Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197464.roa
File: AS197464.roa (raw, json)
Hash identifier: 46+EY0PyPNUe5AF86HV6lk+0xSe/Fhrw5Fnvtavayeo=
Subject key identifier: 9C:C3:55:B8:8C:8C:A7:DB:03:BE:37:A4:D7:1A:81:03:06:E4:91:47
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 79B570DF548DF5A24BB6CAA62401A8C72224E208
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197464.roa
Signing time: Fri 04 Aug 2023 20:13:58 +0000
ROA not before: Fri 04 Aug 2023 20:08:58 +0000
ROA not after: Fri 02 Aug 2024 20:13:58 +0000
asID: 197464
IP address blocks: 2a0f:9400:611e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b5:70:df:54:8d:f5:a2:4b:b6:ca:a6:24:01:a8:c7:22:24:e2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 4 20:08:58 2023 GMT
Not After : Aug 2 20:13:58 2024 GMT
Subject: CN=9CC355B88C8CA7DB03BE37A4D71A810306E49147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:f5:7c:62:32:7f:ea:bb:12:92:d3:3f:59:
bf:d1:f3:78:4b:be:91:ee:1d:39:75:a1:89:9e:ed:
bb:fb:7d:55:c9:3b:88:dc:12:af:5f:67:ba:8e:1f:
1f:d8:a3:12:41:17:e9:37:dc:51:84:b5:ec:79:2d:
5d:60:d2:9d:72:5a:91:bd:47:8e:d0:5d:fc:ea:33:
f6:30:e6:22:a1:c1:de:06:ea:4a:0d:3f:8f:cc:28:
f1:5e:bb:ba:30:34:a2:48:90:85:d7:7c:f3:1a:43:
2f:62:57:a3:a8:27:2c:d0:30:d7:b5:d1:60:39:be:
a8:b0:b7:4a:8e:39:fd:68:3e:fc:57:b5:94:9e:5c:
9c:de:25:79:cb:59:5a:e4:03:a1:a1:02:3f:39:09:
e1:9e:6b:b2:b2:4b:24:71:d9:1f:59:40:67:e3:fe:
1c:f1:8d:ff:c8:22:16:5c:34:24:7a:8b:4b:86:46:
23:b7:5f:73:bd:c1:b2:b7:66:16:a3:2f:48:44:f2:
c4:8c:50:be:65:70:cc:39:5c:d3:47:66:d5:f6:8b:
02:46:4a:49:7d:64:ef:f7:6b:df:57:a8:e1:62:98:
d0:cf:f1:76:b4:46:06:31:44:98:20:64:dc:be:f0:
e7:ed:b3:76:68:a2:3f:42:ea:b6:48:aa:db:fa:6e:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:55:B8:8C:8C:A7:DB:03:BE:37:A4:D7:1A:81:03:06:E4:91:47
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611e::/48
Signature Algorithm: sha256WithRSAEncryption
76:de:19:53:7a:cb:62:b6:16:fe:38:09:61:09:b2:c0:2b:cd:
f1:0f:db:67:8a:18:b6:a6:59:df:95:d0:47:92:f8:37:7b:4b:
d9:1f:6a:39:d0:e0:2c:2a:a1:5f:43:35:e6:04:df:28:46:e3:
9f:7d:70:c0:5f:86:5f:7e:9c:be:d8:d2:d1:51:8d:96:89:77:
26:bc:ee:22:80:08:0a:5d:44:9a:50:90:1c:62:1c:47:ce:0c:
7a:61:40:ad:28:96:56:82:74:a1:20:bd:da:e3:03:13:8b:6e:
8b:25:db:a6:b6:d1:21:7f:cc:ab:3c:12:07:9a:52:35:38:10:
e2:22:ac:9a:12:bf:fe:0f:e6:3c:fb:76:f1:e8:3c:10:db:8c:
98:53:de:45:21:8f:eb:32:d0:7e:19:b3:01:d7:ae:43:38:00:
73:ca:56:18:35:95:1a:fe:b0:4b:c5:b7:62:7b:6c:dc:4e:b7:
41:54:53:0d:9b:00:7c:2a:97:43:80:ff:0a:9f:1f:88:af:3e:
5e:ca:9e:56:1b:f3:0c:d1:a3:ad:cc:2e:f1:f0:8f:b7:11:95:
7e:d2:ef:40:3f:d3:a8:92:f9:2a:cf:91:40:f4:0d:3d:17:e3:
bd:5d:4e:a7:a8:99:60:b7:57:c5:26:b3:37:e2:a7:29:99:62:
02:ae:a9:91
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUebVw31SN9aJLtsqmJAGoxyIk4ggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MDQyMDA4NThaFw0yNDA4MDIyMDEzNThaMDMxMTAvBgNV
BAMTKDlDQzM1NUI4OEM4Q0E3REIwM0JFMzdBNEQ3MUE4MTAzMDZFNDkxNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyePV8YjJ/6rsSktM/Wb/R83hL
vpHuHTl1oYme7bv7fVXJO4jcEq9fZ7qOHx/YoxJBF+k33FGEtex5LV1g0p1yWpG9
R47QXfzqM/Yw5iKhwd4G6koNP4/MKPFeu7owNKJIkIXXfPMaQy9iV6OoJyzQMNe1
0WA5vqiwt0qOOf1oPvxXtZSeXJzeJXnLWVrkA6GhAj85CeGea7KySyRx2R9ZQGfj
/hzxjf/IIhZcNCR6i0uGRiO3X3O9wbK3ZhajL0hE8sSMUL5lcMw5XNNHZtX2iwJG
Skl9ZO/3a99XqOFimNDP8Xa0RgYxRJggZNy+8Ofts3Zooj9C6rZIqtv6bmf7AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUnMNVuIyMp9sDvjek1xqBAwbkkUcwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE5NzQ2NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhHjANBgkqhkiG9w0BAQsFAAOC
AQEAdt4ZU3rLYrYW/jgJYQmywCvN8Q/bZ4oYtqZZ35XQR5L4N3tL2R9qOdDgLCqh
X0M15gTfKEbjn31wwF+GX36cvtjS0VGNlol3JrzuIoAICl1EmlCQHGIcR84MemFA
rSiWVoJ0oSC92uMDE4tuiyXbprbRIX/MqzwSB5pSNTgQ4iKsmhK//g/mPPt28eg8
ENuMmFPeRSGP6zLQfhmzAdeuQzgAc8pWGDWVGv6wS8W3Ynts3E63QVRTDZsAfCqX
Q4D/Cp8fiK8+XsqeVhvzDNGjrcwu8fCPtxGVftLvQD/TqJL5Ks+RQPQNPRfjvV1O
p6iZYLdXxSazN+KnKZliAq6pkQ==
-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org