Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197103.roa
File: AS197103.roa (raw, json)
Hash identifier: fE1RcpdQBc6XBIfvJ5AJ1479ob1ivkquOpe+PQNX3ys=
Subject key identifier: FE:74:7A:F8:BA:14:6D:91:E5:96:43:92:5E:F1:7C:2F:67:27:C1:C6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 67A90453A9450F25B05EA334036C937FB630173E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197103.roa
Signing time: Fri 26 Apr 2024 23:39:54 +0000
ROA not before: Fri 26 Apr 2024 23:34:54 +0000
ROA not after: Fri 25 Apr 2025 23:39:54 +0000
asID: 197103
IP address blocks: 2a0f:9400:691e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a9:04:53:a9:45:0f:25:b0:5e:a3:34:03:6c:93:7f:b6:30:17:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 26 23:34:54 2024 GMT
Not After : Apr 25 23:39:54 2025 GMT
Subject: CN=FE747AF8BA146D91E59643925EF17C2F6727C1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:05:27:75:91:f5:f2:fb:fe:02:e7:27:d1:
50:94:2c:91:d7:1f:34:c6:6c:3b:d6:25:c6:81:66:
86:73:f5:cd:57:f5:db:0d:5c:d7:ba:a5:38:55:5a:
eb:79:fe:03:d7:34:02:6e:e3:88:58:c0:a1:32:3e:
44:aa:a5:1b:28:79:d8:56:23:81:13:85:5d:58:ef:
01:bf:a4:bb:af:4e:06:9c:c3:35:df:42:ca:31:ae:
07:9f:f1:3e:cb:73:2d:59:4a:65:6d:16:de:94:90:
4c:36:3a:48:f1:75:a4:82:bf:0e:c9:12:ff:6f:2d:
4a:b7:41:3a:d2:e8:ab:e1:a7:bc:75:23:fa:a5:31:
82:d8:b5:7f:2a:9b:7b:0d:f4:66:64:3a:ba:8a:32:
44:27:f2:5c:0d:4a:22:46:bc:f3:03:00:6b:b8:4e:
de:fc:f1:3b:9d:97:d4:94:2e:cb:95:68:db:94:da:
f9:17:e4:aa:78:32:ec:22:7d:d9:e1:d8:93:6e:30:
a6:c4:b4:66:f5:6c:6c:44:33:62:94:26:0a:13:7f:
7b:f4:ad:ec:69:e0:a9:53:30:e9:d1:e3:cc:37:c0:
4a:59:c9:fa:6c:d7:1d:ca:30:48:27:30:e2:2c:d4:
1c:20:e2:0f:0f:b4:35:9c:3c:86:4d:4a:27:21:bd:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:74:7A:F8:BA:14:6D:91:E5:96:43:92:5E:F1:7C:2F:67:27:C1:C6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691e::/48
Signature Algorithm: sha256WithRSAEncryption
8b:12:83:b7:4b:e8:24:bf:87:b3:ae:e4:f1:dc:b0:ce:94:7e:
01:4d:5e:34:85:ff:7d:b3:a9:45:79:e7:10:ad:36:a0:b4:57:
a2:2c:79:62:e7:54:0c:f9:f3:be:4f:f6:2b:81:02:c5:24:14:
3c:3c:99:2c:b6:a3:b1:4a:55:8f:a9:d2:8c:61:44:85:02:c2:
09:eb:cb:bb:e8:be:8f:61:7c:1f:95:9f:d9:cf:ff:7a:36:13:
cd:b1:8a:45:5b:b3:2e:0e:66:3b:9e:a3:93:29:eb:0c:39:ee:
e0:5e:6c:6c:e3:ee:21:fd:ea:1c:3f:b7:b2:ff:99:42:3f:d0:
33:49:cd:54:5d:49:d9:9b:b6:d7:e0:0f:95:11:58:8d:d4:ba:
7b:a5:b6:6c:9a:ba:66:27:ab:b8:b3:3a:1c:30:b4:3b:45:31:
73:80:72:e6:66:cb:77:0e:f8:48:92:86:67:b7:1f:1b:0d:46:
5d:f2:b4:14:99:b6:20:9c:07:5f:50:51:a8:80:8b:cc:e7:23:
61:45:1c:a6:42:a4:00:01:ee:e9:d9:ee:f6:34:f1:d6:46:7d:
43:b0:63:14:50:ae:c9:0f:55:d7:c9:31:e8:5a:04:6d:e8:a2:
d6:9b:1b:06:65:90:2d:59:03:77:59:d8:bb:2a:04:39:c6:64:
c5:88:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org