e:
22:89:fa:c1:47:34:21:b9:a4:ff:73:fe:27:31:9a:ee:5f:67:
04:18:85:d4:7f:59:55:4d:66:06:a4:dd:7c:85:0a:18:e3:f9:
0a:39:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:27:51 2024 by rpki-client on console-ams.rpki-client.org