Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
File: AS203040.roa (raw, json)
Hash identifier: u+c+PNbCzKHno7oX3XDjLM0L2PYLu95PsWNYu38LX4U=
Subject key identifier: 49:4D:D3:A6:BB:1A:52:04:BB:40:1F:F7:19:88:12:05:2D:E8:3B:61
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 187AF0B51BAF0A9007C7464C2EDF8B7C2C81BC60
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
Signing time: Wed 06 Sep 2023 18:09:49 +0000
ROA not before: Wed 06 Sep 2023 18:04:49 +0000
ROA not after: Wed 04 Sep 2024 18:09:49 +0000
asID: 203040
IP address blocks: 2a0f:9400:6114::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:7a:f0:b5:1b:af:0a:90:07:c7:46:4c:2e:df:8b:7c:2c:81:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 6 18:04:49 2023 GMT
Not After : Sep 4 18:09:49 2024 GMT
Subject: CN=494DD3A6BB1A5204BB401FF7198812052DE83B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:a6:f8:66:c8:8c:7e:1f:79:9b:f7:19:22:
27:3e:a6:81:0f:1b:b3:fc:37:12:2d:b1:b4:04:fe:
20:cb:e8:c4:57:75:fc:0f:a3:2d:47:8d:c0:9f:ae:
77:70:3c:d5:4b:c5:f9:31:3d:eb:ba:7b:4c:8c:7a:
0a:44:d0:8b:59:ee:43:cc:e3:14:a1:e7:89:20:69:
aa:73:1c:4e:a9:14:bc:d1:bf:b7:8c:fd:de:f1:c1:
50:5c:ec:72:46:05:dc:9f:60:1f:92:b3:5a:17:de:
9b:a0:cc:98:cb:21:29:78:1c:ea:f7:00:d7:5b:89:
e8:eb:92:11:fe:01:62:79:ce:46:f8:96:d4:dd:a5:
c9:df:3d:36:4e:34:bb:f9:de:05:34:67:e6:a2:93:
03:b5:8f:6f:24:0a:e3:b9:db:c6:32:06:e7:be:10:
1a:5a:af:81:fb:37:c3:0c:c8:94:b5:ef:80:13:d1:
d3:f3:3c:ab:59:42:8c:c7:80:49:00:9e:7b:33:be:
07:94:98:88:fe:25:b9:d6:08:63:b8:a6:50:3c:ed:
0e:27:69:48:1a:24:75:11:43:bf:63:c6:10:59:94:
b5:ac:58:66:16:6f:fd:e9:e7:b0:e8:a9:e4:f4:27:
e5:77:aa:5e:2a:1e:74:0c:47:af:ba:7b:fe:23:f7:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4D:D3:A6:BB:1A:52:04:BB:40:1F:F7:19:88:12:05:2D:E8:3B:61
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6114::/48
Signature Algorithm: sha256WithRSAEncryption
09:2b:ed:f1:12:98:f4:59:db:7a:de:35:e5:4e:02:78:04:30:
bb:fe:cd:2b:71:82:06:6a:0f:25:23:e4:a0:12:f9:0e:82:b0:
93:65:46:8d:e2:b5:20:6a:1a:df:f1:30:90:22:c8:a4:5d:03:
8f:c8:6a:17:06:b0:6f:f4:26:46:9b:a3:a7:14:b6:71:a9:44:
64:cb:50:f0:08:9b:98:46:f1:3e:7c:34:08:5c:e6:c2:63:ab:
c1:f3:cf:fa:26:1b:04:a0:63:a2:da:d3:18:15:f2:de:79:62:
ed:35:99:7d:08:70:ec:50:59:ff:f9:1c:8a:e2:5b:dd:1b:4d:
b9:85:e8:b2:2b:94:2a:97:87:03:d1:ff:24:01:e1:92:9d:5f:
79:11:88:12:b1:c0:3e:ca:c5:bb:d1:d6:da:bf:95:3f:0a:1b:
72:03:fb:83:4c:f2:40:db:71:89:74:5a:89:7b:46:62:56:70:
eb:4b:b1:62:1e:3b:cd:86:ef:3a:92:7b:8e:46:39:49:b4:6f:
5f:73:ac:87:e6:cc:28:d3:65:83:75:d5:44:05:0e:7a:9d:f0:
3a:8f:6e:96:64:1e:d2:ce:a4:38:9f:21:a6:8b:75:82:da:d7:
3a:50:35:39:56:69:fa:98:23:7a:87:53:54:5d:a1:91:e3:9d:
82:13:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org