Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
File: AS202464.roa (raw, json)
Hash identifier: F7zwEqLGg2noGP680jM8d7f/qP5ePkiVG8OXSHtPmjk=
Subject key identifier: 26:E0:7E:42:B2:1C:F0:4A:AD:E2:90:EC:90:F9:56:8D:3F:AC:42:83
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6AA5FCE413ABC19ED44C67B83AC1A13BB578901D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
Signing time: Tue 03 Oct 2023 10:52:35 +0000
ROA not before: Tue 03 Oct 2023 10:47:35 +0000
ROA not after: Tue 01 Oct 2024 10:52:35 +0000
asID: 202464
IP address blocks: 2a0f:9400:7509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a5:fc:e4:13:ab:c1:9e:d4:4c:67:b8:3a:c1:a1:3b:b5:78:90:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 3 10:47:35 2023 GMT
Not After : Oct 1 10:52:35 2024 GMT
Subject: CN=26E07E42B21CF04AADE290EC90F9568D3FAC4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:c8:10:a8:4b:47:d2:99:0c:d1:21:ba:5e:
af:a5:1a:16:6d:0b:14:1b:53:f2:ac:a6:4b:47:5f:
ba:56:77:b0:36:d2:81:10:24:50:8f:e6:97:11:63:
68:51:bc:7b:17:b4:e6:6f:69:11:1d:dc:b2:9e:4e:
78:c6:80:ea:19:5f:1d:46:cd:8f:58:ed:c6:ee:ce:
a4:9d:cf:1c:92:39:b9:f9:59:ff:5e:79:d5:10:b7:
a2:c0:3d:0f:6a:31:2a:17:ee:30:c5:a5:db:0b:c9:
cd:94:35:be:45:92:98:1b:52:e1:e0:fe:9b:de:2a:
ba:5a:d5:9b:64:6d:08:5f:09:c7:bb:26:f2:d5:49:
5a:1f:75:6a:ec:6d:f0:1b:a6:96:31:d6:d6:42:b3:
72:c4:64:f7:7c:b7:c6:f6:2a:7d:c4:f1:0a:1e:bb:
b1:59:e2:21:a1:3c:a5:f5:05:c1:e6:8c:28:57:0a:
3d:cd:eb:9f:44:0c:97:7d:13:ca:4f:13:6e:2d:1d:
f0:d1:e7:34:2d:49:77:5f:c7:b2:9e:06:b6:e1:6b:
9d:c8:0e:ae:4c:3e:e5:82:de:0c:ce:9f:3f:38:60:
af:5a:14:56:ca:bb:66:ef:74:8c:06:80:f0:83:57:
4c:7f:a5:1e:3e:9b:b9:c5:ef:d0:8d:6a:c9:e3:05:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E0:7E:42:B2:1C:F0:4A:AD:E2:90:EC:90:F9:56:8D:3F:AC:42:83
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7509::/48
Signature Algorithm: sha256WithRSAEncryption
c5:20:88:5b:4d:d3:26:54:62:4a:46:82:c3:2c:92:ea:ed:ca:
f3:4d:a7:9a:e6:9c:24:e7:60:c0:de:4c:34:15:68:29:a3:15:
1a:d4:93:34:02:33:56:39:93:32:9a:58:e2:1c:4f:fe:16:e5:
ba:a0:f8:5e:da:91:f3:6a:ba:d1:89:ff:a6:bd:56:05:80:81:
89:0d:ac:50:38:76:b8:e2:ac:c3:d7:1a:3a:c0:3c:7f:79:7a:
fc:7d:1c:fd:3c:da:bd:ce:9c:11:a2:8e:05:6c:33:b9:b1:2c:
7f:ac:ad:58:28:06:8b:cd:af:49:eb:27:b8:51:bf:00:cb:bf:
bb:5a:b5:52:e2:c0:ed:f5:d6:01:e7:e7:82:bd:c5:90:53:79:
19:fb:03:cc:95:34:27:3f:bb:f9:da:0f:43:bd:fd:ba:81:2e:
0f:f5:98:fd:c9:c6:2c:4e:7c:ae:30:84:b2:61:2f:27:3f:3c:
13:b0:b5:8d:91:26:1f:c0:53:62:da:6b:fd:df:a1:70:e9:5b:
88:86:94:34:cf:cf:1c:d7:fa:aa:43:4f:89:88:5b:3c:56:d8:
7b:b1:80:90:70:ac:f2:d2:2b:db:67:03:cb:56:4c:ea:86:c0:
d5:7b:1a:be:22:57:36:ed:09:9e:fc:25:f1:94:fe:f5:b6:95:
c7:e1:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org