Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205648.roa
File: AS205648.roa (raw, json)
Hash identifier: 4AERXPLfs0+j5P7T+XPbH1KG1uHO5iapNuqQ6vh5irE=
Subject key identifier: 7E:B9:58:E5:3F:ED:9B:7F:EE:A5:22:BD:B3:44:FF:E4:6F:2F:8F:BC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 068F5DC1693B6646E8555401E850C5415AF5E2D4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205648.roa
Signing time: Tue 15 Aug 2023 02:00:24 +0000
ROA not before: Tue 15 Aug 2023 01:55:24 +0000
ROA not after: Tue 13 Aug 2024 02:00:24 +0000
asID: 205648
IP address blocks: 2a0f:9400:6106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8f:5d:c1:69:3b:66:46:e8:55:54:01:e8:50:c5:41:5a:f5:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:24 2023 GMT
Not After : Aug 13 02:00:24 2024 GMT
Subject: CN=7EB958E53FED9B7FEEA522BDB344FFE46F2F8FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:10:51:05:c9:84:2e:10:7f:1e:bb:52:08:
12:84:a1:84:52:ba:9e:07:10:19:9d:1b:0b:b6:03:
14:d1:8f:d4:0b:09:32:dc:a5:c9:a2:09:dd:95:e1:
6f:f9:fc:d4:5d:9f:0b:85:15:b5:a9:ad:1f:eb:8c:
da:1a:f7:e4:fc:e4:49:0a:22:62:1a:7a:17:80:bc:
5a:ca:97:cc:42:8d:4d:62:b9:05:7b:a4:ac:98:14:
05:f6:28:26:03:58:43:c0:1d:8a:bd:ee:20:0d:ff:
db:9d:33:0e:a0:33:aa:57:ee:42:4a:22:c2:d3:be:
8b:29:b6:5d:a0:a9:e2:e0:d1:31:a5:9a:52:79:26:
43:74:94:3b:7f:ce:d2:73:74:cc:26:e6:d4:6c:8b:
32:10:86:01:43:17:b0:5a:fc:55:bf:09:1f:90:f0:
d0:2b:cb:1e:10:ac:97:89:bc:c1:ae:54:72:e8:f2:
8d:39:cf:e6:c7:61:1e:4e:0d:ba:aa:99:b7:66:85:
a1:c7:e6:db:0d:4e:02:9b:7b:65:a0:b7:90:d5:41:
39:fb:de:b0:20:0a:79:82:00:46:bf:6e:df:ce:a4:
bf:aa:71:9f:ec:83:99:76:85:9a:27:da:c4:8f:c6:
bf:4f:ab:b8:38:82:65:ea:f0:9e:02:a5:0b:d4:81:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:58:E5:3F:ED:9B:7F:EE:A5:22:BD:B3:44:FF:E4:6F:2F:8F:BC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6106::/48
Signature Algorithm: sha256WithRSAEncryption
cc:17:99:da:0d:d1:f3:9e:92:63:89:55:1d:69:a6:8b:1b:c3:
b5:ef:57:ca:86:aa:a3:94:64:a4:ce:c9:4d:b0:4c:55:9a:ad:
15:70:a1:c9:51:a8:51:bd:9c:c9:fa:e6:53:5d:ec:85:a3:84:
de:68:05:f7:56:b6:a2:b4:f8:2c:e7:58:ae:d9:ab:b2:1b:c1:
99:63:f7:73:a9:2b:c0:16:18:63:4d:44:e6:54:6e:12:04:5d:
f4:0b:4e:a4:71:07:18:53:65:6e:60:f9:64:7f:07:40:03:69:
ee:38:88:07:6e:0d:c2:da:09:de:70:d9:c3:3d:bd:48:87:36:
94:58:96:81:c8:24:63:d0:4d:d9:55:2a:63:08:02:97:fa:db:
19:49:9c:2b:1d:a4:e0:21:2b:20:be:96:2a:89:be:49:3c:d8:
49:81:e1:bb:b4:48:c1:ac:81:98:00:d1:dc:87:99:af:2b:a6:
15:83:08:29:fb:e3:17:ef:ea:56:ef:dc:66:f1:45:1f:67:13:
e3:77:bb:55:9e:f6:e2:8f:65:6a:a9:b1:04:2a:89:c2:e1:a2:
c6:99:cd:ed:c8:df:94:90:93:d6:8b:1b:63:5e:e0:f3:1c:51:
db:91:e1:b8:87:df:47:58:37:ea:ea:b2:ae:38:e4:81:f8:80:
f8:5f:8b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:05 2024 by rpki-client on console-fra.rpki-client.org