Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199974.roa
File: AS199974.roa (raw, json)
Hash identifier: d91UnYaN+RemP7VX6RCC1i7PtgwHiS37kuDSJwR8zJ4=
Subject key identifier: D8:A9:EB:10:B1:59:30:52:F6:29:CC:40:CB:EF:2B:59:78:04:7E:D1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 27C2BC9495898917173B23E1313E1B97339A2CA8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199974.roa
Signing time: Tue 23 Apr 2024 02:12:27 +0000
ROA not before: Tue 23 Apr 2024 02:07:27 +0000
ROA not after: Tue 22 Apr 2025 02:12:27 +0000
asID: 199974
IP address blocks: 2a0f:9400:7100::/40 maxlen: 48
2a0f:9400:7200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c2:bc:94:95:89:89:17:17:3b:23:e1:31:3e:1b:97:33:9a:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 23 02:07:27 2024 GMT
Not After : Apr 22 02:12:27 2025 GMT
Subject: CN=D8A9EB10B1593052F629CC40CBEF2B5978047ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:eb:71:86:95:25:1c:0d:d1:d4:3f:1c:ad:
1e:f4:02:3e:41:eb:58:ce:5a:ed:41:7b:8f:60:0e:
b3:35:ad:6f:be:70:8a:51:47:f0:b5:a7:ad:14:09:
d6:b4:08:d0:e2:20:2d:95:58:a7:3b:7b:f5:2b:8d:
b4:f0:a9:f9:67:af:d3:c7:2b:51:91:55:81:d1:d6:
26:d0:69:e7:5f:1c:fa:bf:ec:0e:b1:8c:58:01:ee:
3e:f0:49:33:af:e5:1e:95:fa:d0:fc:6f:01:57:61:
4b:d5:58:5c:55:38:d6:5b:70:08:81:9b:c1:fa:48:
a1:4a:8d:73:32:1e:ad:ab:d2:b1:64:11:eb:1c:24:
0e:66:98:09:15:6f:84:be:8a:49:08:38:74:1c:ea:
bf:9e:4b:f9:13:ab:79:f7:98:a7:4d:35:f2:7a:b0:
2f:d2:ac:51:b6:33:cd:ba:e5:5b:4b:96:0d:61:a7:
5b:2c:dd:22:19:8f:53:a5:e9:e9:be:17:33:34:23:
8e:5a:fa:5e:8d:49:e6:c3:66:5d:c3:f7:02:bc:7b:
fa:b2:50:45:52:1b:50:34:f8:5e:02:5f:a7:32:41:
22:a2:60:00:18:26:87:e4:90:a5:fb:55:ba:15:7f:
d6:b1:ea:2a:11:ea:84:85:20:d9:e9:ec:79:e5:2d:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:EB:10:B1:59:30:52:F6:29:CC:40:CB:EF:2B:59:78:04:7E:D1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS199974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7100::-2a0f:9400:72ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:14:bc:97:f9:bc:00:14:63:2b:d6:cd:64:24:d7:6d:3b:bb:
a8:13:da:2d:65:1c:c1:02:bd:e2:c9:5d:03:8d:e9:b0:23:c0:
86:fc:43:a9:6d:fa:20:5f:7a:58:ad:c7:ac:f6:2d:6f:7f:a8:
92:75:d6:8e:e2:59:e8:32:4b:e0:72:9e:49:8b:df:ec:1f:7d:
29:1e:dc:8f:39:58:a1:c5:8f:bd:51:88:3f:3b:a5:e5:16:d3:
8a:55:4e:e4:df:38:1a:b5:8b:6d:be:e7:77:79:f6:73:d3:1e:
04:7b:7b:b7:fd:67:59:ee:c9:76:25:c4:98:ba:6b:6a:17:fa:
27:9c:68:ad:80:c9:7e:9b:c4:c2:eb:ab:d0:af:49:64:fd:4e:
dc:cc:6c:1c:5f:71:0b:7a:97:b7:73:ef:03:5c:48:43:22:3e:
0a:14:e4:f3:ad:e9:e5:7a:fb:b9:00:6e:68:5a:4c:12:b5:36:
1b:08:22:f4:1d:99:99:56:a2:07:9b:67:b6:d9:fd:f3:d3:62:
c5:25:62:af:cc:18:b2:c5:0b:b1:6f:8c:87:ed:88:f2:43:8c:
9f:be:81:ff:a8:b6:f2:01:6f:05:5a:97:66:d6:cf:1a:27:4c:
b0:19:25:b3:82:87:54:2a:c7:0f:8d:ab:75:e1:9a:b7:24:40:
12:7a:b3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:17 2024 by rpki-client on console-fra.rpki-client.org