Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
File: AS202464.roa (raw, json)
Hash identifier: c1dvprio/bY2ZpfiON7pX2HmlhkBaZ5BCe45yLkF8nQ=
Subject key identifier: 23:91:54:BC:30:ED:80:40:F4:06:80:DF:FF:9D:B3:9E:7A:95:57:DC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1535614B5AF452C23515AFEFB8203EBAD28020C4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
Signing time: Tue 03 Sep 2024 11:03:17 +0000
ROA not before: Tue 03 Sep 2024 10:58:17 +0000
ROA not after: Tue 02 Sep 2025 11:03:17 +0000
asID: 202464
IP address blocks: 2a0f:9400:7509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:35:61:4b:5a:f4:52:c2:35:15:af:ef:b8:20:3e:ba:d2:80:20:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 3 10:58:17 2024 GMT
Not After : Sep 2 11:03:17 2025 GMT
Subject: CN=239154BC30ED8040F40680DFFF9DB39E7A9557DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:6d:b3:9a:6d:18:85:12:5b:37:2e:22:4e:
4f:23:16:d9:59:98:85:64:42:fc:61:1a:a0:f0:a8:
a7:74:e3:40:b8:7f:21:d9:5e:f0:6b:b6:f5:60:94:
37:dc:00:c8:95:58:a0:36:e3:04:b7:05:77:7f:05:
41:08:92:2f:e6:72:48:dd:e7:16:f4:96:45:ec:41:
1f:51:db:7e:6f:49:1c:4d:3c:82:e3:e3:cd:3b:b9:
e3:52:29:b4:76:09:87:f9:8f:0a:ea:38:99:fc:59:
d9:c8:56:eb:57:cd:dd:24:0a:b1:d0:19:a5:13:bc:
14:ca:86:da:5c:f1:88:e0:ad:e3:42:cf:ff:d0:b4:
de:14:0f:8a:d5:3e:df:ea:de:11:d3:28:1c:06:09:
a6:49:19:33:a1:22:c9:2f:9f:82:ec:c0:a9:6a:b4:
d5:9d:fd:ea:ab:fd:f0:ca:d7:cb:c7:1d:51:9a:aa:
f0:5b:ef:31:b0:de:a1:ab:ad:3e:65:09:1b:8e:d6:
e8:1e:12:9f:11:68:2c:3a:68:eb:cf:68:09:d9:4d:
2a:23:d1:43:3b:40:e4:b5:e0:84:92:c9:60:66:fe:
8a:0b:96:b2:80:8f:f0:c9:22:87:63:f6:22:fe:3b:
27:cf:c6:fe:1b:35:22:bf:7a:ca:14:fd:a2:0c:46:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:54:BC:30:ED:80:40:F4:06:80:DF:FF:9D:B3:9E:7A:95:57:DC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS202464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7509::/48
Signature Algorithm: sha256WithRSAEncryption
c0:9e:9d:31:4e:64:94:f2:27:6b:64:22:f7:b9:ad:b0:e2:e7:
af:92:15:0e:70:6e:7a:50:fe:0d:09:b7:e5:d3:30:64:73:d3:
31:2c:78:f9:5f:53:20:7d:19:6e:15:9e:94:54:a6:8d:84:bc:
05:1f:0a:60:a5:4e:5f:6c:ad:f8:8a:4f:86:ad:dc:64:8b:1c:
d4:22:3e:64:55:bd:58:63:0e:50:c2:38:e4:06:47:41:5c:de:
8a:67:6d:e1:78:88:7c:53:17:2e:75:7b:84:e2:3c:70:f1:ea:
7e:7a:bb:71:6d:99:57:ed:00:40:cc:e6:bc:b9:12:25:a0:0d:
df:5d:c1:cd:c8:d1:de:e5:d4:5f:32:58:3e:8c:c5:a5:c2:50:
1b:e7:e4:15:74:20:c0:fb:b4:ce:77:fb:ed:80:7c:0f:95:80:
c9:ed:d7:d4:1d:a5:68:0f:e5:c3:28:3b:49:5e:1e:c6:d5:c0:
01:29:48:fa:83:cc:49:0f:8a:5e:98:a9:7f:1f:3c:2f:e3:eb:
1d:e2:89:89:07:9b:be:1d:df:b3:c1:42:a1:68:58:2f:87:b3:
d7:7f:7d:d5:0f:a9:dd:f3:4b:95:aa:93:ad:86:74:c3:37:c6:
1a:3e:2a:fd:f6:f5:89:dd:0d:0b:41:02:b0:23:60:c5:c6:87:
c6:c9:56:9b
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUFTVhS1r0UsI1Fa/vuCA+utKAIMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA5MDMxMDU4MTdaFw0yNTA5MDIxMTAzMTdaMDMxMTAvBgNV
BAMTKDIzOTE1NEJDMzBFRDgwNDBGNDA2ODBERkZGOURCMzlFN0E5NTU3REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63W2zmm0YhRJbNy4iTk8jFtlZ
mIVkQvxhGqDwqKd040C4fyHZXvBrtvVglDfcAMiVWKA24wS3BXd/BUEIki/mckjd
5xb0lkXsQR9R235vSRxNPILj4807ueNSKbR2CYf5jwrqOJn8WdnIVutXzd0kCrHQ
GaUTvBTKhtpc8YjgreNCz//QtN4UD4rVPt/q3hHTKBwGCaZJGTOhIskvn4LswKlq
tNWd/eqr/fDK18vHHVGaqvBb7zGw3qGrrT5lCRuO1ugeEp8RaCw6aOvPaAnZTSoj
0UM7QOS14ISSyWBm/ooLlrKAj/DJIodj9iL+OyfPxv4bNSK/esoU/aIMRp2rAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUI5FUvDDtgED0BoDf/52znnqVV9wwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMjQ2NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB1CTANBgkqhkiG9w0BAQsFAAOC
AQEAwJ6dMU5klPIna2Qi97mtsOLnr5IVDnBuelD+DQm35dMwZHPTMSx4+V9TIH0Z
bhWelFSmjYS8BR8KYKVOX2yt+IpPhq3cZIsc1CI+ZFW9WGMOUMI45AZHQVzeimdt
4XiIfFMXLnV7hOI8cPHqfnq7cW2ZV+0AQMzmvLkSJaAN313BzcjR3uXUXzJYPozF
pcJQG+fkFXQgwPu0znf77YB8D5WAye3X1B2laA/lwyg7SV4extXAASlI+oPMSQ+K
Xpipfx88L+PrHeKJiQebvh3fs8FCoWhYL4ez13991Q+p3fNLlaqTrYZ0wzfGGj4q
/fb1id0NC0ECsCNgxcaHxslWmw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:21 2024 by rpki-client on console-fra.rpki-client.org