Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS149476.roa
File: AS149476.roa (raw, json)
Hash identifier: +pYgZIMVxX7Cjst6MasDMm41Vda+gGmK6ZtSOIpgcuk=
Subject key identifier: 50:D7:E0:D1:32:46:49:41:2C:69:15:D5:67:67:F1:0C:6F:F1:94:A4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1193C848E0350588FB22ED03381D41B4D1625E24
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS149476.roa
Signing time: Sat 16 Nov 2024 08:34:49 +0000
ROA not before: Sat 16 Nov 2024 08:29:49 +0000
ROA not after: Sat 15 Nov 2025 08:34:49 +0000
asID: 149476
IP address blocks: 2a0f:9400:693a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:93:c8:48:e0:35:05:88:fb:22:ed:03:38:1d:41:b4:d1:62:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 16 08:29:49 2024 GMT
Not After : Nov 15 08:34:49 2025 GMT
Subject: CN=50D7E0D1324649412C6915D56767F10C6FF194A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:2a:d4:91:a0:b8:1a:c9:ff:37:ed:70:f1:
94:df:1b:5b:f8:73:6e:54:79:07:13:87:7f:e7:f2:
ed:f6:a9:a0:af:47:e6:23:bb:df:99:ab:1f:2a:a5:
66:5c:5d:f5:a4:6b:45:12:1e:e2:7d:3f:51:b7:46:
94:23:b5:f3:47:2f:5b:4a:fd:56:97:cf:13:81:64:
0e:23:2b:9c:27:36:16:72:bc:09:0b:00:8a:b7:f9:
11:3f:ce:3f:3e:4c:9e:7b:b4:b3:65:2e:8f:f5:0c:
01:30:6a:cf:f1:40:47:10:e9:df:8d:98:b4:b6:32:
ec:7f:3f:60:c9:47:30:a9:e1:6d:57:30:7f:3a:f7:
33:d4:df:25:fb:1a:7d:cc:7e:a6:4f:a8:b4:35:b3:
d7:c9:12:04:92:5c:66:e8:fe:7e:46:a8:aa:cd:a5:
7e:2b:b6:d9:8e:f9:a0:94:3b:b6:a6:c8:a9:27:03:
13:42:45:5a:89:c5:de:e6:e7:a5:5e:e8:9a:0d:fe:
3c:c3:6f:f9:77:db:62:2e:75:ba:22:ca:3f:e2:7c:
da:3a:29:48:2c:f3:1a:a3:cb:90:24:e1:e1:77:eb:
de:35:4a:33:7a:af:89:db:98:ba:c4:d1:ee:52:d8:
87:bc:26:cd:b2:c3:1c:a7:13:56:a9:f9:a8:a9:21:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:E0:D1:32:46:49:41:2C:69:15:D5:67:67:F1:0C:6F:F1:94:A4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS149476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693a::/48
Signature Algorithm: sha256WithRSAEncryption
01:66:c5:47:3a:45:1d:60:73:5c:d1:be:be:d8:87:7b:e5:d6:
2e:5c:c1:9d:0e:ab:13:44:32:3c:ef:e2:7a:4d:06:02:aa:74:
37:53:37:26:9b:be:1f:11:f0:5a:cb:36:17:0e:71:fc:3f:a4:
ec:93:14:ae:fb:65:b5:59:c7:7a:7f:46:ab:b9:fc:1c:1e:9f:
0e:b8:63:8d:e0:f0:64:16:39:ed:ff:12:6f:20:cf:54:9a:4a:
2f:ee:ff:b2:e0:b6:e8:24:70:c2:b9:7c:a9:59:6b:6b:65:d3:
34:5c:e2:c2:7d:39:cb:ea:89:cf:45:fa:7c:be:67:28:ee:46:
e3:57:38:fa:40:08:2e:60:2a:ab:9b:81:a3:07:5e:c2:82:92:
7c:9e:32:e3:00:79:4c:da:7d:61:fc:a4:e2:a5:fc:79:e9:2c:
df:52:5d:2e:41:64:da:67:d2:e5:8b:3b:c2:43:77:c6:d7:f9:
2b:ec:c4:80:1a:30:52:b9:6f:1b:e1:7c:5f:bf:39:e0:ac:9c:
34:ed:61:14:98:2d:ae:9f:dd:5b:9f:13:47:6b:87:73:fd:2a:
a5:63:f2:83:58:46:fa:6e:55:7c:6c:ac:c3:c4:18:41:c0:36:
d5:4a:79:21:a8:71:50:ae:62:fc:9a:6f:ca:b9:a3:90:71:ec:
f8:e2:51:49
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUEZPISOA1BYj7Iu0DOB1BtNFiXiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDExMTYwODI5NDlaFw0yNTExMTUwODM0NDlaMDMxMTAvBgNV
BAMTKDUwRDdFMEQxMzI0NjQ5NDEyQzY5MTVENTY3NjdGMTBDNkZGMTk0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pyrUkaC4Gsn/N+1w8ZTfG1v4
c25UeQcTh3/n8u32qaCvR+Yju9+Zqx8qpWZcXfWka0USHuJ9P1G3RpQjtfNHL1tK
/VaXzxOBZA4jK5wnNhZyvAkLAIq3+RE/zj8+TJ57tLNlLo/1DAEwas/xQEcQ6d+N
mLS2Mux/P2DJRzCp4W1XMH869zPU3yX7Gn3MfqZPqLQ1s9fJEgSSXGbo/n5GqKrN
pX4rttmO+aCUO7amyKknAxNCRVqJxd7m56Ve6JoN/jzDb/l322Iudboiyj/ifNo6
KUgs8xqjy5Ak4eF36941SjN6r4nbmLrE0e5S2Ie8Js2ywxynE1ap+aipIdFlAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUUNfg0TJGSUEsaRXVZ2fxDG/xlKQwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE0OTQ3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABpOjANBgkqhkiG9w0BAQsFAAOC
AQEAAWbFRzpFHWBzXNG+vtiHe+XWLlzBnQ6rE0QyPO/iek0GAqp0N1M3Jpu+HxHw
Wss2Fw5x/D+k7JMUrvtltVnHen9Gq7n8HB6fDrhjjeDwZBY57f8SbyDPVJpKL+7/
suC26CRwwrl8qVlra2XTNFziwn05y+qJz0X6fL5nKO5G41c4+kAILmAqq5uBowde
woKSfJ4y4wB5TNp9Yfyk4qX8eeks31JdLkFk2mfS5Ys7wkN3xtf5K+zEgBowUrlv
G+F8X7854KycNO1hFJgtrp/dW58TR2uHc/0qpWPyg1hG+m5VfGysw8QYQcA21Up5
IahxUK5i/JpvyrmjkHHs+OJRSQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org