Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
File: AS205794.roa (raw, json)
Hash identifier: ILST02gNLFzne+Ckdhlc64/FATRB5bBmsHKui6yn7iM=
Subject key identifier: B5:81:BF:56:F2:AE:EF:A2:A9:C9:72:A9:63:58:EC:C5:F8:CA:70:FC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2F27694218C9F2EE298602049950035A6C0743FD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
Signing time: Tue 16 Jul 2024 02:42:24 +0000
ROA not before: Tue 16 Jul 2024 02:37:24 +0000
ROA not after: Tue 15 Jul 2025 02:42:24 +0000
asID: 205794
IP address blocks: 2a0f:9400:7700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:27:69:42:18:c9:f2:ee:29:86:02:04:99:50:03:5a:6c:07:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:24 2024 GMT
Not After : Jul 15 02:42:24 2025 GMT
Subject: CN=B581BF56F2AEEFA2A9C972A96358ECC5F8CA70FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:dd:db:4f:5e:63:08:ed:01:0b:80:68:75:
dd:16:30:9d:dc:2a:d0:ad:97:87:55:e2:a3:d4:66:
73:2b:f1:88:1b:f1:bb:d4:10:4f:70:17:1d:89:85:
fe:2e:c6:68:4f:48:01:68:f5:11:90:e0:2f:3f:66:
71:b9:bc:e1:67:cd:36:7e:7b:cc:19:18:92:73:7c:
5f:eb:f7:9f:21:9e:65:b6:1b:53:53:9a:15:75:40:
e3:b0:70:57:2d:2f:7e:93:ec:a8:0b:8c:cb:00:71:
46:f1:17:03:1b:ab:db:1c:9b:d1:a1:0e:dd:a0:cc:
2f:67:e5:3b:fb:bb:0b:0a:c5:d8:42:42:e9:be:b5:
bb:52:f3:ce:28:1c:bc:71:37:de:54:24:f6:24:a7:
90:74:1a:31:36:5f:81:01:85:12:71:b6:fb:87:82:
b1:63:c9:e1:90:af:0f:bf:6f:55:eb:7c:12:7f:b6:
88:8b:ec:87:db:38:20:30:bd:19:e0:d3:bb:58:01:
b2:02:5e:f0:3e:61:13:c2:7b:a3:b4:68:88:cb:d1:
68:b8:c7:05:0c:32:ea:aa:f0:d2:b5:6c:0b:be:05:
1e:4d:64:98:7b:b0:8d:17:9e:f6:c7:08:fb:99:f6:
86:11:a4:8b:aa:83:f3:83:35:31:ce:e9:9b:b7:3f:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:BF:56:F2:AE:EF:A2:A9:C9:72:A9:63:58:EC:C5:F8:CA:70:FC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7700::/48
Signature Algorithm: sha256WithRSAEncryption
57:e7:ec:fa:e0:2a:e4:34:d3:41:f5:d1:80:12:b6:23:af:90:
5a:af:8e:c5:7f:49:0e:ce:d3:c1:38:30:0a:9a:2f:0e:30:d3:
77:2c:a2:91:8c:3b:0b:e9:0e:58:11:14:11:31:ec:5b:4b:07:
b3:78:0b:fd:3c:70:57:85:01:ab:ca:32:5c:02:f2:0c:50:39:
ea:c6:07:90:4f:92:c1:53:f4:7d:e5:23:18:ee:2a:51:25:d8:
76:70:53:30:05:ab:ed:f4:35:d9:f5:43:85:ed:05:21:4b:37:
21:1c:a5:8d:6b:0b:dc:32:7f:93:40:f8:89:a8:4a:39:86:18:
26:d7:c9:96:b1:99:75:79:96:32:ab:a7:c4:56:81:4c:7c:d8:
0c:b1:1d:06:5f:b0:17:ca:00:fd:4f:bb:15:1f:54:1c:9f:c0:
bb:33:e5:7a:ce:b7:69:0f:e7:11:03:8d:78:1a:14:8d:4e:ee:
65:b3:51:ee:cc:5e:89:d8:ab:17:6c:15:b0:7b:44:72:85:1a:
65:bc:29:e0:42:13:4f:12:11:76:6e:7e:e2:cb:47:bd:74:a3:
86:95:b7:bb:2f:72:9e:c0:96:e1:3b:91:8b:a9:49:f0:ce:98:
cb:91:44:76:a8:5d:c4:ae:eb:ee:58:7b:9b:14:23:96:f3:52:
02:ec:4c:c3
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIULydpQhjJ8u4phgIEmVADWmwHQ/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA3MTYwMjM3MjRaFw0yNTA3MTUwMjQyMjRaMDMxMTAvBgNV
BAMTKEI1ODFCRjU2RjJBRUVGQTJBOUM5NzJBOTYzNThFQ0M1RjhDQTcwRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgud3bT15jCO0BC4Bodd0WMJ3c
KtCtl4dV4qPUZnMr8Ygb8bvUEE9wFx2Jhf4uxmhPSAFo9RGQ4C8/ZnG5vOFnzTZ+
e8wZGJJzfF/r958hnmW2G1NTmhV1QOOwcFctL36T7KgLjMsAcUbxFwMbq9scm9Gh
Dt2gzC9n5Tv7uwsKxdhCQum+tbtS884oHLxxN95UJPYkp5B0GjE2X4EBhRJxtvuH
grFjyeGQrw+/b1XrfBJ/toiL7IfbOCAwvRng07tYAbICXvA+YRPCe6O0aIjL0Wi4
xwUMMuqq8NK1bAu+BR5NZJh7sI0XnvbHCPuZ9oYRpIuqg/ODNTHO6Zu3P7CTAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUtYG/VvKu76KpyXKpY1jsxfjKcPwwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNTc5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB3ADANBgkqhkiG9w0BAQsFAAOC
AQEAV+fs+uAq5DTTQfXRgBK2I6+QWq+OxX9JDs7TwTgwCpovDjDTdyyikYw7C+kO
WBEUETHsW0sHs3gL/TxwV4UBq8oyXALyDFA56sYHkE+SwVP0feUjGO4qUSXYdnBT
MAWr7fQ12fVDhe0FIUs3IRyljWsL3DJ/k0D4iahKOYYYJtfJlrGZdXmWMqunxFaB
THzYDLEdBl+wF8oA/U+7FR9UHJ/AuzPles63aQ/nEQONeBoUjU7uZbNR7sxeidir
F2wVsHtEcoUaZbwp4EITTxIRdm5+4stHvXSjhpW3uy9ynsCW4TuRi6lJ8M6Yy5FE
dqhdxK7r7lh7mxQjlvNSAuxMww==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:46 2025 by rpki-client