Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
File: AS151194.roa (raw, json)
Hash identifier: oRkW6yphvcdySFfI4nGt5DVKKODihf+hpWDswyPcp38=
Subject key identifier: 08:9D:11:07:34:6C:7B:A1:F2:21:03:4A:04:F4:36:C5:4F:47:45:F5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5FC1035D1BE23A3DD1836E970540D5D5340D0282
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
Signing time: Wed 11 Sep 2024 05:06:32 +0000
ROA not before: Wed 11 Sep 2024 05:01:32 +0000
ROA not after: Wed 10 Sep 2025 05:06:32 +0000
asID: 151194
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c1:03:5d:1b:e2:3a:3d:d1:83:6e:97:05:40:d5:d5:34:0d:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 11 05:01:32 2024 GMT
Not After : Sep 10 05:06:32 2025 GMT
Subject: CN=089D1107346C7BA1F221034A04F436C54F4745F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:47:9d:95:ea:a1:67:a5:2b:0d:65:1d:09:
8e:fa:52:37:45:16:74:e9:9b:42:52:2a:60:f0:66:
6a:6c:c3:9a:12:18:a3:59:d0:45:f2:8f:bc:75:8f:
e9:9c:8c:35:9e:5e:b3:84:b6:a1:1c:be:12:57:dc:
25:1d:44:e9:4f:78:0a:6d:24:72:a5:8e:89:8d:d7:
03:9d:16:5f:6f:e9:28:d1:8c:5a:3e:32:31:11:95:
15:63:a1:a4:48:c8:61:bf:24:fb:d5:5c:47:31:18:
00:0c:32:dd:a5:f1:1b:9f:26:d5:0a:98:1e:3f:04:
72:c2:47:f7:15:3d:dc:74:76:e0:6f:2f:db:6e:73:
f1:bd:31:99:b7:b2:55:17:4e:da:2a:9b:a5:6f:7a:
bb:f8:76:d8:3e:de:a4:13:b0:69:0d:76:33:4c:d7:
7e:94:49:1f:31:a3:8b:d7:90:15:70:f9:94:18:54:
c8:31:82:9e:c0:9d:89:8d:b4:df:84:7e:04:02:2d:
53:bb:3a:0d:e8:fa:ab:9a:1f:e4:ce:2b:b0:01:f2:
8b:24:63:61:ae:62:7c:5b:a5:b6:7c:97:d7:01:de:
29:9a:86:0e:39:c8:18:47:5c:a7:a8:a2:25:cd:ba:
07:08:a6:48:bf:3d:3d:5f:b0:d7:28:a0:4d:0e:29:
b0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:11:07:34:6C:7B:A1:F2:21:03:4A:04:F4:36:C5:4F:47:45:F5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
5a:fa:7d:5d:b1:e0:68:f9:a6:e4:3f:25:a0:20:fe:c1:56:68:
7b:b7:5f:85:42:4b:d3:31:0f:20:cb:bd:a8:6a:f1:d9:b0:96:
45:1f:7e:56:93:dd:fb:81:8e:50:90:61:cd:64:5f:93:10:f5:
0f:c7:fc:57:be:3c:26:57:55:f8:e6:44:fb:64:65:b6:c5:0c:
58:52:b6:42:c6:2e:f2:2f:c6:28:b3:5f:b2:26:b9:34:c1:64:
d4:23:e1:71:45:bf:5c:10:89:ef:e7:bd:b2:67:9f:97:f8:e2:
35:c2:c4:09:cb:e2:28:67:fc:c7:17:60:ee:8c:db:12:82:d5:
d8:1c:f1:7c:f6:a8:d1:2d:55:60:80:ff:5c:d7:b6:b4:79:94:
a2:89:a8:51:a6:da:0e:b1:38:a6:24:7b:ce:a7:c0:fb:42:ad:
41:61:c2:e9:51:aa:19:31:35:03:32:d4:e0:d4:d4:1a:05:e9:
26:53:6f:a6:7d:cd:5c:89:f6:d5:f4:f0:ec:2d:9b:d5:f6:c7:
42:ab:9d:a1:74:61:61:6b:b2:4e:ae:c9:75:56:6c:5c:78:57:
8a:77:61:a5:b5:6c:a6:ac:ef:bd:55:11:21:94:d5:3b:e8:99:
1c:6c:8f:85:4d:fe:ba:87:ab:bd:6d:1d:0b:70:74:a0:6b:6d:
97:b0:f9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org