Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
File: AS150506.roa (raw, json)
Hash identifier: JY/vU+a3kYPeOAPKCynUPPsXmw155aGAIC63/sRG9Is=
Subject key identifier: DA:7E:82:40:32:4B:1B:5A:F6:C8:DD:11:EF:6C:59:A6:7A:FB:17:87
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 24501E0AE4A63C8B2EA7B0269E7EA7021523EB1C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
Signing time: Sat 27 Apr 2024 12:30:57 +0000
ROA not before: Sat 27 Apr 2024 12:25:57 +0000
ROA not after: Sat 26 Apr 2025 12:30:57 +0000
asID: 150506
IP address blocks: 2a0f:9400:691c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:50:1e:0a:e4:a6:3c:8b:2e:a7:b0:26:9e:7e:a7:02:15:23:eb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 27 12:25:57 2024 GMT
Not After : Apr 26 12:30:57 2025 GMT
Subject: CN=DA7E8240324B1B5AF6C8DD11EF6C59A67AFB1787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:0c:a3:27:d3:99:0d:1b:32:b0:73:b0:3d:
8e:5a:64:77:ee:54:4e:d8:8e:71:a8:ce:c2:0a:5a:
bf:bc:53:3f:cc:96:27:ae:b3:d6:1f:73:d0:7f:3b:
44:6c:ec:10:83:d8:ec:7b:6e:84:52:45:a9:be:0a:
44:fe:b2:d3:7e:b4:1d:ce:5d:07:a5:13:e6:ee:5a:
ce:41:f6:b7:23:b3:7b:0f:ac:f5:5f:a2:39:9f:b8:
d8:81:ee:f3:c1:d8:d0:82:d4:10:3c:ca:b4:2e:b2:
b0:ac:ff:b0:12:2a:38:cd:8e:9c:81:ff:2d:e0:b2:
77:ff:ef:f7:a0:4a:d1:d0:45:02:87:24:00:e7:d2:
0a:cb:48:c5:2f:4f:b7:1a:7b:b1:99:c3:21:f3:26:
b6:59:3c:ea:d3:3a:c4:53:36:ca:d0:11:12:17:46:
de:ca:aa:41:f9:38:0e:9c:23:7b:2e:f4:44:54:68:
b3:74:7d:6a:24:46:38:9b:e0:f0:f7:e0:b8:af:f5:
b2:83:e7:01:66:aa:d2:5d:c9:f4:20:6d:94:e2:c9:
51:17:bd:f7:75:de:5f:93:3c:ea:34:5a:a7:e8:3f:
6b:42:a2:cf:3d:86:f8:12:8f:9d:96:f3:cc:d3:4b:
00:fd:0b:2f:b6:86:2c:4a:d4:66:5d:51:08:69:ea:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:82:40:32:4B:1B:5A:F6:C8:DD:11:EF:6C:59:A6:7A:FB:17:87
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691c::/48
Signature Algorithm: sha256WithRSAEncryption
8b:c7:d1:91:27:6a:12:8b:8c:19:fd:c0:ed:01:64:0b:b8:3a:
35:90:db:6c:08:6d:f8:d6:e6:7b:83:81:11:73:fb:20:4a:34:
2a:07:ff:73:14:12:71:53:26:4a:73:a2:6d:74:78:1c:99:9a:
16:33:0f:1c:09:4b:0a:63:c2:4c:98:38:38:af:6f:ce:e7:5c:
84:40:7c:2e:5d:dd:8a:58:81:35:f3:ce:3a:24:8f:ed:3c:4c:
59:c6:59:85:0f:8e:f9:fc:df:dc:49:7b:7c:18:64:f4:23:ad:
a7:55:3a:57:08:c9:59:8b:0e:2d:db:84:1d:9c:f1:c4:4f:a0:
2b:e3:de:d8:c5:8d:2c:19:cd:92:0b:2f:aa:d4:e2:db:e7:4b:
84:5f:86:26:47:59:e2:50:0d:39:f7:54:6a:f5:7f:e3:b4:90:
9b:68:6f:8d:73:67:90:8a:8e:ba:24:d9:f6:7a:31:ab:d7:a4:
37:0d:a3:e8:94:75:ed:6c:bf:58:76:4c:b0:c0:04:e8:ec:e5:
d6:77:01:89:ca:1c:54:b6:d1:1b:1d:69:ad:a5:9a:a7:e8:6f:
7a:b2:c5:36:9e:a5:14:db:a8:97:2c:a1:76:16:6a:7c:2b:4c:
d5:d5:84:c6:f3:6c:f4:7f:14:1b:8d:b1:2e:ce:6a:99:23:9a:
fd:1f:f7:fb
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUJFAeCuSmPIsup7Amnn6nAhUj6xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA0MjcxMjI1NTdaFw0yNTA0MjYxMjMwNTdaMDMxMTAvBgNV
BAMTKERBN0U4MjQwMzI0QjFCNUFGNkM4REQxMUVGNkM1OUE2N0FGQjE3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3XAyjJ9OZDRsysHOwPY5aZHfu
VE7YjnGozsIKWr+8Uz/Mlieus9Yfc9B/O0Rs7BCD2Ox7boRSRam+CkT+stN+tB3O
XQelE+buWs5B9rcjs3sPrPVfojmfuNiB7vPB2NCC1BA8yrQusrCs/7ASKjjNjpyB
/y3gsnf/7/egStHQRQKHJADn0grLSMUvT7cae7GZwyHzJrZZPOrTOsRTNsrQERIX
Rt7KqkH5OA6cI3su9ERUaLN0fWokRjib4PD34Liv9bKD5wFmqtJdyfQgbZTiyVEX
vfd13l+TPOo0WqfoP2tCos89hvgSj52W88zTSwD9Cy+2hixK1GZdUQhp6s7BAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU2n6CQDJLG1r2yN0R72xZpnr7F4cwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE1MDUwNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABpHDANBgkqhkiG9w0BAQsFAAOC
AQEAi8fRkSdqEouMGf3A7QFkC7g6NZDbbAht+Nbme4OBEXP7IEo0Kgf/cxQScVMm
SnOibXR4HJmaFjMPHAlLCmPCTJg4OK9vzudchEB8Ll3diliBNfPOOiSP7TxMWcZZ
hQ+O+fzf3El7fBhk9COtp1U6VwjJWYsOLduEHZzxxE+gK+Pe2MWNLBnNkgsvqtTi
2+dLhF+GJkdZ4lANOfdUavV/47SQm2hvjXNnkIqOuiTZ9noxq9ekNw2j6JR17Wy/
WHZMsMAE6Ozl1ncBicocVLbRGx1praWap+hverLFNp6lFNuolyyhdhZqfCtM1dWE
xvNs9H8UG42xLs5qmSOa/R/3+w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org