Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208393.roa
File: AS208393.roa (raw, json)
Hash identifier: C/1nhEme3ArMlwRWrlptrqNFm5KojpcATKFBu0MJ854=
Subject key identifier: 05:76:CC:A2:35:5B:89:1A:AE:73:77:BF:5E:27:8C:2A:C5:D0:29:1E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 67E7F5AE4D6F64D0D91F6DB3CBD07E047E484097
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208393.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 208393
IP address blocks: 2a0f:9400:8001::/48 maxlen: 48
2a0f:9400:8004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e7:f5:ae:4d:6f:64:d0:d9:1f:6d:b3:cb:d0:7e:04:7e:48:40:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=0576CCA2355B891AAE7377BF5E278C2AC5D0291E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:9f:75:8f:e0:d5:aa:6b:bb:2a:83:3f:13:
92:0b:4a:1f:89:86:59:4c:c8:7b:63:5e:3c:58:54:
52:4d:d7:6d:40:a2:6a:7d:32:73:93:d7:a3:8a:7b:
ec:58:aa:67:49:2d:a4:02:1b:b2:a5:a3:0b:5b:91:
30:81:95:28:27:98:21:43:73:69:c3:67:34:d4:21:
0c:e5:9d:0f:7f:47:28:3a:23:28:02:36:36:b2:cd:
e2:51:6c:42:27:2f:3c:84:c5:2f:ef:a9:d2:59:33:
65:97:32:03:a2:82:4e:9f:1e:a5:73:b3:56:55:6a:
27:26:fd:d6:30:fb:c6:44:00:c5:18:56:18:ec:77:
a3:4f:03:65:0d:0d:10:2f:76:95:0f:17:90:d5:92:
18:62:8e:a2:b7:48:10:3d:84:9d:bf:1b:72:00:85:
c6:6d:32:84:f6:16:23:c7:39:2a:fa:dd:28:39:6e:
67:86:4f:2b:4e:38:6c:67:94:d4:45:ca:a2:8c:35:
f9:d7:76:26:50:94:b3:86:75:48:81:e5:13:23:f8:
d7:54:35:21:7d:ba:dc:3f:99:bd:7a:bd:8d:04:78:
ef:6e:00:d0:d8:a2:6d:73:24:d0:ff:40:dc:f3:91:
80:2c:94:33:eb:cf:01:a7:44:c1:48:b2:9c:f8:cc:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:CC:A2:35:5B:89:1A:AE:73:77:BF:5E:27:8C:2A:C5:D0:29:1E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS208393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8001::/48
2a0f:9400:8004::/48
Signature Algorithm: sha256WithRSAEncryption
8f:46:bf:ff:61:47:0c:30:ba:a5:34:0e:6e:9f:8c:27:b6:de:
ce:a5:69:fd:8d:62:c7:97:1a:cb:f5:68:9c:6e:9d:f3:ee:fa:
ca:24:25:19:07:70:53:bc:1d:5c:a6:d2:e3:ce:1a:3a:30:3a:
52:96:c6:7a:d6:a6:ee:e2:e8:96:74:f7:30:6f:a5:0c:ac:c1:
9d:45:54:df:cd:5b:ac:cd:78:47:7c:20:05:ce:fa:c1:ac:2b:
b5:1b:3d:ae:4e:96:df:e8:94:62:d7:ad:2e:48:4b:27:05:ba:
80:4e:84:1d:f2:92:80:18:66:01:d0:70:58:85:92:7f:c6:a9:
bd:59:1a:4a:f3:dc:b7:d3:51:95:a8:2b:cb:45:2f:a3:53:db:
08:54:c7:d5:0c:c9:ba:91:f9:ff:c2:56:25:bf:c4:20:f3:2c:
61:fa:66:d3:2f:2c:61:68:d9:db:06:e0:fc:a3:7b:aa:05:60:
8c:d5:d3:e4:32:58:9e:03:6f:ca:ec:8c:7e:87:78:ea:cb:29:
0f:f0:69:cd:9b:1e:8f:da:0c:b3:52:a2:4d:d1:68:92:1d:82:
3d:74:59:03:96:2c:26:27:0d:84:78:c3:5a:34:17:af:e0:e2:
29:fd:6a:31:e9:ad:b1:0e:1b:d0:29:48:03:e0:0a:aa:28:6a:
7b:0d:2c:fb
-----BEGIN CERTIFICATE-----
MIIEyDCCA7CgAwIBAgIUZ+f1rk1vZNDZH22zy9B+BH5IQJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MTUwMTU1MjdaFw0yNDA4MTMwMjAwMjdaMDMxMTAvBgNV
BAMTKDA1NzZDQ0EyMzU1Qjg5MUFBRTczNzdCRjVFMjc4QzJBQzVEMDI5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2591j+DVqmu7KoM/E5ILSh+J
hllMyHtjXjxYVFJN121Aomp9MnOT16OKe+xYqmdJLaQCG7KlowtbkTCBlSgnmCFD
c2nDZzTUIQzlnQ9/Ryg6IygCNjayzeJRbEInLzyExS/vqdJZM2WXMgOigk6fHqVz
s1ZVaicm/dYw+8ZEAMUYVhjsd6NPA2UNDRAvdpUPF5DVkhhijqK3SBA9hJ2/G3IA
hcZtMoT2FiPHOSr63Sg5bmeGTytOOGxnlNRFyqKMNfnXdiZQlLOGdUiB5RMj+NdU
NSF9utw/mb16vY0EeO9uANDYom1zJND/QNzzkYAslDPrzwGnRMFIspz4zHCPAgMB
AAGjggHSMIIBzjAdBgNVHQ4EFgQUBXbMojVbiRquc3e/XieMKsXQKR4wHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwODM5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr
BgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoPlACAAQMHACoPlACABDANBgkqhkiG
9w0BAQsFAAOCAQEAj0a//2FHDDC6pTQObp+MJ7bezqVp/Y1ix5cay/VonG6d8+76
yiQlGQdwU7wdXKbS484aOjA6UpbGetam7uLolnT3MG+lDKzBnUVU381brM14R3wg
Bc76wawrtRs9rk6W3+iUYtetLkhLJwW6gE6EHfKSgBhmAdBwWIWSf8apvVkaSvPc
t9NRlagry0Uvo1PbCFTH1QzJupH5/8JWJb/EIPMsYfpm0y8sYWjZ2wbg/KN7qgVg
jNXT5DJYngNvyuyMfod46sspD/BpzZsej9oMs1KiTdFokh2CPXRZA5YsJicNhHjD
WjQXr+DiKf1qMemtsQ4b0ClIA+AKqihqew0s+w==
-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org