Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
File: AS205965.roa (raw, json)
Hash identifier: 5MOc/jm31EMQUo88y75q+rl1soGXWGAJ0c/qyC7UKeg=
Subject key identifier: DA:91:FD:38:57:07:09:CA:D7:D6:E5:87:85:09:88:4B:18:FF:F7:59
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 50577E5673A023933C4CCAFE62930E78FA24193F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
Signing time: Wed 24 Apr 2024 00:35:29 +0000
ROA not before: Wed 24 Apr 2024 00:30:29 +0000
ROA not after: Wed 23 Apr 2025 00:35:29 +0000
asID: 205965
IP address blocks: 2a0f:9400:6165::/48 maxlen: 48
2a0f:9400:6168::/48 maxlen: 48
2a0f:9400:6169::/48 maxlen: 48
2a0f:9400:616a::/48 maxlen: 48
2a0f:9400:616b::/48 maxlen: 48
2a0f:9400:616c::/48 maxlen: 48
2a0f:9400:616d::/48 maxlen: 48
2a0f:9400:616e::/48 maxlen: 48
2a0f:9400:616f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:57:7e:56:73:a0:23:93:3c:4c:ca:fe:62:93:0e:78:fa:24:19:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 24 00:30:29 2024 GMT
Not After : Apr 23 00:35:29 2025 GMT
Subject: CN=DA91FD38570709CAD7D6E5878509884B18FFF759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:92:75:cd:17:52:8a:91:3c:4a:60:f0:59:
ed:ee:4e:5c:1b:ac:5a:cd:81:a5:b7:19:c7:b2:9a:
03:4b:56:3c:cc:68:90:d9:2e:ce:c8:d8:1d:72:37:
94:7f:b6:de:d7:ce:55:bc:af:b8:4f:d9:94:6a:c9:
0b:f7:0a:c3:48:7d:fb:1a:18:60:00:ae:df:1b:ee:
87:96:1f:08:e1:55:5e:6a:95:e5:7a:8d:b5:17:c0:
ed:df:43:1e:ae:66:bd:e7:4d:d2:78:37:11:0c:9e:
06:73:6f:91:40:fb:9a:d8:7d:57:96:a4:9d:c8:6f:
c9:a0:dd:0e:03:e7:33:a8:2a:c7:9c:a3:69:d2:96:
01:a1:2d:48:2d:53:47:07:1e:8b:40:22:0d:f9:26:
9d:3f:f5:38:5e:5b:db:4a:19:4b:09:a0:58:b1:42:
7c:94:81:3f:0d:20:17:9a:e0:f0:5a:ad:39:39:09:
fe:6f:cc:dd:eb:94:e1:ae:25:5c:c1:44:ce:80:6d:
5f:a4:96:42:18:8e:1b:6a:32:d2:47:ed:5a:a2:25:
ce:fb:eb:3e:cc:32:66:6c:d4:ab:d8:31:a7:5b:82:
9d:1a:e6:5a:5d:ec:8d:76:38:dc:0d:b1:e0:24:4b:
79:ac:77:e2:5e:18:e2:0b:a1:9e:62:84:dd:60:f8:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:FD:38:57:07:09:CA:D7:D6:E5:87:85:09:88:4B:18:FF:F7:59
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6165::/48
2a0f:9400:6168::/45
Signature Algorithm: sha256WithRSAEncryption
0c:8b:f9:86:da:44:e3:ea:fb:e4:17:f6:cc:50:d4:59:a8:c3:
a4:48:3d:8a:4a:fc:f4:29:06:f1:66:ac:4b:57:aa:d6:39:69:
6a:29:21:77:b8:9a:11:61:e4:e3:37:34:5c:54:a6:8c:31:21:
57:03:0f:e4:27:bb:6d:50:22:ad:9a:40:d7:fb:86:aa:6b:56:
a8:6a:d1:ae:7c:95:e1:9b:77:bc:bc:e6:0d:39:90:4f:fc:a2:
73:51:63:31:cb:b4:c8:df:f8:07:8e:8c:29:cc:05:06:20:56:
c6:27:19:3d:df:83:2f:8d:83:a2:ef:a1:f0:6f:0c:45:b1:5a:
38:2a:6d:ff:54:60:9c:b4:47:4d:cf:64:3b:b0:db:9f:68:62:
8f:11:1e:35:64:9a:05:9c:68:3b:5c:e3:8c:20:ea:be:db:e8:
a5:39:fd:f7:b1:00:16:e2:ef:08:54:61:aa:0e:dd:98:02:ab:
ca:fd:ac:85:31:25:f6:59:8b:d9:cf:d3:5a:ad:ec:f3:67:2b:
f2:e0:a3:c9:3d:48:db:23:8c:10:d1:09:e1:9e:e5:18:29:5e:
b2:84:78:fe:23:b0:1b:1b:6c:15:55:9e:69:cd:34:9e:c4:a0:
4f:99:b0:42:1b:18:83:8d:cd:eb:a2:a8:09:f4:9c:d1:b0:4e:
0a:d3:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org