Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207756.roa
File: AS207756.roa (raw, json)
Hash identifier: zb5mpfUMeMNhjYjXLn/RfjKHP15x+CS3iHHalIY5eA8=
Subject key identifier: 7E:5F:82:50:95:3B:7E:20:E6:5E:50:C8:9F:0B:F9:6B:F2:88:3D:2E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 41BE3AD4811BDF96EB0B8CEDEFF52E1E230F4290
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207756.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 207756
IP address blocks: 2a0f:9400:8008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:be:3a:d4:81:1b:df:96:eb:0b:8c:ed:ef:f5:2e:1e:23:0f:42:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=7E5F8250953B7E20E65E50C89F0BF96BF2883D2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:c0:3b:1c:ea:c4:be:a4:00:c0:5c:48:33:
2e:1b:2f:e7:b1:32:ec:70:7d:7e:0e:02:78:5f:cb:
43:8c:9d:21:68:51:22:21:ac:d7:02:20:6a:55:ba:
57:92:2b:62:7a:48:7e:a1:ea:98:ba:4f:d9:9b:a4:
9f:4b:89:de:8f:0c:75:14:25:fa:b7:38:16:ff:3e:
bd:5a:a2:f0:cf:71:ca:72:fb:a9:a7:12:bf:a6:91:
71:a4:1b:03:3e:cc:af:63:8c:df:46:f8:06:43:94:
9c:11:54:df:42:87:bc:68:14:db:62:80:f3:cf:d2:
47:ca:03:df:d4:2a:60:db:1e:18:26:e9:57:97:91:
88:1e:fd:8b:01:e5:33:26:10:7e:ba:9a:ac:70:7d:
5f:e3:71:52:77:89:a3:04:b9:4d:c0:96:f3:1b:23:
69:f0:8d:65:2d:b6:73:3d:eb:3b:78:b7:2a:79:ea:
24:f6:19:0f:d0:0a:d4:a8:61:a1:f4:49:01:b1:59:
a5:68:ad:eb:53:6d:30:96:b0:7e:ba:f0:fb:3a:74:
b6:ca:0e:e1:31:c1:ac:f1:33:09:bc:e0:2c:50:e5:
48:ea:42:56:08:6e:6d:9d:e3:41:44:ef:2a:e3:0a:
82:3d:31:13:f2:a3:e8:29:51:89:aa:80:d1:30:8d:
63:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5F:82:50:95:3B:7E:20:E6:5E:50:C8:9F:0B:F9:6B:F2:88:3D:2E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207756.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8008::/48
Signature Algorithm: sha256WithRSAEncryption
7b:a6:19:6a:dd:51:40:c6:b8:c3:a2:dc:da:44:33:02:9b:dc:
bc:c8:94:d3:34:15:47:48:68:02:d9:1c:1f:73:da:2e:ac:37:
74:8c:26:02:5a:11:45:32:a6:7e:a5:5c:06:07:80:2b:e3:74:
54:81:12:2c:32:7f:54:4b:87:a4:47:08:ea:a1:3a:1e:75:c9:
05:d4:e9:2a:d0:64:5c:09:09:d1:b6:ed:02:b8:e6:23:4b:3d:
8b:f9:04:6f:fe:51:18:79:b2:0e:a8:7c:74:cf:0a:3f:35:7a:
f2:83:d1:41:86:23:f4:51:0c:03:57:31:30:3d:f3:80:6f:fc:
45:3f:b5:db:e3:36:f4:24:5b:51:10:07:ef:ac:30:f7:74:32:
95:05:60:82:17:1a:6a:fe:f6:10:64:d2:15:62:a9:b5:83:f1:
50:48:4d:58:e1:2f:24:88:57:e6:82:41:f4:a1:6f:c2:41:85:
b8:67:d8:0d:af:3d:58:54:79:02:6c:19:51:03:7e:e5:9c:13:
e5:51:0b:6c:d9:40:bd:79:7d:f6:7c:3e:e8:9a:ee:79:38:48:
da:5b:a7:a7:bc:d4:97:46:71:59:a5:21:38:67:13:a2:c1:03:
bb:80:83:f9:bd:d4:b0:fa:3d:6d:c8:f9:55:c2:d0:1a:36:4a:
82:0f:86:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org