Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
File: AS200182.roa (raw, json)
Hash identifier: dvDImGa/P0QbSlXAjL/GhUR3CqS/eI3TgtbJxMjlXCM=
Subject key identifier: 6D:FE:A7:55:A3:0C:AC:B2:A6:3A:0B:F4:BD:21:72:99:BF:BC:F2:D9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 779A772585E71A4B5E6151039F6C6E5784D4E222
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
Signing time: Sun 13 Aug 2023 11:25:01 +0000
ROA not before: Sun 13 Aug 2023 11:20:01 +0000
ROA not after: Sun 11 Aug 2024 11:25:01 +0000
asID: 200182
IP address blocks: 2a0f:9400:6120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9a:77:25:85:e7:1a:4b:5e:61:51:03:9f:6c:6e:57:84:d4:e2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 11:20:01 2023 GMT
Not After : Aug 11 11:25:01 2024 GMT
Subject: CN=6DFEA755A30CACB2A63A0BF4BD217299BFBCF2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:60:01:b0:c4:0c:f8:6e:e8:ea:09:d9:29:
d3:07:cd:37:8f:fa:5d:97:95:c7:4c:b6:76:5a:13:
e5:3c:0c:d7:0f:09:ff:ef:0d:2e:0e:26:a3:c5:28:
33:21:17:c4:96:c4:1f:13:31:73:b9:d1:8c:5f:7c:
e5:4c:d2:bb:45:4e:b7:1f:a6:2a:fe:b5:af:9b:9e:
56:18:de:33:fb:04:b4:0f:ae:34:7e:d1:0c:c0:e8:
9a:72:d5:d5:8f:6c:e1:3d:b5:5a:50:e1:cd:80:fc:
25:83:e2:d7:3f:9f:34:37:fc:78:7a:4d:2b:de:9f:
d9:41:c6:f9:0f:0e:24:8d:49:7e:c4:f6:27:09:60:
b4:83:ff:48:c4:b6:f7:cc:81:bd:ac:b3:cd:f9:d8:
ff:d9:09:7a:37:05:30:9e:db:0e:8e:03:4d:84:c8:
54:d0:d2:bd:be:5c:b8:3a:59:07:a3:65:54:54:97:
fb:eb:48:b1:0a:b8:cf:d3:3c:5c:5d:09:bd:0e:e0:
50:7f:03:a7:57:74:0b:b1:a6:86:a5:5e:f8:e4:33:
a2:d6:8d:d1:29:ad:c5:32:2f:f3:cd:2c:8f:26:6f:
7f:e7:d8:64:37:89:c0:36:7f:74:65:e5:9f:ca:6c:
6a:18:ff:58:10:23:2e:30:1a:c5:42:48:52:95:b1:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:A7:55:A3:0C:AC:B2:A6:3A:0B:F4:BD:21:72:99:BF:BC:F2:D9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6120::/44
Signature Algorithm: sha256WithRSAEncryption
52:75:75:cc:3e:23:78:42:26:e3:af:fd:83:2a:42:5c:54:1a:
7b:98:17:26:7e:0a:2f:bc:d8:74:8f:90:75:55:55:e7:61:6d:
d6:af:47:1c:04:ab:cd:4b:55:48:fc:43:4e:5a:4f:34:b2:4e:
1e:f2:ca:8f:d8:08:64:fa:e2:38:2f:fa:0a:35:90:d9:3e:e4:
b1:28:1d:de:e6:cc:28:e3:c9:cd:12:f7:05:f3:1d:a4:e0:dd:
19:9a:0c:ef:b4:e7:35:df:c5:1d:c8:47:f8:9e:03:fd:1c:40:
fb:b0:2e:bd:4b:34:4f:6c:9c:78:37:95:b4:9b:02:fe:1a:7d:
a0:d5:40:f1:35:72:b4:ed:b5:ba:63:9c:46:08:85:d4:fb:0f:
c4:50:23:3f:3d:da:21:cc:be:38:6e:46:97:a2:f8:68:da:93:
4c:eb:97:c1:f6:44:f2:d7:db:c7:c9:0b:82:2a:4e:79:9e:08:
e0:f0:d6:b4:91:25:86:dd:b2:bd:65:43:eb:5e:3b:e7:c1:19:
57:94:69:2b:3d:9b:e7:9c:dc:c0:bc:bb:72:e0:09:4c:1d:80:
94:24:52:33:66:ab:c0:55:f5:d2:62:b8:27:80:c9:c9:09:71:
1e:49:77:a3:a7:c9:f0:f4:81:a0:28:e5:4b:18:80:72:a4:1f:
05:92:89:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org