Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
File: AS198025.roa (raw, json)
Hash identifier: A0/TYdx3MhFsH1RBpQRA+8dwu9SQw1P6lX9lzM1PUZg=
Subject key identifier: A3:ED:78:29:14:FD:BA:67:FE:12:37:34:AA:A4:14:36:4C:01:AF:67
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 658967E256987F178C6027C3DB6582E406702EFD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
Signing time: Wed 11 Oct 2023 10:58:58 +0000
ROA not before: Wed 11 Oct 2023 10:53:58 +0000
ROA not after: Wed 09 Oct 2024 10:58:58 +0000
asID: 198025
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:89:67:e2:56:98:7f:17:8c:60:27:c3:db:65:82:e4:06:70:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 11 10:53:58 2023 GMT
Not After : Oct 9 10:58:58 2024 GMT
Subject: CN=A3ED782914FDBA67FE123734AAA414364C01AF67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:21:27:71:21:72:0b:f2:91:d9:ff:e2:60:
8f:87:4a:ad:43:c4:83:3a:90:11:71:a8:5c:2f:87:
a2:c2:24:55:30:b9:9c:07:a4:be:f5:8d:57:ef:5b:
c7:68:c2:18:e5:19:75:3b:ef:33:bb:7a:cc:b1:d6:
ce:dc:73:e9:6c:af:72:59:b1:88:23:e5:cb:10:d6:
25:4c:cb:e5:2a:66:26:24:94:bd:73:e7:ec:ac:98:
b4:52:a5:d0:3a:a4:bb:c7:7f:9d:83:bc:04:db:72:
15:88:20:70:89:e1:42:e5:0f:55:45:34:c8:99:dc:
af:18:1c:a8:2c:bc:b7:4f:9c:4e:d8:99:93:3c:c0:
68:8b:aa:17:15:9f:1d:2b:6d:be:2d:d1:b1:45:81:
55:72:d8:2a:ee:5c:f3:4b:64:0c:c9:dd:15:91:af:
d0:0f:30:ed:a1:b1:06:aa:fe:6f:f5:fe:49:5a:a0:
b7:09:fa:b3:40:c1:10:b0:cd:9f:90:8c:e2:82:73:
07:9d:98:01:fb:c8:28:04:84:ec:d3:38:29:06:d3:
da:2c:59:1d:8f:f1:45:d6:b8:63:2f:4b:31:72:34:
88:8a:ce:84:d0:ba:a6:ff:17:03:56:ac:f9:6b:c8:
60:9d:32:90:a0:74:53:9a:71:44:ec:20:43:da:93:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:78:29:14:FD:BA:67:FE:12:37:34:AA:A4:14:36:4C:01:AF:67
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
3c:ae:83:70:73:d6:61:07:f7:ec:2e:c4:be:ee:b2:2b:0b:27:
11:1f:43:b5:d0:ef:1c:16:59:9c:2a:5c:6f:44:97:73:20:6b:
bc:33:09:cc:77:b2:12:be:76:6a:ff:1d:1f:25:0c:a0:50:da:
1b:14:96:c4:67:06:08:ac:72:05:b8:7c:2d:bd:12:ea:ba:74:
43:1b:b6:ea:54:f2:dd:d6:83:15:c8:a8:9a:5d:cf:06:fb:82:
f8:f8:ee:a5:5c:6a:e6:e4:51:04:2e:b0:ac:9e:02:f7:37:a4:
c6:b9:82:fa:8d:ae:67:f1:28:31:30:06:38:aa:8d:61:92:0c:
b8:c1:77:24:97:82:fc:fc:35:15:4b:47:ed:6e:59:18:4a:15:
64:9a:2e:c4:99:0c:cb:64:a5:f2:05:8d:0d:50:e6:c3:de:64:
70:8a:8c:65:40:e1:48:54:2a:8f:e4:51:a9:7d:67:e0:24:26:
dd:a0:86:28:6b:a4:2d:d2:9b:31:31:f1:58:82:02:03:cf:d2:
29:bc:16:a5:9c:55:5b:0a:ff:73:0b:ea:ce:fa:35:bf:f4:89:
f3:d6:42:5d:45:d6:1d:8b:61:fa:47:1a:19:d0:4d:2d:19:02:
d7:27:77:d1:58:de:d3:8c:40:b7:b7:7a:0b:fc:d8:ed:b0:11:
5b:67:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:17 2024 by rpki-client on console-fra.rpki-client.org