Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: SaA/M/06QKDGTelF2osD0VArX80e2cmc8y9F8FNI8ws=
Subject key identifier: CD:2F:86:EE:C0:41:49:7D:DA:34:6E:9B:4A:C2:8A:12:5A:37:D1:57
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1CE9E31719C5A8822645AB43784B73F7ACA048E7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 207941
IP address blocks: 2a0f:9400:772b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e9:e3:17:19:c5:a8:82:26:45:ab:43:78:4b:73:f7:ac:a0:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=CD2F86EEC041497DDA346E9B4AC28A125A37D157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:f2:5a:b4:5b:85:5f:82:9a:29:f2:45:f8:
9e:8c:6a:06:7c:7e:d4:a0:70:a4:0c:09:50:fd:4b:
a6:bd:44:de:df:85:02:10:a8:51:19:a6:a7:5e:f6:
08:8a:ae:4e:b6:06:da:c9:d9:4d:52:7e:c7:58:d3:
ab:42:03:5a:80:81:21:ea:97:eb:41:ab:25:6e:de:
92:f7:f5:be:eb:9c:e1:24:9f:c1:c8:55:cd:c5:a9:
fa:68:54:ff:73:b6:53:5b:d1:f1:d7:80:a2:9c:45:
2c:2c:af:80:6a:fe:b0:da:cc:7e:f9:8d:2c:a9:5f:
3d:f1:ee:b9:cd:62:04:21:05:fe:e9:03:7d:50:4a:
82:95:59:40:9e:02:a2:e9:51:af:1d:22:af:55:cc:
e1:25:05:ee:60:ff:a7:d0:73:75:2c:f3:d3:68:5f:
66:8e:b0:46:36:b9:ba:2d:bb:fe:11:84:22:98:12:
73:99:e1:a5:99:ca:47:ac:6f:eb:0e:34:bd:ec:74:
a8:00:ac:e9:4a:c3:98:b8:33:0f:7d:a2:66:45:35:
a9:b8:16:63:cf:d4:11:67:c7:90:9b:ee:bc:fc:51:
d9:63:b6:fe:3a:78:96:33:bb:d4:88:9c:05:5c:f8:
02:27:6b:42:8f:f2:4d:2d:3e:70:91:84:ab:5b:2f:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:86:EE:C0:41:49:7D:DA:34:6E:9B:4A:C2:8A:12:5A:37:D1:57
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:772b::/48
Signature Algorithm: sha256WithRSAEncryption
06:48:6f:03:2c:5d:f9:d0:af:11:92:04:49:be:a9:7d:c5:d0:
d9:16:4a:b1:d0:6f:9b:76:b4:2d:d3:71:18:ff:32:ef:e8:85:
dd:c5:c0:5e:dc:5f:de:aa:1a:0e:0d:91:2e:c5:ec:e4:2a:af:
e1:7d:48:4f:bc:99:8a:33:d3:d0:7f:51:b4:64:4c:e6:f0:7c:
66:6f:f4:43:0e:6c:62:9f:c4:66:80:57:97:1f:4e:0a:60:46:
b4:6e:ab:08:fd:ad:7b:54:69:61:89:7f:b9:51:55:e7:74:37:
9b:59:f5:e7:75:3b:76:b7:d3:34:2d:48:4a:f8:9c:d6:ac:37:
84:8b:21:50:2a:e5:9d:74:6e:f6:17:2e:da:52:a9:75:67:a9:
0d:ca:80:ed:6b:91:91:32:be:1f:98:0c:eb:bf:87:c3:33:b2:
21:6b:ba:bf:2f:e0:f6:50:e2:45:70:7e:c4:be:10:11:9f:9e:
71:3e:e4:db:10:92:25:1d:0e:8a:a6:81:38:db:44:d6:6e:50:
f5:9e:6f:22:a0:b9:e6:ff:ea:98:56:f4:f8:2c:32:b3:25:b6:
42:3d:fd:31:c8:f5:63:0c:0b:3f:03:94:91:a9:df:91:3f:d5:
ea:6e:4c:63:25:0f:2b:dc:c0:82:cf:3d:11:b0:f6:0d:8a:50:
48:1e:8b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:17 2024 by rpki-client on console-fra.rpki-client.org