Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
File: AS151194.roa (raw, json)
Hash identifier: 8PPy0yem0XY6usxzGFGBoNvut66vUjDsSe8pcsRbW48=
Subject key identifier: 12:15:8D:11:4B:8E:AD:4A:17:8D:8B:72:4D:3F:AB:A9:4F:6B:03:0F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5DCDD8BA60E2C700917CF8D8688BC60AFE68811D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
Signing time: Wed 11 Oct 2023 04:11:43 +0000
ROA not before: Wed 11 Oct 2023 04:06:43 +0000
ROA not after: Wed 09 Oct 2024 04:11:43 +0000
asID: 151194
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cd:d8:ba:60:e2:c7:00:91:7c:f8:d8:68:8b:c6:0a:fe:68:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 11 04:06:43 2023 GMT
Not After : Oct 9 04:11:43 2024 GMT
Subject: CN=12158D114B8EAD4A178D8B724D3FABA94F6B030F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:57:e8:78:36:5a:01:04:39:85:ad:bf:94:d4:
97:7a:bd:87:d6:b3:25:68:a6:0d:40:b7:78:48:a9:
c5:fa:9d:e4:7c:80:26:c9:8d:87:45:4c:26:f1:e5:
f3:04:6d:8f:73:a0:9b:06:da:5d:70:c7:81:76:59:
de:eb:47:38:c8:f9:09:03:dd:33:66:1a:c1:0b:69:
97:49:5c:0e:bb:86:59:c6:24:91:47:a9:64:c2:bd:
cc:d3:19:8e:82:18:0d:c7:2e:1b:73:98:ff:8b:ab:
cb:63:c2:10:98:85:58:9a:a0:78:30:00:1f:6b:38:
70:22:e3:42:90:f8:4d:0d:94:c5:af:1f:fa:76:ab:
a1:89:78:ab:8f:35:e8:6d:27:24:e9:ec:a0:66:f1:
f5:64:5e:1d:55:1f:a2:12:50:39:a0:3c:78:33:f5:
cd:9b:b5:06:0c:94:c0:e1:f5:a5:bd:b3:c2:dc:d5:
a7:01:09:20:1e:7d:60:12:92:63:32:c8:05:3f:35:
dd:66:8e:34:1a:c3:51:eb:84:bb:1f:ae:6b:6e:ee:
72:0f:20:ef:0c:87:46:a1:60:6c:dd:2f:71:77:35:
87:00:88:74:08:5b:54:a3:47:b6:9b:0e:65:6b:82:
4a:84:75:29:fa:61:68:17:57:1f:77:f9:c6:49:13:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:8D:11:4B:8E:AD:4A:17:8D:8B:72:4D:3F:AB:A9:4F:6B:03:0F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
5e:88:42:d9:12:e1:d1:7c:5d:70:0f:0a:5f:cb:86:75:18:d2:
fc:63:6a:69:f9:9d:67:2f:fe:68:d6:f1:91:5b:01:f0:e2:8a:
d9:f2:25:b2:66:ae:0d:3e:a1:06:01:15:b0:e3:74:9c:a4:64:
af:ba:df:90:98:2b:97:ea:44:3e:9c:4f:8c:22:a6:58:b2:45:
20:ce:4e:49:c4:95:00:52:1b:c4:4c:aa:99:a8:43:13:f8:a8:
d7:41:15:7a:49:4e:13:7b:89:56:a8:96:11:be:2c:80:6f:a1:
5f:bd:61:db:b9:1f:c7:7f:b4:0e:42:11:f3:4a:4f:f2:57:2e:
c8:3f:81:13:56:80:c3:48:01:a2:8c:ee:ce:20:4a:35:d6:d1:
64:be:57:1e:cc:52:05:4e:ea:70:60:93:39:61:ca:6a:01:c5:
d0:9c:d7:12:56:de:ab:bc:c2:b3:4d:20:42:7d:39:01:0f:a1:
26:56:b6:74:8d:33:c5:7a:c1:9e:6f:91:a1:81:c4:f2:41:48:
41:97:ad:c4:52:9f:ce:31:c6:83:a3:79:dd:e7:cb:f9:17:f5:
6c:e0:cf:13:7e:d7:17:cf:cd:11:2b:6b:b4:57:09:dd:23:ca:
c7:21:ea:be:59:02:a3:fc:8f:51:22:ba:77:db:2b:46:99:0d:
df:51:1b:b0
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUXc3YumDixwCRfPjYaIvGCv5ogR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzEwMTEwNDA2NDNaFw0yNDEwMDkwNDExNDNaMDMxMTAvBgNV
BAMTKDEyMTU4RDExNEI4RUFENEExNzhEOEI3MjREM0ZBQkE5NEY2QjAzMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrV+h4NloBBDmFrb+U1Jd6vYfW
syVopg1At3hIqcX6neR8gCbJjYdFTCbx5fMEbY9zoJsG2l1wx4F2Wd7rRzjI+QkD
3TNmGsELaZdJXA67hlnGJJFHqWTCvczTGY6CGA3HLhtzmP+Lq8tjwhCYhViaoHgw
AB9rOHAi40KQ+E0NlMWvH/p2q6GJeKuPNehtJyTp7KBm8fVkXh1VH6ISUDmgPHgz
9c2btQYMlMDh9aW9s8Lc1acBCSAefWASkmMyyAU/Nd1mjjQaw1HrhLsfrmtu7nIP
IO8Mh0ahYGzdL3F3NYcAiHQIW1SjR7abDmVrgkqEdSn6YWgXVx93+cZJEwLBAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUEhWNEUuOrUoXjYtyTT+rqU9rAw8wHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE1MTE5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAXohC2RLh0XxdcA8KX8uGdRjS/GNqafmdZy/+aNbxkVsB8OKK2fIlsmauDT6h
BgEVsON0nKRkr7rfkJgrl+pEPpxPjCKmWLJFIM5OScSVAFIbxEyqmahDE/io10EV
eklOE3uJVqiWEb4sgG+hX71h27kfx3+0DkIR80pP8lcuyD+BE1aAw0gBoozuziBK
NdbRZL5XHsxSBU7qcGCTOWHKagHF0JzXElbeq7zCs00gQn05AQ+hJla2dI0zxXrB
nm+RoYHE8kFIQZetxFKfzjHGg6N53efL+Rf1bODPE37XF8/NEStrtFcJ3SPKxyHq
vlkCo/yPUSK6d9srRpkN31EbsA==
-----END CERTIFICATE-----
Generated at Sat May 4 11:07:17 2024 by rpki-client on console-fra.rpki-client.org