Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198889.roa
File: AS198889.roa (raw, json)
Hash identifier: snxl9PeOf9qtV0g11wwYIHg0gCfocZwSH5XybbNjErs=
Subject key identifier: 03:A3:27:EC:C2:0C:9C:81:65:8C:9A:89:73:4B:E3:8B:73:D9:6B:86
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1BBE838936E128B9DF6FE07023774488FDD1F13A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198889.roa
Signing time: Wed 03 Apr 2024 16:04:34 +0000
ROA not before: Wed 03 Apr 2024 15:59:34 +0000
ROA not after: Wed 02 Apr 2025 16:04:34 +0000
asID: 198889
IP address blocks: 2a0f:9400:6100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:be:83:89:36:e1:28:b9:df:6f:e0:70:23:77:44:88:fd:d1:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 3 15:59:34 2024 GMT
Not After : Apr 2 16:04:34 2025 GMT
Subject: CN=03A327ECC20C9C81658C9A89734BE38B73D96B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:5d:4a:f9:15:cc:f0:62:64:36:ff:19:73:
b7:be:d6:33:4b:ee:e4:00:76:29:a8:c5:e1:3c:e1:
47:08:f2:fd:19:85:8c:36:d4:86:1a:35:db:b8:38:
10:0b:1c:eb:0e:a4:c9:a3:1e:83:8b:b6:b0:36:06:
c2:13:06:b9:06:21:6e:39:83:35:38:8f:25:a5:b9:
10:0d:da:68:91:2f:37:ca:44:46:72:cb:0f:37:a1:
f7:e9:0d:a3:c5:90:6c:2f:97:17:1c:fb:b1:83:1a:
fd:6f:b4:a3:82:ae:02:f8:dd:e7:f6:dd:3f:9e:d4:
da:c0:cb:e2:5b:ba:0b:5d:53:27:89:a7:58:4c:4d:
50:af:da:b5:7b:fd:ee:bf:b6:f3:e4:5e:53:af:ff:
8b:9d:ad:35:c9:68:00:2e:96:70:7b:0a:4c:51:c7:
1b:d1:61:35:82:92:05:7d:f7:6e:f2:63:03:3d:a1:
28:de:ae:6c:cc:8a:9c:35:13:20:fe:9d:ec:0c:14:
ed:71:fe:ac:38:91:f0:2e:12:90:c0:ca:b7:60:74:
fc:79:10:d1:12:70:49:92:41:ba:ed:b5:c3:0a:ef:
e9:95:67:b0:90:f9:cc:0e:eb:97:49:aa:b1:a7:59:
e4:a3:c6:9e:aa:4c:63:69:f1:84:71:49:46:22:8a:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:27:EC:C2:0C:9C:81:65:8C:9A:89:73:4B:E3:8B:73:D9:6B:86
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198889.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6100::/48
Signature Algorithm: sha256WithRSAEncryption
18:e8:86:27:2b:f9:df:a9:03:b1:a6:80:3c:82:58:d5:0f:9e:
e7:1c:59:6d:07:b3:07:7f:96:04:cf:f0:f8:08:61:57:e0:9e:
44:20:ce:08:55:0f:1c:95:fd:51:3b:61:8f:6f:6f:ed:36:5d:
15:95:f9:bc:b8:3c:10:70:9c:5d:06:45:c0:ba:68:04:81:44:
df:2b:c8:ce:a4:57:df:88:35:42:e1:63:a4:62:9b:39:cd:23:
59:a3:d5:40:6a:6e:d0:76:12:94:77:c8:fe:d1:5b:90:1f:f5:
3b:6b:4d:4d:7b:c7:65:f0:c0:c1:12:e3:dc:3d:c4:37:21:0b:
41:ef:63:19:6b:85:39:d5:66:9b:37:6d:a8:b2:ed:d0:84:08:
8f:c8:1f:47:a0:7b:2a:12:85:1c:89:b8:b4:fc:a5:00:47:28:
55:9f:be:c9:d1:97:bf:92:56:3d:98:5f:c6:0a:e5:48:3b:3f:
4c:63:d1:c7:44:5f:10:7d:a5:fc:98:a8:87:0a:64:34:58:d9:
83:19:cf:e8:ca:e4:fe:bd:c4:9c:78:e3:4a:a8:3d:e5:2a:57:
19:09:25:12:18:d8:22:09:0a:ae:fb:98:61:96:fe:3f:74:06:
24:9e:b1:c4:51:d5:02:b9:61:69:f3:84:2c:b6:59:99:35:9a:
9c:80:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:17 2024 by rpki-client on console-fra.rpki-client.org