Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
File: AS210254.roa (raw, json)
Hash identifier: Lu9MgldS+8TR9+dVcMKbgYF0yRA4zYx4NN2mhNG6MKo=
Subject key identifier: 5A:BE:E9:F7:0F:AD:98:B8:D1:36:96:EA:32:87:01:D9:BA:DF:1C:F3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 30DC97D119E47C6DF60641A3C5F19BA87F0D14E5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
Signing time: Tue 16 Jul 2024 02:42:25 +0000
ROA not before: Tue 16 Jul 2024 02:37:25 +0000
ROA not after: Tue 15 Jul 2025 02:42:25 +0000
asID: 210254
IP address blocks: 2a0f:9400:7360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:dc:97:d1:19:e4:7c:6d:f6:06:41:a3:c5:f1:9b:a8:7f:0d:14:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:25 2024 GMT
Not After : Jul 15 02:42:25 2025 GMT
Subject: CN=5ABEE9F70FAD98B8D13696EA328701D9BADF1CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:08:88:cf:1e:b4:82:30:d0:f1:2c:40:4a:
4e:9b:04:eb:88:13:e2:fa:b6:a5:e6:05:18:47:71:
96:61:fe:f3:79:b3:24:d7:0e:0c:1b:4b:cc:5e:2f:
bf:1f:4e:1e:58:fb:6e:1e:36:f2:8a:45:d1:18:3d:
fa:ae:57:d7:83:09:e0:e2:5c:d4:51:d8:fa:b0:8f:
27:75:0a:60:2d:90:ec:77:39:18:d3:16:e3:2d:ab:
98:83:36:50:74:ae:da:ec:92:75:e4:f5:2c:26:7f:
75:49:42:eb:2f:40:b3:a0:86:7a:e8:8b:48:03:4e:
67:71:cf:6a:6c:64:72:d7:83:c2:1c:65:68:c1:0b:
7f:25:c9:e4:dc:0a:30:74:e2:2f:42:58:a8:25:07:
7b:b7:d3:62:84:c6:88:a0:94:af:31:74:41:49:8d:
ad:db:bf:7b:d7:83:95:f9:51:8d:68:9a:b3:7f:2d:
8b:68:05:cc:5a:4a:36:47:8c:b8:ca:cd:1f:f5:b0:
32:6f:f8:bd:f1:20:92:a8:e4:38:01:13:56:23:01:
fb:71:9b:0e:9c:08:a1:16:dd:72:a3:36:75:a4:96:
cb:e4:f2:67:97:b1:7b:a7:c6:b4:f5:90:c1:81:27:
3b:9e:c1:4e:8c:f5:62:d4:6b:41:a1:06:e1:01:f0:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:E9:F7:0F:AD:98:B8:D1:36:96:EA:32:87:01:D9:BA:DF:1C:F3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7360::/48
Signature Algorithm: sha256WithRSAEncryption
3c:cb:2f:77:12:d4:03:dd:14:72:95:e4:29:b4:c6:4b:be:cb:
ef:de:ea:ef:77:7f:b9:34:17:23:07:15:33:47:52:e1:b5:92:
25:e5:b6:ee:f6:53:92:6c:3c:1a:06:82:65:aa:e8:55:c6:c8:
bc:9f:26:d2:e3:3e:ad:47:5f:88:b1:50:8b:1d:81:79:42:0a:
97:f6:37:48:4a:96:ac:0a:2c:a7:cd:37:1f:12:48:3d:99:2b:
61:99:88:08:ec:dc:29:60:59:94:e5:bb:4e:1f:30:93:37:45:
f6:a6:e9:1d:1a:ba:42:2b:bc:23:7b:48:9e:c5:9f:6b:fe:98:
fe:eb:5c:ff:b7:b0:43:1f:95:90:a3:5a:e7:5d:4b:89:b8:45:
3c:65:fd:d9:b1:8a:29:9c:65:d7:51:11:3c:4a:90:df:9f:fd:
1a:77:2d:45:d8:4c:a9:95:d4:94:dc:81:26:ba:81:68:2a:91:
d3:4f:f6:43:81:56:fa:e9:d5:ef:dd:76:75:e5:9b:23:07:dc:
69:24:86:df:c0:f4:55:bd:16:a1:70:79:7e:a2:cb:52:5f:15:
78:cc:32:9f:e9:41:18:1e:f9:42:d5:d2:81:04:0f:4c:dc:e0:
78:e4:8f:74:49:ee:f0:2d:08:65:b1:d5:ae:5d:32:76:64:e7:
da:a9:29:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org