Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
File: AS203283.roa (raw, json)
Hash identifier: ujfCw+vT7BPHEhsrMJA1KelJ/fxFg9uoi9kcLo/GW3A=
Subject key identifier: 95:06:85:7C:7E:FB:23:5A:00:76:0B:F8:F9:8C:28:74:7D:96:32:40
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7D2E2D7E27C0AB38807A967A0FE6BC805C3E8B66
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
Signing time: Tue 29 Oct 2024 22:26:41 +0000
ROA not before: Tue 29 Oct 2024 22:21:41 +0000
ROA not after: Tue 28 Oct 2025 22:26:41 +0000
asID: 203283
IP address blocks: 2a0f:9400:6518::/45 maxlen: 48
2a0f:9400:6540::/44 maxlen: 48
2a0f:9400:6560::/44 maxlen: 48
2a0f:9400:6570::/45 maxlen: 48
2a0f:9400:6578::/45 maxlen: 48
2a0f:9400:6580::/45 maxlen: 48
2a0f:9400:6588::/45 maxlen: 45
2a0f:9400:65f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:2e:2d:7e:27:c0:ab:38:80:7a:96:7a:0f:e6:bc:80:5c:3e:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 29 22:21:41 2024 GMT
Not After : Oct 28 22:26:41 2025 GMT
Subject: CN=9506857C7EFB235A00760BF8F98C28747D963240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:a6:68:b2:a6:51:b8:db:ef:47:46:3c:d0:
89:8b:74:76:61:81:d8:ed:c1:ca:21:ea:11:29:53:
e1:3e:aa:6b:8b:87:24:84:95:cc:d2:18:64:fb:8e:
a3:1d:67:36:ad:5f:c8:3c:88:cb:d3:13:4c:4f:03:
63:8f:be:00:b2:ec:c4:1d:9e:b7:62:fa:1e:0b:13:
b7:ec:f6:f8:a5:00:c4:54:fb:be:c3:b1:f8:f2:aa:
99:4d:f2:87:3a:74:84:1d:94:b2:a1:fe:a7:69:c4:
a6:dd:8c:eb:25:8e:0b:73:2b:1d:f0:e1:a8:7b:ec:
13:d0:00:bc:33:a3:34:2b:55:85:70:a9:58:53:c0:
8e:48:9d:42:56:98:02:3f:aa:71:ec:a1:35:e8:3f:
f0:2d:a1:57:af:a7:91:a5:51:2d:ae:3a:81:a8:a4:
84:50:b5:a9:50:a4:85:af:58:f8:89:d6:6b:62:d8:
08:5f:b8:56:3e:fb:19:93:df:d2:8b:4b:29:6f:40:
c5:0f:7d:5f:c1:e2:20:2b:4f:57:bd:a9:e2:f1:45:
84:76:9e:fa:e4:5e:6d:fa:6e:11:74:67:ff:dd:87:
8b:ce:37:e9:90:e6:64:b6:1f:8e:bd:69:26:14:02:
7f:89:7f:18:50:d8:c5:cb:6d:24:b8:26:9a:9c:a1:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:06:85:7C:7E:FB:23:5A:00:76:0B:F8:F9:8C:28:74:7D:96:32:40
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6518::/45
2a0f:9400:6540::/44
2a0f:9400:6560::-2a0f:9400:658f:ffff:ffff:ffff:ffff:ffff
2a0f:9400:65f0::/44
Signature Algorithm: sha256WithRSAEncryption
31:98:25:63:09:fb:17:7d:71:1c:72:d2:32:ab:9a:d8:95:6d:
b6:f9:40:8e:e3:61:e6:55:d1:10:f4:c3:ea:f9:44:01:20:f2:
4f:e7:27:7c:8a:0d:e6:ff:fa:a4:4d:a3:ec:fa:fb:18:72:05:
60:65:e9:a1:6c:8a:a0:9f:12:51:b4:e7:ac:a9:94:60:e6:98:
75:82:4b:ff:df:48:cd:d4:00:84:95:f1:5d:9a:05:c0:89:b4:
12:dc:e9:4a:ad:7f:8a:a8:d1:cd:e0:d7:2a:22:84:2d:9d:28:
d2:b2:9e:ae:22:18:7c:30:b8:c8:bb:7b:6b:b6:81:96:ec:14:
87:f1:b3:17:32:71:23:0a:bc:29:0c:d8:37:f7:4b:bd:6c:85:
a8:1e:fb:2e:ed:83:0c:9e:7e:a3:1a:9c:cb:42:a3:e3:7b:01:
97:55:c4:48:13:10:28:0a:a0:b6:43:47:e1:df:4f:01:d4:3a:
60:9e:ce:f4:bd:81:cc:5e:01:91:b0:1d:6c:1a:49:8a:b0:f1:
11:ba:e8:85:bf:97:d5:5d:4e:bd:67:87:ac:7a:1b:31:dc:f9:
3b:37:76:a4:a2:42:8f:93:85:57:5f:2d:3c:a0:66:97:f7:09:
7f:8b:73:b4:d5:4c:88:40:6b:2c:77:a4:f4:21:13:f5:bb:be:
ed:7a:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org