Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198959.roa
File: AS198959.roa (raw, json)
Hash identifier: Kjc8qUWX6+/KOXbClaPt8neweTSy/on+JJz9pAPPKLI=
Subject key identifier: F4:78:90:B4:82:11:4C:9A:0B:F5:AE:79:0F:34:1F:71:50:6B:71:A9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C8E19D030C28DD879A47CE6D413D1E135B19B05
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198959.roa
Signing time: Thu 07 Mar 2024 13:31:12 +0000
ROA not before: Thu 07 Mar 2024 13:26:12 +0000
ROA not after: Thu 06 Mar 2025 13:31:12 +0000
asID: 198959
IP address blocks: 2a0f:9400:611c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:8e:19:d0:30:c2:8d:d8:79:a4:7c:e6:d4:13:d1:e1:35:b1:9b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 7 13:26:12 2024 GMT
Not After : Mar 6 13:31:12 2025 GMT
Subject: CN=F47890B482114C9A0BF5AE790F341F71506B71A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:da:9f:5e:93:06:49:e0:15:0e:37:3a:92:
fa:85:2d:7a:24:21:05:c3:f0:6d:9e:3f:6d:7d:d9:
17:8e:e9:e9:03:e9:0f:92:f7:6b:29:78:1b:47:64:
fc:db:1b:c2:02:45:9b:e6:a2:66:13:ae:0e:cd:39:
36:79:ab:d6:6c:df:61:8d:b5:e2:c3:17:5b:8c:02:
a9:51:0e:9d:10:65:d1:ee:f4:1c:7e:e9:a7:76:bf:
9f:a1:ba:74:f2:9b:6a:2f:a2:50:b7:24:1e:2e:e2:
05:4b:1d:15:6a:86:c3:af:07:2e:d9:01:1d:1c:dc:
35:a6:ac:f6:cb:98:5b:47:61:ff:c3:c1:7b:8e:77:
06:a8:bd:c7:ac:3e:b6:2a:24:01:ba:e7:68:24:b8:
bb:68:03:74:a9:02:0a:ff:fa:1d:08:46:75:f1:8d:
03:f9:4f:13:9e:e2:e3:4e:28:c7:74:13:d2:32:cd:
ab:78:60:59:8e:93:0c:d4:4b:a3:e6:f1:93:34:fa:
69:80:82:24:ed:7a:3d:6f:e7:78:f3:c9:c3:a8:84:
55:72:e8:2b:9a:16:99:52:b1:46:30:92:63:ac:74:
1b:97:7c:d6:8f:b8:86:67:ae:3c:0f:a1:ac:50:c5:
01:92:26:bc:3a:dd:d6:15:72:e2:82:62:ae:77:7f:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:78:90:B4:82:11:4C:9A:0B:F5:AE:79:0F:34:1F:71:50:6B:71:A9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611c::/48
Signature Algorithm: sha256WithRSAEncryption
56:b6:23:cf:bb:f9:63:3c:21:b0:01:74:14:f4:48:11:e1:1e:
ee:aa:ed:48:24:4e:b5:af:1c:2b:7e:79:c8:77:fc:03:78:e3:
08:3c:6e:8f:28:de:2b:77:3f:4a:48:2e:e8:4f:60:10:cc:ea:
dc:8b:2e:bd:4b:93:bf:34:4a:38:78:27:d1:65:d0:98:af:2e:
c5:29:e1:6f:3a:01:2a:e3:52:23:98:34:db:3e:1b:f4:5f:ca:
61:bb:90:a0:1f:24:cb:40:fe:f8:b3:ca:5b:53:e7:dd:aa:00:
d7:36:c0:1a:d2:38:22:24:a4:7b:f7:b9:05:fb:f8:e8:97:1b:
22:1e:e1:27:79:b5:13:8f:93:19:d9:e6:90:28:61:9b:29:a4:
92:2e:80:5d:f0:f6:1e:a0:c2:7c:4d:f8:7c:70:74:b2:27:c1:
c3:f0:97:d8:ea:ba:e5:a7:c9:4a:c0:f2:9b:0b:aa:1c:5c:b7:
63:5b:c2:11:17:5c:19:40:1f:f9:6e:0f:00:5f:56:69:e5:2f:
29:ae:7a:94:73:b4:99:9c:a1:d3:ad:59:07:f2:6b:f3:8a:60:
b5:6c:53:0d:d8:ef:2a:1a:08:16:61:fd:cf:8a:71:44:96:f5:
1c:9b:24:1f:8a:a0:ac:82:3f:57:bc:e7:75:2a:84:77:23:fe:
87:d6:a8:64
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUHI4Z0DDCjdh5pHzm1BPR4TWxmwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDAzMDcxMzI2MTJaFw0yNTAzMDYxMzMxMTJaMDMxMTAvBgNV
BAMTKEY0Nzg5MEI0ODIxMTRDOUEwQkY1QUU3OTBGMzQxRjcxNTA2QjcxQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZidqfXpMGSeAVDjc6kvqFLXok
IQXD8G2eP2192ReO6ekD6Q+S92speBtHZPzbG8ICRZvmomYTrg7NOTZ5q9Zs32GN
teLDF1uMAqlRDp0QZdHu9Bx+6ad2v5+hunTym2ovolC3JB4u4gVLHRVqhsOvBy7Z
AR0c3DWmrPbLmFtHYf/DwXuOdwaovcesPrYqJAG652gkuLtoA3SpAgr/+h0IRnXx
jQP5TxOe4uNOKMd0E9Iyzat4YFmOkwzUS6Pm8ZM0+mmAgiTtej1v53jzycOohFVy
6CuaFplSsUYwkmOsdBuXfNaPuIZnrjwPoaxQxQGSJrw63dYVcuKCYq53f7QPAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU9HiQtIIRTJoL9a55DzQfcVBrcakwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE5ODk1OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhHDANBgkqhkiG9w0BAQsFAAOC
AQEAVrYjz7v5YzwhsAF0FPRIEeEe7qrtSCROta8cK355yHf8A3jjCDxujyjeK3c/
Skgu6E9gEMzq3IsuvUuTvzRKOHgn0WXQmK8uxSnhbzoBKuNSI5g02z4b9F/KYbuQ
oB8ky0D++LPKW1Pn3aoA1zbAGtI4IiSke/e5Bfv46JcbIh7hJ3m1E4+TGdnmkChh
mymkki6AXfD2HqDCfE34fHB0sifBw/CX2Oq65afJSsDymwuqHFy3Y1vCERdcGUAf
+W4PAF9WaeUvKa56lHO0mZyh061ZB/Jr84pgtWxTDdjvKhoIFmH9z4pxRJb1HJsk
H4qgrII/V7zndSqEdyP+h9aoZA==
-----END CERTIFICATE-----
Generated at Sat May 4 03:56:05 2024 by rpki-client on console-fra.rpki-client.org