Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
File: AS207445.roa (raw, json)
Hash identifier: gOlC9CkENNr2PtemL9x6mcWcSLlgHN1kcz0v6CVjfU8=
Subject key identifier: 9B:91:1B:24:B0:BE:29:43:B6:A4:CE:D6:D1:0D:8B:56:52:6D:9F:84
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0A4F372BF112270B611B5F0438039FD3467CD606
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
Signing time: Wed 01 May 2024 02:38:38 +0000
ROA not before: Wed 01 May 2024 02:33:38 +0000
ROA not after: Wed 30 Apr 2025 02:38:38 +0000
asID: 207445
IP address blocks: 2a0f:9400:8011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4f:37:2b:f1:12:27:0b:61:1b:5f:04:38:03:9f:d3:46:7c:d6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 1 02:33:38 2024 GMT
Not After : Apr 30 02:38:38 2025 GMT
Subject: CN=9B911B24B0BE2943B6A4CED6D10D8B56526D9F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:7a:12:c6:63:57:fd:10:5a:28:01:10:d5:
08:21:b4:0d:d9:26:f6:a8:17:9a:ca:7d:36:5b:fc:
88:d5:ed:f8:a8:ea:9f:85:86:bc:02:c3:7a:5f:db:
ea:05:96:ed:b1:a7:40:e3:5c:57:bc:20:ee:8f:87:
e1:a9:05:a1:44:2b:8d:86:ee:08:ea:60:f2:e7:3e:
7f:d0:e7:90:47:52:4f:73:09:6b:a2:e9:d7:45:49:
6a:ce:e1:36:19:f4:e6:bf:a7:a9:b7:f3:e7:20:a1:
7b:0e:18:ef:ae:d2:02:93:70:9c:11:12:c1:21:22:
15:ee:da:89:03:0d:24:cd:db:c1:2b:eb:5b:61:2b:
16:4f:09:1c:25:f8:8b:bd:d0:8b:74:02:89:c7:19:
d6:0a:bf:ba:3c:8a:56:71:6d:dd:80:0c:10:ec:8a:
c9:cc:c4:f4:69:36:6b:66:a4:be:bc:c7:0e:ba:e9:
ee:7b:0e:1a:a0:de:d6:9f:42:e1:bd:48:0b:6f:b3:
82:12:08:1d:cb:73:0a:60:be:6f:d1:0e:51:a4:ae:
50:30:22:c2:2d:17:ac:8d:41:26:7a:9f:05:7d:0e:
7d:40:2e:bc:62:13:97:34:b9:25:5f:62:05:e6:cb:
7d:79:58:cd:f6:46:a4:a4:06:be:07:95:d5:f8:22:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:1B:24:B0:BE:29:43:B6:A4:CE:D6:D1:0D:8B:56:52:6D:9F:84
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8011::/48
Signature Algorithm: sha256WithRSAEncryption
c2:a9:8f:c0:08:62:2e:76:de:7a:73:a0:ff:e7:6d:da:fd:39:
41:62:78:7a:85:09:06:0e:6a:9c:6c:89:9c:d9:38:a5:94:c6:
4e:1a:d7:a1:e7:6d:3c:bd:31:e5:39:dc:d3:07:5a:7b:cf:01:
1b:1f:13:89:44:d4:de:ef:fb:fc:19:91:ed:9a:79:84:da:73:
59:8e:1e:41:d1:90:54:ec:96:b7:1d:3f:16:44:05:a2:bc:b9:
ef:64:bb:38:11:94:cd:c0:ab:ef:95:c6:30:fe:63:82:03:88:
25:0a:f5:d8:82:0a:74:ad:91:ec:d2:eb:53:c5:99:fa:20:89:
41:21:69:84:54:98:8b:c5:a0:74:15:b8:53:d0:cc:38:c5:3d:
c5:b7:58:54:dd:ea:e2:51:66:79:97:1c:7e:9f:1d:2d:53:d0:
d2:5e:5c:e2:e6:24:33:1e:d3:31:f3:27:8d:9a:00:bc:fd:9a:
86:0a:fb:9b:25:9e:12:f2:bb:6e:2a:bc:05:4f:92:59:77:bd:
36:52:36:6a:3d:eb:f5:81:d2:e6:81:24:d2:92:e7:97:9b:c6:
7c:5b:ca:54:be:27:b5:d9:3d:ce:2c:8b:89:d9:c8:07:05:11:
3c:e7:b4:56:5d:ec:ed:ae:60:2a:5d:b4:9f:90:dc:45:0b:9e:
86:bf:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org