Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
File: AS203283.roa (raw, json)
Hash identifier: CzDrmGGEOqDuYTxVslnjuiMIF4tKG6Vt3+kNDZ4vPEY=
Subject key identifier: 7B:AD:90:01:EC:C1:3C:DB:6E:34:83:0B:ED:F3:49:F1:8E:3D:E3:61
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3BEFF3696E5CF1BCD3709FFA45C6FBD3DD39B3C1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
Signing time: Tue 28 Nov 2023 22:25:20 +0000
ROA not before: Tue 28 Nov 2023 22:20:20 +0000
ROA not after: Tue 26 Nov 2024 22:25:20 +0000
asID: 203283
IP address blocks: 2a0f:9400:6518::/45 maxlen: 48
2a0f:9400:6540::/44 maxlen: 48
2a0f:9400:6560::/44 maxlen: 48
2a0f:9400:6570::/45 maxlen: 48
2a0f:9400:6578::/45 maxlen: 48
2a0f:9400:6580::/45 maxlen: 48
2a0f:9400:6588::/45 maxlen: 45
2a0f:9400:65f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ef:f3:69:6e:5c:f1:bc:d3:70:9f:fa:45:c6:fb:d3:dd:39:b3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 28 22:20:20 2023 GMT
Not After : Nov 26 22:25:20 2024 GMT
Subject: CN=7BAD9001ECC13CDB6E34830BEDF349F18E3DE361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:39:db:11:b0:43:91:2a:d5:6c:60:24:72:
0f:03:5b:56:31:db:b6:a5:6d:38:b0:fe:df:bf:dd:
87:b1:f6:ee:66:ff:d0:33:12:0b:ec:80:6a:19:08:
45:62:be:85:6f:c3:a4:96:b7:3b:15:96:d5:22:37:
8f:67:1e:3e:42:62:d1:3e:a7:ce:b9:cd:4b:84:a1:
40:6c:c1:94:7b:b7:9f:83:10:07:b2:2e:00:02:69:
61:3f:d6:2d:14:42:6a:2d:0b:4d:8c:d0:d2:4b:ce:
c8:f7:12:17:4d:13:e9:23:51:12:2d:53:fb:a0:77:
ce:10:9b:5c:de:d6:f9:4d:7f:d8:a9:c9:3b:e0:93:
d4:76:62:92:e4:e5:81:d3:b8:f3:86:00:92:49:ed:
98:c9:76:1f:a4:d5:4a:12:3b:0c:7d:b9:3d:3b:b3:
5f:d0:4c:1f:da:22:59:ce:fa:27:10:48:c4:29:81:
2b:63:ee:5f:f9:8d:74:77:b6:02:e9:74:90:06:86:
a1:a1:4a:da:4c:39:83:0c:2a:79:63:5f:8c:f0:9e:
90:88:06:c8:54:38:a0:7e:00:16:4f:17:58:cd:52:
93:f2:5c:97:a8:01:2b:b4:23:94:af:08:c9:1c:47:
5e:4c:4b:da:86:07:6e:2e:ba:f6:b4:2b:10:2a:9a:
13:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:90:01:EC:C1:3C:DB:6E:34:83:0B:ED:F3:49:F1:8E:3D:E3:61
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6518::/45
2a0f:9400:6540::/44
2a0f:9400:6560::-2a0f:9400:658f:ffff:ffff:ffff:ffff:ffff
2a0f:9400:65f0::/44
Signature Algorithm: sha256WithRSAEncryption
52:e0:7b:5d:e3:fe:83:db:a4:ac:34:bc:53:03:f5:49:c5:a9:
50:e9:57:08:be:53:f9:c6:88:ff:8d:5e:e9:30:bf:6f:3e:f4:
af:48:fa:98:27:39:79:81:c9:29:e8:7c:a5:8d:83:9d:a3:54:
9d:61:b4:25:7f:7e:12:7a:1e:c9:74:90:75:c1:57:9f:4e:66:
52:c2:37:38:59:44:21:9e:15:36:0e:79:ac:c2:82:7f:be:18:
d6:34:fe:d0:66:b9:02:86:88:8e:11:b6:f9:7b:f0:13:d0:3a:
8c:85:7e:b7:82:fb:c8:74:a0:42:2b:10:7e:e7:5a:68:f7:6d:
6a:c2:4d:f5:13:41:d6:43:3e:4a:28:83:56:c8:44:16:d0:f8:
44:af:dc:c6:ba:87:41:ff:39:a5:57:09:73:6e:74:af:0c:8b:
e3:c5:7c:20:23:38:f9:98:c0:69:4a:7a:a0:71:82:4b:1d:4b:
01:8b:6f:74:ab:5d:32:f2:38:fd:ec:de:1b:e2:a8:17:1e:22:
5d:7d:79:8d:8b:66:06:86:49:a0:ce:76:b8:86:de:fd:59:21:
fe:ee:b8:22:96:7b:fe:63:cb:44:2e:3f:2b:64:03:6b:de:a9:
c4:9c:55:50:66:57:16:e2:94:fd:22:29:12:6e:df:d4:58:ae:
fb:63:91:e3
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUO+/zaW5c8bzTcJ/6Rcb70905s8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzExMjgyMjIwMjBaFw0yNDExMjYyMjI1MjBaMDMxMTAvBgNV
BAMTKDdCQUQ5MDAxRUNDMTNDREI2RTM0ODMwQkVERjM0OUYxOEUzREUzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxDnbEbBDkSrVbGAkcg8DW1Yx
27albTiw/t+/3Yex9u5m/9AzEgvsgGoZCEVivoVvw6SWtzsVltUiN49nHj5CYtE+
p865zUuEoUBswZR7t5+DEAeyLgACaWE/1i0UQmotC02M0NJLzsj3EhdNE+kjURIt
U/ugd84Qm1ze1vlNf9ipyTvgk9R2YpLk5YHTuPOGAJJJ7ZjJdh+k1UoSOwx9uT07
s1/QTB/aIlnO+icQSMQpgStj7l/5jXR3tgLpdJAGhqGhStpMOYMMKnljX4zwnpCI
BshUOKB+ABZPF1jNUpPyXJeoASu0I5SvCMkcR15MS9qGB24uuva0KxAqmhMNAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUe62QAezBPNtuNIML7fNJ8Y4942EwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMzI4My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBIBggr
BgEFBQcBBwEB/wQ5MDcwNQQCAAIwLwMHAyoPlABlGAMHBCoPlABlQDASAwcFKg+U
AGVgAwcEKg+UAGWAAwcEKg+UAGXwMA0GCSqGSIb3DQEBCwUAA4IBAQBS4Htd4/6D
26SsNLxTA/VJxalQ6VcIvlP5xoj/jV7pML9vPvSvSPqYJzl5gckp6HyljYOdo1Sd
YbQlf34Seh7JdJB1wVefTmZSwjc4WUQhnhU2DnmswoJ/vhjWNP7QZrkChoiOEbb5
e/AT0DqMhX63gvvIdKBCKxB+51po921qwk31E0HWQz5KKINWyEQW0PhEr9zGuodB
/zmlVwlzbnSvDIvjxXwgIzj5mMBpSnqgcYJLHUsBi290q10y8jj97N4b4qgXHiJd
fXmNi2YGhkmgzna4ht79WSH+7rgilnv+Y8tELj8rZANr3qnEnFVQZlcW4pT9IikS
bt/UWK77Y5Hj
-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org