Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
File: AS200182.roa (raw, json)
Hash identifier: hPYd/C43BeI9jJRTeWFTQqDtm+HIp0jeQYmvMV6v/Ts=
Subject key identifier: C8:3F:72:FE:DB:CE:8A:BD:B3:5F:10:52:9D:6E:E6:B9:39:48:B4:78
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 232D26C2FB17F3A40B2C70312A3FC3CB8B1C1D7A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
Signing time: Sun 14 Jul 2024 11:41:42 +0000
ROA not before: Sun 14 Jul 2024 11:36:42 +0000
ROA not after: Sun 13 Jul 2025 11:41:42 +0000
asID: 200182
IP address blocks: 2a0f:9400:6120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2d:26:c2:fb:17:f3:a4:0b:2c:70:31:2a:3f:c3:cb:8b:1c:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 14 11:36:42 2024 GMT
Not After : Jul 13 11:41:42 2025 GMT
Subject: CN=C83F72FEDBCE8ABDB35F10529D6EE6B93948B478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:b5:61:9f:db:ec:49:a7:3a:5f:eb:d4:86:
f5:2e:4a:ef:e6:dd:09:f8:f6:03:92:6c:1a:6a:0d:
76:b4:d8:c1:e3:92:f5:d5:7e:20:60:24:75:96:10:
90:73:d2:17:8b:35:f5:fa:18:0f:70:55:2a:9e:b4:
92:dd:87:db:c2:11:e1:fc:fc:3b:3d:d1:0b:25:da:
ee:cf:06:ce:6d:a5:8c:da:a1:7b:62:ac:b3:ba:09:
ac:ff:30:5d:94:6a:b9:aa:3b:c4:6f:f8:dd:bb:75:
cc:99:76:f4:08:70:90:09:3d:4d:d5:69:1d:d3:a5:
84:23:96:07:4b:25:65:35:59:2e:d9:50:b2:c1:55:
9a:90:16:9f:e4:11:83:9b:90:21:e7:8b:b0:11:f2:
40:92:c4:1c:73:cc:ee:c9:df:5e:4c:42:f7:47:2a:
78:0b:e7:f2:af:ee:ac:2b:ab:d4:e1:3d:e8:00:f4:
e2:cc:49:58:85:c9:4a:ec:21:35:3e:52:6a:4a:66:
ab:11:ea:5e:3b:1e:df:00:3e:bd:4a:3e:94:3e:30:
bd:fc:e2:61:9e:29:7a:5a:65:ee:1d:85:9c:84:04:
0d:49:6f:85:bc:fa:d5:92:fe:0b:51:86:e8:54:93:
96:6e:f1:8e:05:cc:f1:df:25:cd:be:48:92:ec:ee:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3F:72:FE:DB:CE:8A:BD:B3:5F:10:52:9D:6E:E6:B9:39:48:B4:78
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6120::/44
Signature Algorithm: sha256WithRSAEncryption
8f:ec:29:12:a1:bc:eb:1a:be:fc:c9:79:d2:75:6c:4d:df:97:
47:86:61:12:04:28:aa:82:3b:f7:7e:72:44:8a:c3:67:32:0b:
c9:2f:c8:b4:36:d0:ca:6b:d5:8e:da:46:38:55:59:9a:bc:be:
8a:6e:9d:aa:77:c7:8f:92:23:ff:76:3b:96:0e:82:17:7f:10:
63:d3:ce:e7:81:23:98:d2:83:7d:17:8e:60:a2:4a:36:3d:94:
a5:7e:5b:a5:75:9d:0d:09:a8:ce:64:d3:5a:e9:92:67:ec:f6:
d8:00:69:af:6a:78:a0:35:7a:47:2a:32:ef:d0:0a:c2:0e:ff:
aa:b4:65:63:8b:b4:09:4d:59:17:8a:05:81:02:c4:a0:d9:8b:
4d:ea:8b:c4:ee:b6:d3:2b:6f:62:b3:dd:f3:53:24:09:8d:62:
f0:9e:cf:49:99:46:60:7f:47:68:db:a2:d2:d7:53:81:a2:dc:
ac:56:4d:a9:b3:30:a5:1b:59:9a:68:54:af:41:dd:dc:35:f9:
cd:0c:7b:13:5a:97:bb:c7:da:06:5e:72:b3:4e:fb:b6:25:ee:
ce:50:5a:7d:80:a3:34:13:2c:2b:b2:2d:28:14:23:a9:c9:68:
e5:d2:29:12:04:2f:5e:38:f2:51:40:13:60:77:28:32:c5:a2:
79:bf:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org