Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
File: AS210254.roa (raw, json)
Hash identifier: z3AGUAMyHZOQC44Ym26NetJKrC2ep+6Qv+i+9g9urzg=
Subject key identifier: 1E:93:34:8D:13:7E:D0:30:C4:96:8F:B7:D1:DA:99:66:92:DB:70:AF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 47BD3DE1BA5CB866148865F54B53D3C326558CCB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
Signing time: Tue 15 Aug 2023 02:00:24 +0000
ROA not before: Tue 15 Aug 2023 01:55:24 +0000
ROA not after: Tue 13 Aug 2024 02:00:24 +0000
asID: 210254
IP address blocks: 2a0f:9400:7360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:bd:3d:e1:ba:5c:b8:66:14:88:65:f5:4b:53:d3:c3:26:55:8c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:24 2023 GMT
Not After : Aug 13 02:00:24 2024 GMT
Subject: CN=1E93348D137ED030C4968FB7D1DA996692DB70AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:72:30:92:a5:7c:c9:6f:d6:ab:da:cd:7d:
1c:f9:88:f7:9c:81:23:4a:eb:0d:c5:be:6e:8a:22:
c0:2c:0c:52:06:d0:09:d1:77:2e:92:bd:b4:c0:2b:
1e:1d:fb:a8:6c:75:c4:e9:7d:2e:38:87:7f:49:a2:
23:cf:0c:a7:7c:5a:29:34:57:33:fa:54:07:ce:b8:
69:bc:c2:c2:80:dd:29:b4:77:ec:3a:70:eb:0a:c9:
ec:0b:b6:76:ef:1d:b0:05:a9:87:a3:67:83:d9:9d:
8d:ef:6b:5e:b6:e2:2a:cb:f5:4d:5c:b6:f2:fd:7b:
86:e6:46:d2:ad:dd:52:65:e1:d9:35:b2:e8:3b:7d:
29:b0:9e:a0:48:88:94:8e:37:1c:b2:bb:b5:ad:91:
1d:76:15:05:7d:89:12:ab:2e:93:77:82:24:9b:6f:
bf:1f:cd:fa:39:3f:14:58:aa:7e:be:17:11:3c:b9:
e6:be:32:8a:bb:45:e1:76:33:2a:23:4d:38:c7:30:
ec:e6:95:a9:dd:b6:6a:5e:80:96:4b:bc:ed:36:16:
c2:29:4b:5e:5f:25:33:7e:77:88:64:b7:5e:b5:f5:
7f:b5:28:d7:fe:ca:6f:de:c7:53:cb:cf:9d:ea:72:
2d:d6:4f:60:da:a4:4f:c5:42:0f:aa:6a:bb:8a:42:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:93:34:8D:13:7E:D0:30:C4:96:8F:B7:D1:DA:99:66:92:DB:70:AF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210254.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7360::/48
Signature Algorithm: sha256WithRSAEncryption
49:6a:a1:4c:44:9c:04:05:c6:a0:bc:f9:38:e8:ff:95:d5:ab:
8e:bd:94:6d:f9:74:11:db:c2:24:e3:37:b8:d7:59:c0:e9:f4:
d0:15:2a:3f:df:cc:90:1a:62:c6:33:97:62:fe:eb:31:7b:3e:
b7:c5:b0:3b:88:2a:b8:5a:6b:cc:3f:f4:1a:f3:3f:96:d3:24:
0d:f0:a9:37:d8:62:8e:16:c7:ed:e9:50:be:91:2b:a0:bb:93:
a2:d7:fb:fb:ce:48:e7:7d:b1:b5:85:44:96:bd:46:a4:22:47:
cf:76:ab:54:34:bd:3e:f5:13:c8:fc:39:6d:e0:3c:ea:04:80:
6f:2d:9b:1f:fe:f3:e2:08:ab:1e:f5:f7:60:3b:a2:ea:20:63:
39:f9:58:d4:5b:b7:43:48:40:a7:db:54:89:d7:75:82:f8:1b:
7c:96:7a:65:2f:a6:bf:f2:c7:40:c2:d9:9e:ff:06:f0:e0:7b:
b3:a7:ee:5b:55:b5:04:7f:78:0f:0e:b5:9d:cf:68:1e:d9:05:
50:5a:52:04:9b:58:0c:6e:05:60:78:24:f0:b8:fc:d1:5f:12:
14:48:55:1d:0b:9e:88:e2:4f:6c:f6:0e:4c:e0:5b:07:cc:d8:
36:b0:02:dc:81:c0:0e:da:9b:6e:1a:52:b4:8c:21:ce:c1:ff:
5d:a9:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:05 2024 by rpki-client on console-fra.rpki-client.org