Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197464.roa
File: AS197464.roa (raw, json)
Hash identifier: i3XgMsJo22jZNBDYzc9PwU95RIwxeTOQm3nT8JXSBmQ=
Subject key identifier: FE:BF:96:0D:FD:EE:38:2C:E4:42:D8:97:3A:F4:40:AE:3B:9D:30:95
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 978F0EC3F745725FA13F24747BC6BD6BEF4CD5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197464.roa
Signing time: Fri 05 Jul 2024 20:38:11 +0000
ROA not before: Fri 05 Jul 2024 20:33:11 +0000
ROA not after: Fri 04 Jul 2025 20:38:11 +0000
asID: 197464
IP address blocks: 2a0f:9400:611e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
97:8f:0e:c3:f7:45:72:5f:a1:3f:24:74:7b:c6:bd:6b:ef:4c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 5 20:33:11 2024 GMT
Not After : Jul 4 20:38:11 2025 GMT
Subject: CN=FEBF960DFDEE382CE442D8973AF440AE3B9D3095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:ea:44:22:29:bf:48:ec:09:80:c8:ff:dc:
2c:c2:5f:cd:11:b4:f0:ff:49:66:0e:99:34:b9:8f:
d1:ca:e3:b5:b4:d5:04:d9:b5:98:72:0a:9e:00:66:
39:e0:83:32:c4:7e:4b:7c:ce:7d:18:cc:93:e6:87:
10:b0:06:2b:c9:d9:cc:bb:41:83:c1:91:8b:a3:cf:
d8:36:32:63:f5:c4:85:ae:cd:80:e0:43:66:d2:3f:
b8:91:70:77:07:06:30:cb:88:ae:10:90:6c:80:62:
43:4a:06:44:f7:e8:9e:83:c6:6a:b4:83:6d:3d:15:
7d:51:1b:50:69:49:03:64:a7:c8:f8:15:63:93:30:
21:22:35:90:bd:ef:21:f3:ee:57:62:51:d1:6f:00:
ab:01:af:f7:b8:4e:68:f6:de:a2:af:ce:3d:cb:f8:
dd:e2:f8:c2:4a:76:98:3d:96:fe:50:cb:2c:e6:61:
ac:00:f8:d5:74:3d:e5:5a:f1:90:d7:e3:8e:ab:b3:
cf:92:57:52:70:4e:ae:83:23:fa:47:53:f6:bc:a2:
f4:92:94:56:26:bf:31:23:c4:e2:37:0f:59:75:ac:
1b:44:39:b3:0c:90:d9:81:49:e7:68:a6:4f:5a:05:
72:55:68:f5:15:0c:8b:58:64:1a:2b:ed:cd:6b:19:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:96:0D:FD:EE:38:2C:E4:42:D8:97:3A:F4:40:AE:3B:9D:30:95
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611e::/48
Signature Algorithm: sha256WithRSAEncryption
0d:60:e0:44:52:79:dc:e6:28:30:a9:63:64:fa:af:e9:8c:e9:
49:4c:b8:8f:8a:6b:65:16:09:68:5d:25:a5:d0:44:a9:d6:38:
86:30:54:c6:94:c7:04:7f:31:c5:5c:13:ff:f2:49:3f:5b:7f:
62:cb:6c:b5:0f:ed:53:ec:e2:98:fe:27:d5:c1:62:a7:7b:9b:
3f:79:3f:84:08:11:2f:70:63:02:1b:6c:0d:c6:80:2a:82:6d:
8f:0a:a8:77:49:d3:bc:ca:95:a0:fc:9d:df:c3:34:89:50:4c:
4d:86:15:28:ce:2d:e9:15:af:c0:2f:4d:2c:09:3b:a1:54:18:
28:53:eb:74:8c:17:7d:8b:9c:a1:10:a2:1e:d2:80:5c:18:45:
a6:00:95:45:79:29:53:e0:ab:d1:18:24:4d:8c:cc:13:f0:7d:
bc:f1:5c:7b:46:ef:dd:e9:30:64:58:f8:be:cd:89:db:c1:b5:
ee:b2:ef:a5:d6:17:fc:fd:bf:04:3c:a7:ce:6a:73:a9:22:93:
44:91:78:c8:53:dc:58:f2:55:28:e2:50:b2:6e:04:76:ac:d6:
8a:84:f7:1d:80:40:1c:ed:17:1a:89:1e:a0:c8:84:67:2b:87:
c3:6e:d4:e0:3d:47:b9:e0:90:75:af:67:d9:f8:d6:d2:24:c8:
52:46:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org