Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
File: AS200021.roa (raw, json)
Hash identifier: FaYwr11f6/a06bu8MAEkd/WXxxkf0sk3P06K96QE6PQ=
Subject key identifier: 75:5E:A3:99:C0:01:A5:2A:B9:77:83:A0:69:E6:DA:F7:FB:6A:66:EF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 74E42B5CFC6055849E985D1819C77FD604CE4D8A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
Signing time: Tue 11 Jul 2023 03:26:07 +0000
ROA not before: Tue 11 Jul 2023 03:21:07 +0000
ROA not after: Tue 09 Jul 2024 03:26:07 +0000
asID: 200021
IP address blocks: 2a0f:9400:6f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e4:2b:5c:fc:60:55:84:9e:98:5d:18:19:c7:7f:d6:04:ce:4d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 11 03:21:07 2023 GMT
Not After : Jul 9 03:26:07 2024 GMT
Subject: CN=755EA399C001A52AB97783A069E6DAF7FB6A66EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:9c:67:5e:9b:8e:f2:63:3b:d4:14:97:9a:
29:c1:8b:7e:1f:35:4c:ca:e4:1d:b7:a4:04:39:7d:
df:d8:ac:f6:cb:e2:96:aa:7a:5e:25:0a:01:e0:32:
f4:a8:3b:9b:e6:bc:9d:13:58:1e:3f:43:66:19:bf:
bf:27:45:3e:62:4d:86:b8:61:06:ca:13:ac:fe:ea:
ff:2a:e9:25:b1:17:e0:cf:7c:e4:78:22:20:59:4f:
b3:0a:02:36:3e:13:fd:b3:c6:5c:a5:9c:51:25:63:
18:81:4d:05:9a:2d:42:f3:28:42:01:d4:bc:18:25:
79:3c:ff:c4:df:ba:a8:2d:41:0c:8a:32:9e:91:de:
15:c7:77:e4:8d:c9:38:70:30:a2:38:09:6d:dc:a0:
45:0c:a9:61:ca:52:80:82:ba:ab:3d:23:b9:03:4c:
13:c8:96:96:85:e2:bc:1b:39:23:e3:c6:d9:3b:f9:
30:11:d2:ce:63:5a:00:a8:bc:47:d7:25:36:67:30:
8e:29:1a:35:97:94:27:4f:99:a2:e6:b3:16:b3:91:
09:ec:73:7f:08:10:7a:21:78:d7:6f:4d:6e:89:db:
97:d7:87:da:85:a2:ae:e2:ca:9b:0f:1c:66:d7:e5:
e6:ad:6f:4c:51:e5:59:7a:8e:8c:75:2a:96:df:83:
13:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:A3:99:C0:01:A5:2A:B9:77:83:A0:69:E6:DA:F7:FB:6A:66:EF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
1c:db:8f:3d:65:82:22:59:4f:26:9d:24:ab:69:ed:ab:e4:a1:
61:30:78:59:31:43:a9:57:36:a5:2f:6e:e1:11:12:a0:d8:d2:
56:87:10:79:a3:55:dc:0e:24:4a:12:4a:68:c3:17:fc:a9:19:
a2:c9:46:3b:bb:87:aa:20:2d:d8:b1:d3:b8:78:e0:cb:cb:e8:
c7:9b:87:30:a0:97:e9:3d:31:a2:b0:23:6a:d5:84:19:71:72:
01:f6:5b:c3:a3:85:c3:b2:25:8d:9d:d1:30:35:f5:90:7a:42:
82:9f:5d:c4:2b:b8:b7:15:6a:65:86:0f:ad:0d:ee:54:bf:84:
0a:2d:21:91:d8:76:bc:51:3b:06:c8:26:fa:c4:cf:01:f3:82:
a0:17:65:f5:c5:c6:3a:54:17:46:ed:e7:d8:25:b8:f5:b7:03:
a4:d7:13:46:34:c6:10:5e:b7:94:c6:07:ab:a0:48:bb:c9:a2:
f1:ff:93:b4:bc:c4:54:10:1f:f8:c8:16:ba:a7:9c:a7:c4:69:
f1:45:18:47:81:d3:8e:aa:87:b2:1a:2f:f4:7a:39:d4:ec:69:
48:3f:58:fe:01:ee:97:9a:20:10:85:af:19:3c:3b:81:3b:83:
ba:fa:a6:76:66:be:89:15:a4:2d:db:0a:e6:54:44:86:3e:90:
3f:7e:6d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:08 2024 by rpki-client on console-ams.rpki-client.org