Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
File: AS197691.roa (raw, json)
Hash identifier: vHsfYDYtaHq703d7uaseB/o/+R5RRS3kxUMwO2anLrk=
Subject key identifier: E3:13:B1:C8:B0:EF:2E:D9:1F:E2:11:D2:CA:AD:C1:58:09:C0:7F:F8
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6C01995E534D3F00A83467FC3C1990B62F21927E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
Signing time: Sat 22 Jul 2023 07:37:57 +0000
ROA not before: Sat 22 Jul 2023 07:32:57 +0000
ROA not after: Sat 20 Jul 2024 07:37:57 +0000
asID: 197691
IP address blocks: 2a0f:9400:700f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:01:99:5e:53:4d:3f:00:a8:34:67:fc:3c:19:90:b6:2f:21:92:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 22 07:32:57 2023 GMT
Not After : Jul 20 07:37:57 2024 GMT
Subject: CN=E313B1C8B0EF2ED91FE211D2CAADC15809C07FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:71:79:6d:95:b7:60:5c:80:83:e9:b6:e6:
c0:cb:fa:39:bc:52:8d:f9:4f:83:70:de:56:26:98:
2f:9c:3b:a0:a8:c1:fb:2f:e8:d6:be:e9:cf:70:5c:
8b:c1:51:4a:7a:ff:7b:b2:de:ad:a2:61:bf:fc:31:
0e:2a:09:8e:cd:64:59:95:a5:44:a9:58:07:fa:db:
90:a1:8b:93:9f:f3:da:57:4b:53:81:ec:17:af:4d:
11:05:36:cd:f6:b2:4f:11:ec:53:53:88:93:29:24:
3b:57:76:ad:80:a4:15:31:54:88:bd:17:53:45:41:
32:1f:14:e3:1b:c7:a2:b3:f8:a7:3e:75:0b:c9:5c:
38:15:de:3b:d3:26:75:2c:55:1e:d6:a0:bc:7e:9e:
3a:89:7e:5a:1d:31:ac:67:01:d5:5c:57:f4:27:97:
fc:9a:5c:f3:cc:42:88:b9:a7:e8:51:01:7a:dc:06:
50:26:f4:96:fa:11:45:12:87:ea:7a:de:e6:04:23:
77:8c:d0:10:91:7e:8f:ba:b3:9b:f8:3a:89:f1:51:
e7:74:ea:c7:75:a7:3a:fa:15:6a:a9:14:a4:a3:92:
4a:e8:19:b8:ed:1a:30:8f:02:71:4b:e1:c8:93:24:
64:74:da:0a:ed:a8:e4:32:40:91:80:a2:d7:f8:02:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:13:B1:C8:B0:EF:2E:D9:1F:E2:11:D2:CA:AD:C1:58:09:C0:7F:F8
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:700f::/48
Signature Algorithm: sha256WithRSAEncryption
35:7d:db:4b:56:1a:b0:32:54:6c:a7:e4:d4:7c:95:b8:da:db:
1a:7b:3c:37:d2:2a:e0:a8:58:a5:02:e2:ed:54:d6:4f:51:d0:
3d:cc:bf:af:d9:40:52:3f:c0:39:18:00:92:eb:53:d8:8e:0f:
0e:63:16:3e:07:e7:7c:90:cb:79:18:76:64:2b:e6:a3:95:9d:
a7:69:c8:e8:9f:75:d6:d3:29:c1:bb:9b:d2:67:27:8f:28:8a:
b3:c5:52:34:5c:b8:c4:83:cf:80:5c:3c:77:cf:20:6a:4e:e1:
25:84:fe:ca:d9:9e:8b:f1:df:c7:e2:88:61:29:95:06:d9:65:
4c:0b:c5:e6:80:9e:7a:a0:63:2a:4e:57:49:44:75:f5:e8:38:
9e:79:23:9c:19:a1:28:8d:70:bd:e9:d2:76:24:eb:50:32:15:
88:d3:70:ff:21:e6:a2:89:58:02:ff:1a:08:89:af:e1:41:e4:
4f:64:c9:79:76:c2:15:d0:d1:df:74:42:f4:c8:e4:d2:d8:fa:
e0:f7:a2:fd:2f:a0:6f:41:1e:5b:4c:62:d2:ca:52:ac:01:43:
de:93:96:0c:94:ba:e4:f4:2a:ae:e5:bd:5b:6e:7a:84:c8:fc:
07:d0:b8:47:7d:a4:b5:37:e5:6c:22:13:e5:4c:ee:a1:56:10:
e5:9d:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org