Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: onGpvoyg76oEzNlA/QWHhpA927o+T9ZCQfc8QSDtBKk=
Subject key identifier: E9:B8:DC:A5:FD:17:47:E7:EF:DA:7E:E7:91:53:35:09:7E:4A:87:88
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3D9B27A65A04E132CB1C06A260978336CAC9DF8E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
Signing time: Tue 16 Jul 2024 02:42:25 +0000
ROA not before: Tue 16 Jul 2024 02:37:25 +0000
ROA not after: Tue 15 Jul 2025 02:42:25 +0000
asID: 207941
IP address blocks: 2a0f:9400:772b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9b:27:a6:5a:04:e1:32:cb:1c:06:a2:60:97:83:36:ca:c9:df:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:25 2024 GMT
Not After : Jul 15 02:42:25 2025 GMT
Subject: CN=E9B8DCA5FD1747E7EFDA7EE7915335097E4A8788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:e4:94:c6:be:4d:8b:6c:ba:42:d8:a0:db:
48:86:67:72:13:b9:e7:44:3e:c4:7f:1e:b0:ec:31:
ea:7c:e2:d4:8d:c7:70:36:f9:93:43:f4:c8:0e:d5:
0a:67:a5:a1:15:87:87:0a:2f:bf:28:b4:b9:4f:ae:
92:63:68:e7:24:58:14:65:8c:e0:80:10:5e:b1:31:
7d:a0:13:1e:18:58:d5:c1:5c:a9:89:d5:52:2a:cb:
fb:d7:93:39:f7:58:20:94:34:80:cc:2a:50:18:27:
88:ff:d6:f5:c3:76:00:fe:fb:dc:86:ce:43:88:62:
d3:d2:25:d7:f5:37:1b:fe:e6:93:76:78:a6:ee:00:
09:00:08:c0:b3:ae:9c:fc:23:7a:82:ed:7e:89:c9:
75:94:93:35:e7:11:d2:84:01:cf:40:f4:3a:ee:11:
90:79:72:4c:79:20:52:58:85:5d:9a:d4:7a:fa:2b:
af:82:bd:29:87:42:40:73:e5:e1:2f:0c:9d:19:0e:
f5:8f:98:05:57:a5:ff:ab:1c:30:f2:ad:8a:a6:2f:
b6:fe:50:f3:57:f3:3c:21:ac:2b:b8:7a:45:7d:61:
91:cd:63:b6:99:51:3a:05:c1:90:66:bb:41:cc:e6:
3e:36:22:b7:f9:34:9e:fd:cb:e8:07:3f:5e:76:33:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:DC:A5:FD:17:47:E7:EF:DA:7E:E7:91:53:35:09:7E:4A:87:88
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:772b::/48
Signature Algorithm: sha256WithRSAEncryption
3c:d7:83:0f:6f:8b:fb:ca:11:5f:10:a1:6d:35:49:40:2e:d1:
0e:ba:9f:e9:73:ea:c9:c6:25:be:a7:c1:85:17:08:a8:ef:1b:
09:8b:87:07:e2:0d:36:76:c5:b3:9c:79:d1:3e:fe:fd:1d:b2:
01:37:c3:bb:0e:de:f0:c8:11:eb:69:db:be:c6:6d:86:ad:b4:
56:29:68:cd:8c:38:48:43:56:8f:e8:75:7a:54:ae:75:03:64:
51:a7:1e:90:c6:21:4f:4d:33:81:75:6a:b0:5d:0d:2c:20:8e:
c8:33:df:46:12:23:a9:fb:d4:08:c0:7b:bc:46:1c:c8:b1:bb:
22:20:af:c4:87:28:26:9d:8a:a6:2c:78:db:bb:06:09:2b:c9:
e2:31:63:41:50:f4:e9:fa:51:50:26:4a:18:24:37:b2:88:46:
04:7e:46:01:51:9f:88:fc:4b:75:e3:a6:a0:57:3b:50:be:63:
cb:6b:31:ec:a6:d2:6e:82:d4:b0:53:fa:e1:2a:e9:70:1b:63:
9f:c1:70:56:0c:03:dc:93:d1:13:96:bb:d3:fe:00:06:41:40:
b3:b7:c6:1b:a4:7f:64:d4:f4:9c:14:bd:43:7c:a3:b9:37:72:
55:60:88:29:35:2a:35:72:86:07:f1:04:9a:89:a1:e9:2d:1e:
b1:8d:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org