Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
File: AS197691.roa (raw, json)
Hash identifier: 2BBzijoOnALnA3cvdUbfsi/YSKTsnw20vx/E9it4XHs=
Subject key identifier: 37:27:8E:E3:CA:E5:61:1A:45:06:96:58:E9:D4:8D:B6:6D:E8:0B:86
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 662DB53B3437F2EBC64EE4E864FC7E1CA8690952
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
Signing time: Sat 22 Jun 2024 08:36:55 +0000
ROA not before: Sat 22 Jun 2024 08:31:55 +0000
ROA not after: Sat 21 Jun 2025 08:36:55 +0000
asID: 197691
IP address blocks: 2a0f:9400:700f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2d:b5:3b:34:37:f2:eb:c6:4e:e4:e8:64:fc:7e:1c:a8:69:09:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 22 08:31:55 2024 GMT
Not After : Jun 21 08:36:55 2025 GMT
Subject: CN=37278EE3CAE5611A45069658E9D48DB66DE80B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:ea:22:fc:e4:b4:24:3f:96:3c:d2:71:e5:
6c:7b:9b:5d:9a:51:90:e5:d1:76:52:5f:c1:43:cd:
8b:4b:74:ce:f7:32:12:b1:e5:f1:7a:49:e6:80:e9:
e7:07:00:df:ce:9a:f4:b9:b9:b8:f1:e6:cb:a2:b8:
56:e6:b8:d9:79:20:43:68:55:b4:ab:7e:3b:2b:c5:
15:d0:4c:45:e3:04:cd:61:f3:e9:8d:b3:b9:2f:1e:
41:d4:14:a8:7d:06:29:4f:c0:f7:82:10:5b:36:7b:
bd:a1:db:80:8a:38:c8:d3:6c:6e:e1:78:1b:ac:23:
31:ba:02:5d:1b:83:44:14:74:79:7c:30:3c:43:2f:
3b:58:d2:cf:6a:3b:c0:7b:75:32:80:51:82:cd:2e:
2e:c5:e0:57:98:61:97:39:34:c8:0e:d7:fb:16:64:
16:3f:b5:58:59:87:b1:8d:01:19:29:c2:2c:1c:4f:
11:5a:f3:07:d8:37:6a:83:be:d9:11:d8:bd:66:b2:
bc:8d:78:9f:ea:3e:6f:2e:2b:db:7c:01:66:40:38:
77:fb:c6:d1:f0:3d:a0:41:1c:3a:45:c6:ae:2a:ab:
27:04:b4:eb:58:31:ab:93:c3:d2:60:3b:38:8b:cf:
fe:53:b1:b6:20:7b:a9:dc:83:43:1e:37:b0:51:a0:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:27:8E:E3:CA:E5:61:1A:45:06:96:58:E9:D4:8D:B6:6D:E8:0B:86
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197691.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:700f::/48
Signature Algorithm: sha256WithRSAEncryption
5c:0e:49:a0:35:3b:4f:b3:d8:84:62:59:b7:56:4c:39:f6:29:
fd:24:8d:19:b2:05:16:f3:76:f3:a7:ed:91:53:63:b3:0b:43:
59:b0:03:2a:5b:ce:80:8b:aa:94:85:76:8a:14:2c:26:89:da:
95:5b:05:80:c0:b3:2a:98:8f:5f:76:37:87:b6:6c:4d:7f:c7:
f8:b2:e1:af:e2:41:0d:35:97:82:c5:00:17:59:bd:ae:b2:84:
27:ac:57:c1:d8:3b:18:3b:d8:b6:c7:92:66:46:eb:0f:91:b9:
9d:3a:d4:36:48:26:cb:9b:29:8f:ec:a0:67:41:5a:a7:21:57:
4e:3e:5d:b5:89:1c:0b:73:4b:29:13:fe:d6:b2:ea:e8:b0:41:
5f:51:05:ca:d8:78:ac:f0:eb:62:67:87:37:c2:c1:c2:51:cb:
82:f8:78:f7:d8:94:d3:c3:44:3e:b4:06:df:3b:a2:98:ab:73:
c1:94:4c:a2:28:0e:62:67:d8:f5:a9:2e:59:f6:b1:4f:85:e1:
ff:85:32:dc:d9:9e:1e:37:00:65:13:fd:64:61:10:e4:f3:c8:
90:fe:0c:02:ae:8f:af:20:d1:76:28:51:ed:7a:d8:de:68:e3:
50:23:54:cd:f9:18:8e:b0:c3:11:74:ad:11:b6:1c:77:23:58:
21:a8:aa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org