Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: LEnc10qX8TR0sHeX+yzzq6bql9l7QkRpVMRkE4XPAsU=
Subject key identifier: DE:92:F4:2A:29:53:5D:10:DF:4C:0F:2B:1B:00:36:4F:68:83:CA:15
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2BC89D842DD9D90571FBE45F6D98F2AFBE3EE8E8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16509.roa
Signing time: Sat 11 Nov 2023 01:51:51 +0000
ROA not before: Sat 11 Nov 2023 01:46:51 +0000
ROA not after: Sat 09 Nov 2024 01:51:51 +0000
asID: 16509
IP address blocks: 2a0f:9400:6150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c8:9d:84:2d:d9:d9:05:71:fb:e4:5f:6d:98:f2:af:be:3e:e8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 11 01:46:51 2023 GMT
Not After : Nov 9 01:51:51 2024 GMT
Subject: CN=DE92F42A29535D10DF4C0F2B1B00364F6883CA15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:7a:13:0e:8a:ff:ee:68:7b:c8:2a:01:2a:
3a:0f:b4:0a:c5:a6:03:77:0c:7f:e0:b2:fc:f3:5e:
eb:f5:4a:13:7b:8a:4b:06:74:63:99:95:4a:e7:3e:
83:08:53:c5:7d:5e:5c:f6:49:9e:6c:d8:b2:a1:d4:
f9:ab:b1:f4:db:8d:b9:67:92:6f:96:14:85:6b:93:
cf:71:5c:3f:70:8a:5b:a4:00:5d:d7:c2:fb:4e:4f:
0b:a0:15:f8:16:1d:c4:07:47:be:78:c0:d5:ac:88:
d1:47:46:d9:7c:6a:b7:53:2f:f9:bd:8b:8c:55:ca:
7d:39:93:dc:1b:3b:d7:59:12:d6:b8:bd:9f:ee:05:
85:b3:67:87:bf:92:06:de:a0:39:7f:74:82:c8:d6:
64:39:6b:8a:e1:01:e1:aa:66:c6:4a:03:21:35:c3:
16:80:7e:46:83:5a:f2:7c:a9:2e:b3:0c:aa:d4:3b:
5f:dc:b5:1f:f7:28:ba:7c:6e:9e:87:6f:80:d9:bd:
b6:f8:52:3f:47:09:b4:e6:b7:c3:77:3d:ca:f9:5d:
bb:8b:3c:ce:b6:f4:e5:4d:2f:d3:78:f4:6f:ac:ec:
69:a9:f8:a0:e0:b3:99:9e:b6:da:14:6a:51:52:31:
e3:bc:ed:66:f4:9b:d4:58:42:cd:f6:11:92:bb:71:
74:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:F4:2A:29:53:5D:10:DF:4C:0F:2B:1B:00:36:4F:68:83:CA:15
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6150::/48
Signature Algorithm: sha256WithRSAEncryption
7c:bb:35:82:3a:fd:d9:d3:d6:6c:15:cd:5d:06:2c:fa:36:46:
c8:71:4d:71:5f:c1:c1:ac:51:72:98:e5:6f:7a:95:de:24:a5:
0f:56:88:e6:89:e0:ab:b1:e6:3e:df:84:31:1c:38:3f:f1:03:
8d:c6:16:b8:c4:aa:f5:98:ae:c7:0a:51:a1:f5:a9:d3:dc:df:
55:68:c5:15:4a:f9:af:3b:63:ce:0b:40:c7:da:47:ff:3b:3a:
ba:03:d3:73:6e:37:93:b6:cb:e4:fa:4e:76:b9:da:14:0a:d6:
9f:51:47:91:1a:15:f9:24:9a:d4:9e:7a:d9:c4:0d:c9:1e:b6:
3b:c0:0b:32:0c:07:94:97:f0:0d:ef:9f:5d:0d:f6:a5:e1:6a:
05:c2:60:a8:86:89:ed:71:90:a3:06:d1:9c:aa:e7:07:8b:a0:
b9:36:79:d3:6b:35:f2:18:58:6a:bb:04:97:45:8e:f0:a7:65:
c9:35:ae:63:9e:52:fe:a1:e0:a4:a3:7d:46:36:83:97:14:ef:
19:b9:0a:db:0c:cb:c5:41:df:9c:ca:f7:3c:01:90:69:e6:64:
09:62:1e:8d:93:3e:09:f1:25:f2:44:1e:64:13:97:a5:51:5a:
6a:83:69:54:6a:3a:6e:69:02:dc:60:29:67:bc:3a:1a:47:6b:
79:49:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 11:25:21 2024 by rpki-client on console-fra.rpki-client.org