Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: PGNO1RBNmq0uIVKa2f2QjIfmRKjv9LaNnvH5gR8s7Oc=
Subject key identifier: 0C:A6:12:57:E1:EF:FC:05:45:DF:60:F2:3F:5E:D7:45:C4:F4:CD:B1
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 61740DA054144B66601704E15362522FA746C2B0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200636.roa
Signing time: Sun 24 Mar 2024 09:48:16 +0000
ROA not before: Sun 24 Mar 2024 09:43:16 +0000
ROA not after: Sun 23 Mar 2025 09:48:16 +0000
asID: 200636
IP address blocks: 2a0f:9400:6162::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:74:0d:a0:54:14:4b:66:60:17:04:e1:53:62:52:2f:a7:46:c2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 24 09:43:16 2024 GMT
Not After : Mar 23 09:48:16 2025 GMT
Subject: CN=0CA61257E1EFFC0545DF60F23F5ED745C4F4CDB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:66:df:ce:db:4b:06:d7:93:ed:6b:56:a8:
56:5b:93:d5:34:e1:d1:3a:b1:90:33:0c:de:e3:25:
07:9f:f6:61:09:20:f3:b5:16:a9:62:49:6a:c1:9c:
50:42:d8:54:d8:82:d3:5f:2d:b1:04:5f:20:4b:fa:
74:df:92:85:6b:4e:68:df:3c:dc:4a:bd:51:8e:ac:
96:99:c6:2d:26:f5:0e:53:bb:9b:fb:e3:3a:b1:e7:
cf:e3:33:8e:27:b8:37:9f:30:2f:88:0c:39:05:fb:
b8:3e:42:8c:ec:74:c2:5c:c9:3f:df:0a:b7:a6:9e:
1a:88:54:f2:74:e1:44:3a:9f:c8:b1:64:b1:19:d5:
a3:50:cd:23:80:27:a5:a1:ef:1c:98:90:e1:4e:58:
b9:f6:e9:94:a2:4c:6b:7d:86:60:2a:d4:3b:06:e8:
d4:2d:36:5f:b1:2c:0b:28:30:0a:57:b0:9e:67:5e:
13:75:b3:d7:43:1e:c7:12:78:f0:5d:e1:0a:a3:bf:
ff:08:60:2b:9c:bf:f5:ae:fc:f8:c6:55:0a:06:4b:
56:7f:df:a8:b5:48:50:67:5e:7c:fd:23:03:c1:99:
37:cf:f9:23:a4:66:15:48:31:ec:6f:4b:e9:f0:d5:
d6:51:51:62:bb:18:d7:98:95:ff:5e:64:2b:fb:a5:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:12:57:E1:EF:FC:05:45:DF:60:F2:3F:5E:D7:45:C4:F4:CD:B1
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6162::/48
Signature Algorithm: sha256WithRSAEncryption
a6:45:35:c6:f2:7b:b9:5a:3c:02:b4:66:ef:bc:d9:0b:a1:6b:
b4:a6:f6:cc:a0:c1:c0:c2:78:af:79:cf:b5:d8:f0:f0:3e:f4:
d0:af:e2:23:65:70:b1:38:c0:bb:6f:3e:39:69:c1:17:9f:cb:
67:c5:41:d4:bc:44:7c:72:f4:39:a1:bd:9a:da:be:72:e6:12:
45:b6:c0:78:7d:da:36:38:da:5e:65:20:cf:be:47:53:21:d6:
2d:a7:e8:f3:57:97:4d:2e:79:68:70:49:7e:ec:2a:36:4a:e6:
7e:50:80:bf:f8:91:17:c0:ab:42:78:5f:b3:52:af:58:aa:35:
8c:54:83:f4:68:ff:3a:a4:48:39:e2:25:7e:e3:10:6b:66:67:
c7:fa:78:3e:07:3e:3a:26:e7:2e:db:24:d9:2d:9e:f1:c2:bc:
44:14:17:c8:39:3e:be:f5:fe:87:63:d4:b4:33:de:04:df:ea:
c8:cd:90:66:d0:11:e1:2b:e1:2b:4d:f5:fc:94:d3:53:6d:51:
f2:c4:89:10:ee:80:83:3a:a0:e1:f5:73:09:04:4c:23:10:38:
0e:20:cf:0e:af:b7:7a:cd:0e:52:f0:31:36:fb:e3:b5:1a:d3:
ad:d2:1c:96:9a:46:2b:a8:e5:c9:2e:db:d7:a2:68:79:f4:73:
dd:6b:eb:0e
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUYXQNoFQUS2ZgFwThU2JSL6dGwrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDAzMjQwOTQzMTZaFw0yNTAzMjMwOTQ4MTZaMDMxMTAvBgNV
BAMTKDBDQTYxMjU3RTFFRkZDMDU0NURGNjBGMjNGNUVENzQ1QzRGNENEQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDToWbfzttLBteT7WtWqFZbk9U0
4dE6sZAzDN7jJQef9mEJIPO1FqliSWrBnFBC2FTYgtNfLbEEXyBL+nTfkoVrTmjf
PNxKvVGOrJaZxi0m9Q5Tu5v74zqx58/jM44nuDefMC+IDDkF+7g+QozsdMJcyT/f
CremnhqIVPJ04UQ6n8ixZLEZ1aNQzSOAJ6Wh7xyYkOFOWLn26ZSiTGt9hmAq1DsG
6NQtNl+xLAsoMApXsJ5nXhN1s9dDHscSePBd4Qqjv/8IYCucv/Wu/PjGVQoGS1Z/
36i1SFBnXnz9IwPBmTfP+SOkZhVIMexvS+nw1dZRUWK7GNeYlf9eZCv7pfxzAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUDKYSV+Hv/AVF32DyP17XRcT0zbEwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMDYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhYjANBgkqhkiG9w0BAQsFAAOC
AQEApkU1xvJ7uVo8ArRm77zZC6FrtKb2zKDBwMJ4r3nPtdjw8D700K/iI2VwsTjA
u28+OWnBF5/LZ8VB1LxEfHL0OaG9mtq+cuYSRbbAeH3aNjjaXmUgz75HUyHWLafo
81eXTS55aHBJfuwqNkrmflCAv/iRF8CrQnhfs1KvWKo1jFSD9Gj/OqRIOeIlfuMQ
a2Znx/p4Pgc+OibnLtsk2S2e8cK8RBQXyDk+vvX+h2PUtDPeBN/qyM2QZtAR4Svh
K031/JTTU21R8sSJEO6Agzqg4fVzCQRMIxA4DiDPDq+3es0OUvAxNvvjtRrTrdIc
lppGK6jlyS7b16JoefRz3WvrDg==
-----END CERTIFICATE-----
Generated at Sat May 4 11:07:17 2024 by rpki-client on console-fra.rpki-client.org