Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
File: AS210542.roa (raw, json)
Hash identifier: 5ycJMLRHpLnOUyr65DDV2ilYYGuqIkCLOGIZhcFzfhU=
Subject key identifier: CF:4C:58:F6:C4:DF:32:3F:B0:97:02:2D:2E:66:44:96:7B:06:98:EF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5A457B1CF8C3D285E8ECFDAC4945B455C171F653
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
Signing time: Sat 27 Jul 2024 05:47:03 +0000
ROA not before: Sat 27 Jul 2024 05:42:03 +0000
ROA not after: Sat 26 Jul 2025 05:47:03 +0000
asID: 210542
IP address blocks: 2a0f:9400:7722::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:45:7b:1c:f8:c3:d2:85:e8:ec:fd:ac:49:45:b4:55:c1:71:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 27 05:42:03 2024 GMT
Not After : Jul 26 05:47:03 2025 GMT
Subject: CN=CF4C58F6C4DF323FB097022D2E6644967B0698EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:7b:68:b5:bd:c1:fa:15:f9:49:55:e4:ab:
a6:d0:78:c9:91:91:76:00:f6:f9:4c:d6:ec:61:97:
6d:bb:3f:9b:21:67:76:64:b9:58:66:b5:89:51:a1:
72:a4:9b:bc:d0:fa:2d:74:96:b3:9a:f7:ff:fe:65:
95:7e:72:dc:4a:a0:ea:a4:1b:aa:de:7e:eb:55:89:
3f:28:4f:5a:f5:c8:2a:4b:ef:d1:92:c9:cc:a1:a3:
16:0f:2c:5a:a9:d8:51:d0:31:fc:8a:fc:aa:b5:38:
72:e1:7e:08:0c:25:87:cc:1f:41:0d:91:f0:d8:2b:
b5:15:b2:0e:83:d2:b7:8e:84:a0:e5:9c:74:bf:b6:
f6:82:99:0d:79:7b:fe:26:37:5d:1d:0b:33:16:d4:
eb:85:0d:6f:24:68:d0:ea:7c:12:ff:6b:a2:53:e8:
d5:eb:0b:30:35:15:23:8a:e4:9d:ca:67:a5:3d:d6:
57:d7:e8:a1:5e:0e:94:92:79:12:c4:ae:0b:ba:8d:
1c:f3:b1:24:98:0e:2a:91:27:af:75:04:ae:3a:77:
5e:07:3d:b3:a6:ab:a2:00:e8:b2:b0:e3:19:58:c8:
23:36:61:da:b0:b3:f8:97:60:1b:bc:17:49:03:f3:
02:fc:79:cb:b5:18:cf:96:1f:1d:0f:e4:e4:10:7a:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4C:58:F6:C4:DF:32:3F:B0:97:02:2D:2E:66:44:96:7B:06:98:EF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7722::/48
Signature Algorithm: sha256WithRSAEncryption
a3:12:4b:af:88:f7:69:19:78:15:36:4e:04:c4:36:d6:a8:97:
9b:a5:cc:9b:ac:73:4f:1d:57:bb:f4:8f:13:f1:b8:64:63:a4:
8d:55:10:0a:80:31:ed:83:b8:3b:05:22:30:38:9d:79:d6:e3:
4f:e9:90:32:58:54:dd:51:51:1d:9f:74:48:f0:df:fb:e5:63:
8a:9c:0a:dc:9d:6c:55:6e:03:ec:e6:cf:72:8c:ce:fe:02:bf:
f1:e0:2f:99:03:51:31:7e:a6:67:74:c2:38:f9:e4:45:68:45:
1c:cd:6e:23:00:ac:f8:68:37:95:6f:cf:ca:26:90:54:9f:85:
bd:ac:eb:34:9b:e2:6a:98:83:5d:6b:c6:a1:f9:39:a8:77:d1:
50:e6:bf:6b:e5:c7:2a:7c:29:53:d5:ea:7b:7f:2b:80:fe:6c:
77:f0:0c:db:eb:a2:d3:99:1a:1a:69:61:28:fc:6a:50:26:66:
8e:d8:4b:5f:24:2e:44:9b:39:a3:83:2a:93:2f:8a:04:6d:a5:
d8:4b:bc:f0:64:b6:03:01:58:20:23:53:c7:78:c0:95:bb:b0:
2c:26:94:75:1e:22:45:44:36:fd:3d:f7:03:d4:10:54:01:52:
4c:1f:89:90:64:b5:89:48:4a:57:05:16:5d:ec:b7:2b:eb:ea:
6f:96:6c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org