Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: +24R7uw4QpjF1qRtlFcT5QaizQ4MVIgvk6s1nr1CnjU=
Subject key identifier: 4B:86:7D:82:FC:8A:09:49:70:4C:75:86:05:A7:0A:07:F2:1E:78:D4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5AA1B7749294426A38A417CA2F4C4D3B40346044
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
Signing time: Sat 26 Aug 2023 05:05:03 +0000
ROA not before: Sat 26 Aug 2023 05:00:03 +0000
ROA not after: Sat 24 Aug 2024 05:05:03 +0000
asID: 210542
IP address blocks: 2a0f:9400:7722::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a1:b7:74:92:94:42:6a:38:a4:17:ca:2f:4c:4d:3b:40:34:60:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 26 05:00:03 2023 GMT
Not After : Aug 24 05:05:03 2024 GMT
Subject: CN=4B867D82FC8A0949704C758605A70A07F21E78D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b1:3d:dd:6c:02:6e:18:72:1e:70:41:86:f4:
25:43:25:c6:2c:a9:7d:c9:51:ce:49:78:43:cd:19:
93:9d:e7:ff:e4:90:9b:04:4a:88:0f:f4:9c:e5:08:
d0:ff:46:91:02:67:de:14:5c:30:5f:a4:82:5e:a2:
c1:19:6a:0d:27:17:22:4c:ea:d4:4a:f4:69:58:a5:
56:74:f6:23:57:45:12:a1:75:f1:ef:27:10:16:28:
61:ef:46:6d:7a:55:bf:79:d0:2b:7e:0f:78:f4:f4:
b6:04:3c:be:72:9e:a9:c6:dd:31:8e:02:56:f4:25:
01:8d:af:7f:77:76:4c:40:8e:38:1f:6f:9e:c2:d8:
4a:09:c3:db:9d:90:cb:a3:23:fd:94:34:5d:0c:3f:
50:8f:3d:12:f5:1f:96:2b:73:20:18:64:57:34:c0:
1a:73:5f:20:cf:c2:c0:77:6d:90:fa:50:2d:b6:67:
87:36:74:b9:f3:94:65:c8:2d:dc:03:58:e1:aa:f5:
80:a7:7d:67:88:59:35:33:2c:ff:fb:5a:89:90:9b:
14:e7:79:1e:81:28:73:39:b0:2d:1b:78:da:be:d1:
25:42:fc:d3:4f:71:5f:0d:4c:a0:aa:a9:1a:12:15:
68:2d:82:e6:fd:60:01:7a:15:49:e6:ca:a1:68:4e:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:7D:82:FC:8A:09:49:70:4C:75:86:05:A7:0A:07:F2:1E:78:D4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7722::/48
Signature Algorithm: sha256WithRSAEncryption
03:57:d5:22:82:c3:b1:6a:b6:76:98:94:3e:2a:c8:8e:35:57:
44:37:5c:a6:65:3c:67:d4:1b:75:1e:4a:08:88:45:cd:8f:c1:
b4:4f:78:8a:c6:0b:9d:9e:54:7f:13:59:60:69:40:96:3a:09:
2e:ed:26:8b:8d:81:20:fe:1b:f5:21:8b:65:4f:25:1b:ad:03:
48:e9:3f:94:6d:5e:1b:01:97:ef:27:09:fa:58:b8:ca:ed:2c:
a2:03:82:16:e5:bb:de:58:eb:6b:61:77:20:61:76:71:47:fb:
1e:60:c1:5e:a9:4a:2f:e0:23:a0:ca:61:fa:5c:79:47:73:da:
be:4b:e8:82:7d:b0:3d:94:d1:ad:91:b9:7a:bf:ac:70:41:1a:
84:dd:cc:ec:9b:c7:07:b9:10:14:f2:7c:16:d6:57:17:7b:8d:
aa:e9:55:b4:bf:6c:3a:a8:81:4b:23:ad:21:0d:29:d6:e4:68:
29:6b:65:e9:b7:03:a6:a4:15:62:13:62:f7:4e:50:ff:49:51:
b8:c1:ef:8c:bd:72:75:15:2f:97:80:6b:41:98:99:2e:52:60:
b5:f3:12:68:ec:76:3c:26:d8:08:ad:4d:0e:ec:a8:d6:02:d5:
67:59:49:ac:92:b4:3f:b2:8d:6c:24:39:23:1c:86:f6:20:19:
f9:e0:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org