Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
File: AS198025.roa (raw, json)
Hash identifier: R5x/qCC4mtMzXdD0BYBQ0NDFKEdjd29olvh0KyG8k28=
Subject key identifier: E0:F3:EE:C9:7D:BD:51:5D:61:90:56:10:9C:4C:B2:93:AB:E6:D9:20
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 487F866C0F6F238A3863825D3BDE853AA23723B4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
Signing time: Wed 11 Sep 2024 11:06:40 +0000
ROA not before: Wed 11 Sep 2024 11:01:40 +0000
ROA not after: Wed 10 Sep 2025 11:06:40 +0000
asID: 198025
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:7f:86:6c:0f:6f:23:8a:38:63:82:5d:3b:de:85:3a:a2:37:23:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 11 11:01:40 2024 GMT
Not After : Sep 10 11:06:40 2025 GMT
Subject: CN=E0F3EEC97DBD515D619056109C4CB293ABE6D920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:19:f6:15:19:e7:f8:25:e7:cc:77:13:03:
85:b8:b9:82:8b:75:76:73:84:d4:fd:99:35:1b:78:
22:8c:21:14:dc:23:c8:da:ed:fa:e0:d6:0d:ab:8e:
c9:a5:b6:b3:56:a8:17:8f:d8:1d:36:01:5f:6b:8b:
37:64:3f:3f:aa:c5:8b:34:df:0e:ec:42:2d:44:44:
63:b5:93:89:07:7c:a8:b9:b8:a7:e2:93:35:cc:f2:
e9:44:38:35:3f:12:25:0b:5f:e4:ec:96:26:ec:6a:
f7:da:7a:f4:01:3e:6e:11:c6:5e:f9:6f:95:07:dc:
60:f7:f0:a1:22:c2:1e:83:be:dc:b6:81:69:78:f6:
ee:6b:82:ab:c6:b0:d1:f5:91:67:6a:ee:27:59:0d:
1e:af:51:da:2d:54:16:b5:d6:31:00:a5:2d:e1:78:
ab:77:82:6d:94:99:31:d5:2e:44:d3:de:e5:dd:c5:
78:3e:2b:8b:18:60:7e:8c:f4:aa:d1:1e:e9:90:a0:
fb:ef:90:c3:92:2f:b2:3a:8f:e2:ee:9b:39:6c:58:
31:bd:55:0d:f2:48:d6:62:37:5d:b9:ee:8d:36:f5:
b4:0d:ab:c9:9c:cf:e2:e1:cb:f1:ca:6b:9c:cd:98:
38:5c:d1:b9:ac:2c:90:4b:be:8d:29:99:0c:f7:63:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:EE:C9:7D:BD:51:5D:61:90:56:10:9C:4C:B2:93:AB:E6:D9:20
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
b2:d2:cc:19:f8:b3:50:91:a9:53:15:97:88:ba:ac:72:63:42:
ed:4c:cb:e3:99:3d:70:91:f6:d2:fc:bd:d2:32:e8:31:f4:f9:
42:67:42:d8:93:8d:90:69:4c:46:20:bd:94:34:15:ef:0b:03:
e4:ef:8c:31:20:f5:d3:28:fc:2a:e1:54:a7:fb:fc:6d:34:8b:
42:ed:d6:75:1a:b0:04:d7:b9:90:c9:71:24:b9:93:e0:22:5c:
78:01:9b:4a:7d:0d:6f:5d:f4:80:7b:d1:13:c1:c0:07:c4:1d:
bd:7a:f4:b0:e9:48:df:1b:8b:bd:b9:0c:da:00:38:a2:a4:59:
49:a2:94:35:9b:ea:ab:fa:ba:6d:db:75:5d:5e:40:c7:96:e9:
6b:99:de:cf:a8:4a:26:a2:cc:1e:4c:88:94:eb:5d:9c:4e:3a:
bf:3e:23:ec:a8:f8:33:43:8c:4b:3f:53:0f:f7:25:ae:d7:be:
7f:71:36:c4:cd:da:b9:12:06:f3:72:c1:a2:1c:ed:a8:a4:b5:
2e:60:a8:48:a6:56:eb:d1:07:aa:8f:31:42:9b:04:a0:48:ca:
31:84:3b:5c:02:70:3d:f7:09:87:b8:f2:5a:02:0a:8a:f4:ec:
f2:83:da:56:f4:c9:43:4f:ad:a4:f6:03:0b:af:fd:20:e8:a2:
53:83:9e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org