Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
File: AS203040.roa (raw, json)
Hash identifier: XCnL6fi+M4rkjs3KVtpEiMj5XM7+LBIyVL3BaxvfoJc=
Subject key identifier: 85:6E:88:B3:89:B4:1E:1C:C0:0F:24:42:5E:68:9D:44:C5:A6:8A:8D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3B526E47D0255B3DEFAD8B9479E00396CAA4DF56
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
Signing time: Wed 07 Aug 2024 18:51:53 +0000
ROA not before: Wed 07 Aug 2024 18:46:53 +0000
ROA not after: Wed 06 Aug 2025 18:51:53 +0000
asID: 203040
IP address blocks: 2a0f:9400:6114::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:52:6e:47:d0:25:5b:3d:ef:ad:8b:94:79:e0:03:96:ca:a4:df:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 7 18:46:53 2024 GMT
Not After : Aug 6 18:51:53 2025 GMT
Subject: CN=856E88B389B41E1CC00F24425E689D44C5A68A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:5c:05:2e:a2:7d:0f:81:bc:4f:84:87:80:
3d:20:3b:4c:07:75:c4:ee:fc:21:33:44:f4:76:42:
fc:a2:14:b5:c5:19:e9:04:a4:66:80:ce:7d:1a:ec:
31:b7:96:5d:fd:cc:c5:3e:fb:90:82:7d:27:7c:e6:
7b:16:86:a7:1f:dd:39:81:0b:e0:39:d6:28:5e:89:
3d:ab:c8:f6:00:01:d1:1b:6e:97:54:f8:ac:c9:7e:
c3:b2:41:62:18:0c:d2:75:43:10:59:f3:7f:8b:3c:
23:b5:f5:d5:85:0e:9e:5c:32:90:65:5e:63:bd:2f:
10:0f:99:cc:67:36:aa:98:62:97:ad:47:46:3d:d3:
ac:1e:3e:7b:f1:0e:78:01:4b:17:a5:3b:be:5e:40:
9a:b7:3f:6d:d1:98:19:fb:7a:80:71:f0:77:df:68:
1e:2c:f6:f4:40:40:6a:11:18:38:f2:57:cb:9e:86:
5e:80:19:17:5c:ec:94:18:4b:32:94:7f:73:14:d6:
b7:7c:87:07:45:14:cf:73:1f:0e:a6:25:65:f3:ca:
fc:14:e3:1e:c7:36:81:9a:51:04:df:e4:22:4a:84:
de:00:ad:fd:18:dc:76:e4:3e:8d:0a:57:96:ff:9a:
51:ae:2a:a6:1e:c4:a1:11:d7:83:b7:a4:f9:ef:56:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:88:B3:89:B4:1E:1C:C0:0F:24:42:5E:68:9D:44:C5:A6:8A:8D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6114::/48
Signature Algorithm: sha256WithRSAEncryption
a7:37:9e:fb:07:dd:25:d4:02:6f:11:6a:06:79:dd:d5:f8:f9:
a6:d1:54:e0:6a:29:a4:9a:fe:56:7f:fc:e9:56:92:7f:05:10:
1f:ef:52:a4:52:d2:70:4f:3d:dc:33:bb:63:90:52:88:ce:0c:
fb:cd:a1:94:ba:8b:8a:16:54:34:11:34:7a:60:e8:ed:0e:8a:
8f:60:68:c8:4c:b7:78:56:ea:c7:40:51:50:05:02:9d:1f:ac:
8c:8c:dc:07:72:19:a9:a0:aa:5a:96:70:15:a1:c2:39:94:1c:
e5:29:f6:d3:59:57:9c:ad:d0:62:34:5b:f9:78:4b:ee:02:15:
c0:da:c0:4d:cf:21:d7:db:5b:0f:2f:33:03:f7:e3:bf:6e:a0:
ee:d1:06:66:0b:b9:45:58:01:23:25:21:c7:af:01:18:bc:3f:
41:e7:df:07:ed:1c:f4:5f:7a:b1:f6:42:af:b9:db:69:0a:fa:
c9:70:1d:90:70:3e:b5:c6:c7:93:f9:fe:9a:ba:d8:46:ae:83:
8e:55:65:74:eb:17:cd:64:c5:bd:a0:79:ab:f7:38:0f:41:b8:
df:2a:21:4e:d6:2b:02:be:49:80:69:27:15:54:aa:08:4a:f6:
db:17:d7:55:63:4a:48:87:53:55:a6:97:17:f9:18:6d:a8:b2:
32:f0:78:3c
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUO1JuR9AlWz3vrYuUeeADlsqk31YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA4MDcxODQ2NTNaFw0yNTA4MDYxODUxNTNaMDMxMTAvBgNV
BAMTKDg1NkU4OEIzODlCNDFFMUNDMDBGMjQ0MjVFNjg5RDQ0QzVBNjhBOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyalwFLqJ9D4G8T4SHgD0gO0wH
dcTu/CEzRPR2QvyiFLXFGekEpGaAzn0a7DG3ll39zMU++5CCfSd85nsWhqcf3TmB
C+A51iheiT2ryPYAAdEbbpdU+KzJfsOyQWIYDNJ1QxBZ83+LPCO19dWFDp5cMpBl
XmO9LxAPmcxnNqqYYpetR0Y906wePnvxDngBSxelO75eQJq3P23RmBn7eoBx8Hff
aB4s9vRAQGoRGDjyV8uehl6AGRdc7JQYSzKUf3MU1rd8hwdFFM9zHw6mJWXzyvwU
4x7HNoGaUQTf5CJKhN4Arf0Y3HbkPo0KV5b/mlGuKqYexKER14O3pPnvVnwjAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUhW6Is4m0HhzADyRCXmidRMWmio0wHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMzA0MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhFDANBgkqhkiG9w0BAQsFAAOC
AQEApzee+wfdJdQCbxFqBnnd1fj5ptFU4GoppJr+Vn/86VaSfwUQH+9SpFLScE89
3DO7Y5BSiM4M+82hlLqLihZUNBE0emDo7Q6Kj2BoyEy3eFbqx0BRUAUCnR+sjIzc
B3IZqaCqWpZwFaHCOZQc5Sn201lXnK3QYjRb+XhL7gIVwNrATc8h19tbDy8zA/fj
v26g7tEGZgu5RVgBIyUhx68BGLw/QeffB+0c9F96sfZCr7nbaQr6yXAdkHA+tcbH
k/n+mrrYRq6DjlVldOsXzWTFvaB5q/c4D0G43yohTtYrAr5JgGknFVSqCEr22xfX
VWNKSIdTVaaXF/kYbaiyMvB4PA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org