Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
File: AS197715.roa (raw, json)
Hash identifier: R2ArNb5QEYPZeOPgsOOlwTghdBo4BqNy8yqtZfwWLeY=
Subject key identifier: 9D:F4:C2:74:03:5D:B0:2D:A5:A8:AA:80:52:D8:9D:E8:DC:D8:53:45
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5CCF34BE525DC1DB80A6EE47868A809AF31E87F3
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
Signing time: Wed 31 Jul 2024 09:00:50 +0000
ROA not before: Wed 31 Jul 2024 08:55:50 +0000
ROA not after: Wed 30 Jul 2025 09:00:50 +0000
asID: 197715
IP address blocks: 2a0f:9400:610d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:cf:34:be:52:5d:c1:db:80:a6:ee:47:86:8a:80:9a:f3:1e:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 31 08:55:50 2024 GMT
Not After : Jul 30 09:00:50 2025 GMT
Subject: CN=9DF4C274035DB02DA5A8AA8052D89DE8DCD85345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:e2:9a:50:3f:d7:4e:aa:ea:d8:05:6c:0e:
49:11:d5:3d:13:b0:5a:08:fe:d6:85:ef:35:25:19:
50:9a:93:0b:7d:d4:f5:27:e2:db:21:2f:47:35:d3:
7e:d5:44:8c:bf:97:d2:14:da:7c:ad:43:e4:9b:4a:
f6:34:e6:6d:ed:41:25:f3:5c:5f:f7:75:3d:bd:ff:
60:0d:95:f9:a5:db:be:c9:c2:3e:cc:97:0f:4f:b3:
f8:9b:3f:ff:71:1a:6b:07:1b:f4:38:dd:25:10:c4:
36:cb:a5:bf:49:59:14:ae:b8:0d:31:4c:69:7b:f2:
25:80:b2:e5:d8:00:89:c4:92:65:a6:a0:e0:47:d2:
2c:d0:ea:33:81:61:40:aa:1f:04:8c:0b:19:e8:8b:
e6:0f:b7:8e:29:b1:77:f0:6d:06:64:69:df:57:26:
22:90:05:7b:3e:3f:7c:1f:0b:fe:a1:01:db:2a:15:
fe:74:f0:52:8b:f5:7b:30:14:7c:4d:46:e4:fb:c0:
13:2e:11:c4:ab:9e:7a:7e:a2:27:cd:f7:db:f1:4f:
a5:2b:61:0a:68:94:83:ab:ea:c9:77:43:7a:26:10:
9b:b5:c9:35:ff:0f:ad:8e:ff:8d:91:a9:01:05:9d:
22:31:43:25:00:8a:c6:5b:7f:c7:7a:4c:bd:63:13:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:C2:74:03:5D:B0:2D:A5:A8:AA:80:52:D8:9D:E8:DC:D8:53:45
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610d::/48
Signature Algorithm: sha256WithRSAEncryption
7b:cf:7b:57:07:02:81:66:fa:c2:91:d2:b6:46:36:03:83:b1:
c0:7e:7a:63:20:50:be:76:cb:b3:98:5f:bc:ff:ef:ed:45:9c:
c0:7b:60:7e:e9:4b:10:be:e6:0e:9c:1d:d5:98:72:aa:5e:c7:
6b:98:24:5a:d2:c5:7a:1a:92:01:3d:79:32:91:30:8f:90:a5:
9b:0e:5a:b6:48:bb:f6:b3:ad:20:7c:12:aa:6a:4a:4e:b3:e5:
51:1e:cb:61:19:48:27:4e:bf:68:39:a1:d0:96:f2:95:4c:5e:
23:78:8d:e8:54:c8:fa:a5:1d:b3:38:b8:a5:46:e1:95:e9:30:
ee:d8:19:d5:c5:aa:a2:83:81:c9:36:3d:d8:25:1f:a9:f9:32:
32:a6:cd:10:6d:b3:81:1a:47:3f:e5:6b:67:26:67:3e:b1:4f:
1e:de:dd:9f:41:8d:a2:e5:85:89:e8:9a:82:5a:17:cd:a9:84:
cc:2a:5d:25:22:77:0a:3c:0b:ab:c1:c4:b7:6a:e2:cb:5a:d4:
79:0c:ab:10:cb:4b:60:e9:ea:3e:09:e1:d8:dc:aa:6b:8a:db:
13:68:84:68:f2:30:40:bf:26:96:c6:ee:a5:b9:a6:8f:d6:b0:
b9:bb:b0:b7:f8:1c:6b:c7:f8:91:22:db:5e:95:27:c8:69:fc:
6e:3a:3b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org