Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198075.roa
File: AS198075.roa (raw, json)
Hash identifier: +UDkNzcj8YsQtN4K4UAqKNNgICuO4oV73p7jBqK5Nf8=
Subject key identifier: 83:51:54:6D:A7:24:02:51:87:20:40:FE:A2:91:A4:34:2E:82:F1:7E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 22DBC831C2A485A043FD78B0CEF20EC0773232C0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198075.roa
Signing time: Thu 22 Jun 2023 12:33:23 +0000
ROA not before: Thu 22 Jun 2023 12:28:23 +0000
ROA not after: Thu 20 Jun 2024 12:33:23 +0000
asID: 198075
IP address blocks: 2a0f:9400:7385::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:db:c8:31:c2:a4:85:a0:43:fd:78:b0:ce:f2:0e:c0:77:32:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 22 12:28:23 2023 GMT
Not After : Jun 20 12:33:23 2024 GMT
Subject: CN=8351546DA7240251872040FEA291A4342E82F17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:92:5c:4b:5c:f4:7d:ee:df:3b:34:24:23:ba:
0f:2b:ca:29:f1:f1:4a:5e:58:2c:69:6a:66:5c:f3:
9b:01:69:95:ce:35:20:5d:3f:91:25:c6:79:04:d4:
bc:24:b6:39:18:11:67:6c:20:bb:f7:e5:c3:99:0f:
45:c6:cc:05:ea:73:95:7d:8a:59:db:53:6b:94:68:
d5:00:77:3e:74:50:56:59:f3:59:df:04:5d:9e:b9:
36:03:04:52:9c:cb:47:06:ad:ef:bb:fc:d9:77:c2:
21:82:47:b4:34:ec:23:0f:51:68:33:72:28:37:b5:
c2:b9:1b:f2:b0:31:25:8e:0f:27:f9:ea:a3:64:e4:
0f:cb:1f:15:a6:02:34:f2:22:ed:28:cc:31:dc:a4:
78:2b:50:31:0e:3d:f8:a8:d7:72:91:0f:6f:1c:2f:
7c:d3:fe:e2:b6:32:e0:78:66:42:3b:90:f9:00:74:
c2:83:9f:56:4f:10:0a:a9:a4:0e:70:31:63:ce:fe:
c9:80:34:68:84:2b:ed:66:50:61:24:bc:95:92:da:
77:d4:d0:59:0a:18:7d:f0:0e:9d:9f:27:a9:d1:53:
7f:af:07:ce:9c:c5:7c:c7:53:81:f5:e0:35:57:88:
c6:0f:26:39:8d:16:de:a6:13:22:ba:a6:da:39:b0:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:51:54:6D:A7:24:02:51:87:20:40:FE:A2:91:A4:34:2E:82:F1:7E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7385::/48
Signature Algorithm: sha256WithRSAEncryption
c7:eb:b6:08:3e:e8:0a:98:c0:6a:7b:1a:c5:29:f6:47:90:c4:
a7:4c:f8:39:94:54:84:41:fd:77:dc:d2:47:99:d4:b0:18:f2:
12:d5:11:93:9c:50:6f:3a:69:b3:71:4f:c8:35:52:3a:ac:62:
18:20:2f:f8:a4:e0:04:7f:e7:4d:18:95:fa:db:33:8d:cb:77:
fd:ca:03:af:9c:66:62:e0:b5:32:61:42:50:73:00:ba:ed:56:
92:b3:ee:43:89:7a:62:db:1b:90:cd:8d:32:6c:6e:84:01:e9:
08:9d:cb:8f:91:3a:1e:0d:47:15:e4:38:98:b1:f9:c4:52:4c:
8a:8d:18:f0:a2:4c:68:04:18:1f:91:74:de:36:84:85:33:f4:
ee:ee:a8:4c:1f:6c:4a:97:57:b6:d5:fb:50:fd:dd:09:79:df:
79:54:e4:0f:71:2b:be:40:c7:cf:5f:72:75:22:93:ec:8d:a0:
f0:7c:11:3d:10:fa:94:f1:b1:1d:a5:7d:85:22:7e:85:2a:14:
75:16:a3:b2:1e:a5:d0:a9:91:36:4b:09:ae:de:33:ee:68:61:
ed:55:bf:97:84:5e:f8:45:38:0f:dc:ac:bd:c8:d4:43:85:40:
ca:c7:1b:4d:be:14:df:18:f6:e9:18:18:9b:e9:5a:f4:77:38:
10:80:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:08 2024 by rpki-client on console-ams.rpki-client.org