Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
File: AS210576.roa (raw, json)
Hash identifier: /5pwrDpFI5GMjEkBrFsOhACGVEkzXu1V8qTZDhd69XM=
Subject key identifier: FA:97:76:6E:68:46:C3:D6:84:B2:83:44:37:B9:17:4A:7B:B9:CD:86
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 21356BFEDF8F50CFA80C0EA2E64D88C98A678195
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
Signing time: Tue 10 Oct 2023 13:58:02 +0000
ROA not before: Tue 10 Oct 2023 13:53:02 +0000
ROA not after: Tue 08 Oct 2024 13:58:02 +0000
asID: 210576
IP address blocks: 2a0f:9400:7500::/48 maxlen: 48
2a0f:9400:7501::/48 maxlen: 48
2a0f:9400:7506::/48 maxlen: 48
2a0f:9400:7507::/48 maxlen: 48
2a0f:9400:770b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:35:6b:fe:df:8f:50:cf:a8:0c:0e:a2:e6:4d:88:c9:8a:67:81:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 10 13:53:02 2023 GMT
Not After : Oct 8 13:58:02 2024 GMT
Subject: CN=FA97766E6846C3D684B2834437B9174A7BB9CD86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:1d:61:e0:a2:18:30:1a:4f:ff:71:5c:4d:
15:57:0d:86:ea:68:7a:1c:44:08:67:49:28:17:9c:
20:09:1e:3f:ac:a7:32:2d:9d:44:27:78:76:3e:98:
40:a6:df:14:93:ab:dc:bf:e1:1f:53:e1:5f:1d:21:
52:28:c2:23:ec:c8:40:93:50:f4:1a:2d:39:f2:c9:
28:7d:ad:a3:5e:3c:07:85:75:ca:60:d6:1e:63:a4:
db:85:e7:2c:27:ea:b8:46:c0:e5:3e:8e:87:cb:c5:
7f:86:ff:bb:75:b4:13:1d:43:33:e0:3a:84:e0:43:
16:c7:b4:a5:6d:d1:5f:a2:77:b4:9e:a8:e1:3f:cf:
a8:01:0f:73:2a:b2:a3:18:fb:12:33:da:c8:9d:55:
ae:aa:17:a3:2d:36:af:34:29:f5:82:19:0c:70:fb:
0a:00:97:b0:23:30:e6:07:df:b4:8e:b8:a4:a9:a7:
9f:f5:1b:9c:2b:95:87:f1:80:22:ae:7c:4a:4c:ab:
5f:99:15:32:19:fc:61:58:9f:32:a1:71:8d:8e:77:
57:0a:e4:e8:53:4a:2d:78:6f:0a:78:f1:10:a5:6f:
ef:95:66:3e:9b:63:c4:30:98:45:2d:2d:99:13:d7:
f8:d8:f0:92:65:e6:c1:2b:3c:2d:de:f4:30:40:63:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:97:76:6E:68:46:C3:D6:84:B2:83:44:37:B9:17:4A:7B:B9:CD:86
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7500::/47
2a0f:9400:7506::/47
2a0f:9400:770b::/48
Signature Algorithm: sha256WithRSAEncryption
6d:2b:42:37:e4:07:e8:f6:57:e1:1a:17:65:4c:3e:96:ca:bc:
c2:9a:4d:3a:05:48:8e:5c:84:d8:14:4d:3b:39:f0:f6:dd:74:
a7:c0:a4:c6:b5:25:46:84:eb:d4:94:da:51:a3:8b:6d:31:64:
7f:df:95:10:b4:9f:4a:23:09:5c:8b:0a:db:e7:2e:06:a4:e8:
59:ec:c0:a0:44:53:0f:4a:21:3e:23:6a:ec:f5:16:f9:7e:3a:
8d:7e:e4:b7:0b:e8:78:8b:76:3c:c5:c4:ed:68:bd:35:70:f0:
74:5a:c6:ae:1e:d0:91:d6:f9:e2:a9:06:9d:5f:b7:aa:ae:d8:
ad:3f:d4:43:12:f8:ae:de:0d:70:03:38:5c:a0:a3:99:6a:2f:
2a:46:8a:bf:ad:60:e9:cd:46:19:e6:4e:9b:d8:04:e3:bc:78:
e6:45:7c:ea:d8:91:39:25:7f:b3:2c:6d:2d:2d:9a:03:68:18:
27:45:2b:4e:4d:08:d8:8f:7d:b5:7a:a5:a3:11:4c:35:42:ee:
a7:ac:9a:0f:39:22:d7:19:aa:21:50:7c:b5:59:df:cf:d8:31:
9b:00:fe:d0:8d:90:bf:86:6a:95:7f:ac:2e:eb:32:29:c2:48:
5f:7a:ad:e5:09:e2:e7:7a:96:c4:aa:61:76:5b:20:27:35:44:
4a:ee:0b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org