Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
File: AS205965.roa (raw, json)
Hash identifier: QvexM6guRcgJ2R/joLcje4aEhyQEDJ8dMPaZwEwqBv4=
Subject key identifier: A2:0E:6F:C7:AE:96:26:58:C6:C8:A0:F0:E0:62:31:FA:90:A8:0F:9C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 69EA8C3B691BDEF74C32066F910C65CECE63BA22
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
Signing time: Sun 19 May 2024 17:16:24 +0000
ROA not before: Sun 19 May 2024 17:11:24 +0000
ROA not after: Sun 18 May 2025 17:16:24 +0000
asID: 205965
IP address blocks: 2a0f:9400:6165::/48 maxlen: 48
2a0f:9400:6169::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ea:8c:3b:69:1b:de:f7:4c:32:06:6f:91:0c:65:ce:ce:63:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 17:11:24 2024 GMT
Not After : May 18 17:16:24 2025 GMT
Subject: CN=A20E6FC7AE962658C6C8A0F0E06231FA90A80F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:b3:e0:49:97:f4:6d:c2:fd:e0:b3:c2:58:
8f:03:7c:e7:f7:98:ea:4f:bd:0a:d7:8c:70:b1:4b:
83:5c:6b:90:06:ed:4c:f9:79:7d:ee:c6:70:22:08:
f1:75:a6:4c:38:95:7a:05:15:c7:f4:c6:a7:c6:f6:
8b:b0:4e:6c:74:15:28:45:11:fe:0f:93:c8:54:12:
18:64:a8:bb:88:ef:d6:c5:4c:31:57:9c:72:24:51:
ae:c0:84:47:34:32:a9:7c:3e:fc:9a:07:02:05:a2:
1f:93:22:32:dd:97:ae:b7:36:ef:4c:c1:9d:93:a9:
20:ae:5b:7b:0f:7e:98:cb:44:74:b7:b3:8a:a9:02:
f9:71:9f:25:89:45:e4:04:fb:58:7d:2e:82:e7:bb:
f3:5b:d7:67:4a:34:66:d3:aa:e8:47:c9:80:00:20:
b9:7c:f4:02:12:e7:3d:4d:d9:0b:67:e5:86:85:db:
b8:86:08:60:b3:c4:a1:45:1b:4f:ba:e1:4f:ad:1e:
f5:ad:4f:46:c8:e8:a1:31:e7:d9:31:b5:7a:88:9b:
ad:28:84:7f:2e:90:d4:0a:57:15:8c:0a:9f:35:24:
95:cf:c3:a7:ed:0b:3e:d0:a2:00:2c:03:31:a3:35:
98:68:ab:01:f7:bd:05:2e:79:23:43:67:b4:a1:5d:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:6F:C7:AE:96:26:58:C6:C8:A0:F0:E0:62:31:FA:90:A8:0F:9C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205965.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6165::/48
2a0f:9400:6169::/48
Signature Algorithm: sha256WithRSAEncryption
66:db:7a:a5:7f:a3:4a:22:83:3b:b3:34:b7:9a:9b:15:7a:20:
49:82:76:75:38:75:94:5d:42:ce:6c:c2:d3:79:7a:aa:7d:90:
b3:01:68:26:7b:3f:6f:08:cf:71:0e:a3:f8:87:bb:63:53:e9:
de:68:33:be:4d:ff:68:9b:84:ea:c8:a6:42:75:e4:fa:bd:72:
0c:7e:eb:5a:b4:be:aa:45:e7:e7:2d:e3:92:ab:d8:71:ca:76:
69:ae:6a:d4:6a:a9:db:c7:39:b4:76:82:f0:89:06:d0:f8:96:
92:ee:8d:51:ed:e0:8f:82:c0:f0:76:cf:16:26:7b:9b:1a:21:
30:8a:7a:7d:cf:8b:11:58:4d:f1:0b:d4:21:f4:d5:71:af:45:
98:ac:3d:47:3c:c6:cc:43:2b:e0:2c:81:4b:86:61:73:25:bf:
73:09:8f:45:2f:79:99:4b:b9:ee:d9:fd:10:76:83:b2:be:d7:
aa:4c:c1:93:df:6f:fa:aa:7f:7d:14:a7:3a:6e:5e:73:a3:34:
97:04:8b:04:0b:6f:87:a1:62:8a:8e:d4:97:c1:e9:aa:9e:8d:
32:1a:d4:be:a9:88:20:26:23:50:c6:92:df:e1:b9:f2:b8:fb:
70:55:bb:4f:b6:22:53:3d:94:65:6b:11:4a:ff:86:b4:8b:53:
99:d4:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:11 2025 by rpki-client