Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
File: AS200021.roa (raw, json)
Hash identifier: uFMK9Lrdw2CNDIS/DN0EHS4oKNrvDOWmqMIzwhBVIhw=
Subject key identifier: E3:FF:2B:46:2A:10:F5:21:21:64:36:63:16:F6:03:3D:0F:23:AA:6E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3DF9F4493920464BDF9A9F85DCE18DF5E594FAED
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
Signing time: Tue 11 Jun 2024 03:32:19 +0000
ROA not before: Tue 11 Jun 2024 03:27:19 +0000
ROA not after: Tue 10 Jun 2025 03:32:19 +0000
asID: 200021
IP address blocks: 2a0f:9400:6f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f9:f4:49:39:20:46:4b:df:9a:9f:85:dc:e1:8d:f5:e5:94:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 11 03:27:19 2024 GMT
Not After : Jun 10 03:32:19 2025 GMT
Subject: CN=E3FF2B462A10F5212164366316F6033D0F23AA6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:df:eb:5a:ce:3e:83:2f:0f:75:73:e9:f1:
1f:16:d5:28:30:50:69:af:ff:a6:87:ac:b7:aa:ad:
14:ba:3b:0e:f6:a3:ca:6d:4c:95:c8:b7:3f:96:2f:
94:c8:76:b6:ff:af:9f:9f:f8:7a:19:13:9b:4b:d1:
99:41:05:07:41:3a:b8:ea:26:81:a0:2c:a2:ad:e7:
8f:ef:f3:e1:63:8e:ce:68:56:11:32:93:14:a6:48:
6b:67:79:38:11:c9:1c:3c:09:3f:48:71:ce:6e:57:
c7:1c:24:fd:47:b3:70:21:bf:4e:e0:a1:e3:e1:0b:
1c:a6:bf:2e:f0:a1:9e:50:f5:94:c2:61:03:d4:db:
6a:5c:13:c5:42:9f:e5:71:f4:d3:94:a6:cc:83:10:
12:98:4b:ec:54:96:f7:06:fb:5b:c4:c3:df:57:d1:
96:32:2e:40:26:91:0d:22:1a:39:86:53:dc:31:84:
b8:25:90:dc:18:a3:2f:87:f7:f2:e4:d5:ab:e5:d9:
2c:7e:ec:ac:cb:06:2c:66:8b:78:d2:65:06:0b:5b:
f8:d4:6a:d5:d1:de:81:c5:53:30:a3:27:5e:bd:d6:
69:30:b8:e7:08:02:da:4b:52:44:b8:d1:23:3d:88:
e2:27:f5:3e:d8:90:c7:01:d7:97:d0:6e:5b:56:f9:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FF:2B:46:2A:10:F5:21:21:64:36:63:16:F6:03:3D:0F:23:AA:6E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
85:ee:e4:2b:b9:7b:6a:bc:aa:f9:ef:82:af:7b:39:fb:c5:64:
c5:bf:69:3c:ea:e1:88:31:bc:4f:a6:ff:88:e6:c8:14:b4:03:
e1:dc:ed:5b:45:7e:44:5d:69:bb:b7:10:01:b9:45:3d:fb:8f:
1f:66:2c:ae:a1:cc:05:56:09:7a:51:e8:35:65:62:e2:af:3c:
aa:65:ac:db:73:11:dd:f8:67:cf:7e:37:0d:9f:0a:9f:25:ec:
95:2b:38:0e:88:9f:20:18:67:13:9e:f2:d0:30:1c:43:d0:ca:
c9:c6:fb:a4:92:94:2f:62:16:62:24:0b:c5:92:1c:64:80:ff:
09:ec:46:6d:a3:26:09:d3:b2:0a:5e:22:e1:8c:34:fa:d1:ac:
cd:64:0e:48:2f:4e:f7:a8:98:fa:21:25:a7:07:d9:77:54:a7:
b4:8e:71:ae:a5:81:cf:a0:da:14:a7:b7:06:8c:5f:ee:07:dd:
88:ba:c3:e1:e9:32:c3:d7:4d:db:6a:24:b0:a1:01:fd:4b:a9:
8f:9f:8a:b6:bf:a7:7d:36:7e:ff:bb:19:ed:f0:3a:32:c6:ab:
fc:d0:f5:78:75:d9:69:37:94:07:e2:d8:bc:08:eb:46:db:86:
e4:18:fa:83:e3:e8:ae:a6:5b:52:4b:02:7b:81:26:90:69:f2:
40:6d:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:21 2024 by rpki-client on console-fra.rpki-client.org