Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
File: AS205794.roa (raw, json)
Hash identifier: anZKf4rPlWWGu6H8YYMpCpPeRdOIQhfE/DPtfIaXOwE=
Subject key identifier: 69:B9:18:7E:4B:58:A2:C4:98:1A:A3:3F:AF:08:8A:5B:29:78:EF:A6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 27A287E45409316F6DE781409A22B6DE980496EF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
Signing time: Tue 15 Aug 2023 02:00:26 +0000
ROA not before: Tue 15 Aug 2023 01:55:26 +0000
ROA not after: Tue 13 Aug 2024 02:00:26 +0000
asID: 205794
IP address blocks: 2a0f:9400:7700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a2:87:e4:54:09:31:6f:6d:e7:81:40:9a:22:b6:de:98:04:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:26 2023 GMT
Not After : Aug 13 02:00:26 2024 GMT
Subject: CN=69B9187E4B58A2C4981AA33FAF088A5B2978EFA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:f5:1e:f5:35:51:ef:01:5a:63:bb:5f:cc:
71:29:fb:07:c1:b8:34:05:93:c2:63:84:80:18:da:
13:ca:c7:03:81:74:61:58:7c:4f:31:7b:15:f3:3b:
4d:b0:78:48:ed:5d:f7:f5:6b:e6:e6:ef:0d:eb:fd:
b1:18:93:b2:7b:ec:66:f7:93:4b:60:bc:f2:01:69:
7e:5c:0c:94:b4:de:4d:36:1a:89:c9:f5:43:45:f7:
98:d3:8f:fc:99:10:cb:ca:12:55:d7:f8:f8:eb:75:
16:77:09:55:1c:b0:ab:b2:12:3c:74:54:5b:48:2c:
51:b3:ca:89:aa:37:89:16:07:36:48:2e:ea:5b:d1:
54:43:e1:5b:6e:12:c3:f1:c3:f1:24:ac:fb:e2:f4:
f6:60:48:96:fb:fd:a5:11:b9:62:b6:cb:40:20:1e:
3f:89:41:e7:d4:6c:bc:44:62:9d:63:ef:81:16:17:
34:5d:b5:10:0a:11:28:9b:38:47:1a:92:0f:82:a9:
10:46:a1:18:7a:f2:aa:b0:44:2b:97:b4:11:8a:da:
04:25:e6:cf:2a:e3:f1:20:57:1f:da:13:31:38:13:
6b:65:a9:a1:98:72:02:1d:42:ba:57:36:6f:c1:17:
ce:b2:94:63:bb:0c:99:cb:de:49:8a:9d:2e:6c:98:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:18:7E:4B:58:A2:C4:98:1A:A3:3F:AF:08:8A:5B:29:78:EF:A6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7700::/48
Signature Algorithm: sha256WithRSAEncryption
d1:c5:3f:da:21:44:59:3b:12:82:74:62:8e:31:41:ff:29:eb:
43:96:8d:bc:8d:e5:f1:20:01:e2:25:f3:65:9a:60:68:4c:73:
cd:50:db:7c:bf:4c:72:3b:80:7b:08:aa:4a:78:71:01:18:f6:
84:9d:72:4b:74:02:e0:97:bd:7e:6c:54:4e:fa:fb:8a:8d:bf:
73:6f:18:c4:72:81:6d:3c:b4:b7:4c:f9:bd:44:d8:57:d2:ab:
b4:79:87:81:3a:1d:47:a6:68:17:3c:10:a3:a5:9f:85:0b:5d:
53:4e:c1:ae:25:d0:5c:93:10:25:c6:b2:69:d8:bd:a4:ee:93:
e2:81:7c:c2:c5:7a:52:61:00:32:81:28:79:ce:bb:02:d7:4b:
70:91:87:06:c6:ed:cc:2a:5d:f4:4f:3c:23:e0:9a:df:1a:55:
5c:8d:54:f9:01:69:c4:44:b2:0f:9d:c0:03:02:6d:bf:83:fa:
e2:bf:de:56:16:02:88:e1:b9:c3:f7:f4:d5:cb:74:d9:07:10:
e9:16:9b:ef:aa:e5:15:03:bd:6c:88:df:99:69:f3:43:c5:64:
31:ee:e3:6c:f2:22:bf:b8:aa:7a:40:a0:6d:49:36:b9:3d:55:
09:89:03:a4:87:6d:f0:f2:87:6a:9c:0f:cb:b3:6b:42:d5:7f:
16:16:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:05 2024 by rpki-client on console-fra.rpki-client.org