Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
File: AS210576.roa (raw, json)
Hash identifier: tAJqb1Fzr5soeNUrCoPM3UCZ2rfy2BOq5UBtcm5OdYA=
Subject key identifier: EC:76:5D:0E:67:1A:AE:15:8F:66:29:0B:F7:7F:63:01:03:5A:6E:9D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5F90521034299FAD1415C5A1ADA44243770101BD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
Signing time: Sun 02 Feb 2025 22:33:47 +0000
ROA not before: Sun 02 Feb 2025 22:28:47 +0000
ROA not after: Sun 01 Feb 2026 22:33:47 +0000
asID: 210576
IP address blocks: 2a0f:9400:7506::/48 maxlen: 48
2a0f:9400:770b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:90:52:10:34:29:9f:ad:14:15:c5:a1:ad:a4:42:43:77:01:01:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 2 22:28:47 2025 GMT
Not After : Feb 1 22:33:47 2026 GMT
Subject: CN=EC765D0E671AAE158F66290BF77F6301035A6E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:3a:65:9d:a5:2e:c9:e7:7c:c9:d8:6f:b4:
1c:ff:76:d6:d6:3c:21:ac:72:8f:e7:84:e3:37:8b:
26:12:a1:1c:03:55:64:fa:50:f8:f1:8e:24:ea:a5:
46:0f:61:03:67:26:5f:00:59:aa:45:51:80:aa:bc:
a1:9c:fb:00:b0:61:da:44:26:21:41:4d:3f:48:24:
bc:01:e0:ee:14:b5:b3:78:5a:36:ec:b6:33:fc:9c:
b2:3a:08:aa:cb:09:2e:c8:4c:aa:87:00:02:4d:6b:
39:e4:d6:52:a5:63:e4:97:42:36:de:5a:a5:c9:31:
16:01:43:0a:26:c4:74:30:6a:52:4e:12:a9:a9:2a:
e0:88:9b:71:b7:41:75:e7:76:6e:96:84:b8:d8:37:
62:1c:af:d5:ea:ab:dc:fa:c4:a8:57:e1:61:f1:c3:
58:1b:e1:f9:fa:63:f5:79:4a:67:c3:0f:99:43:12:
e8:3b:fe:f3:c3:b7:e4:36:08:50:4e:78:f6:05:af:
6f:11:fb:6a:5a:de:f3:11:e7:f2:18:12:81:ff:2e:
03:1f:c2:ee:8b:4d:0f:de:fa:3b:68:ca:2a:86:ff:
8c:20:a9:e8:22:a7:dd:0e:3c:06:4f:9b:23:f5:18:
40:87:d5:22:f5:3b:56:d9:29:20:c5:ed:10:be:c6:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:5D:0E:67:1A:AE:15:8F:66:29:0B:F7:7F:63:01:03:5A:6E:9D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7506::/48
2a0f:9400:770b::/48
Signature Algorithm: sha256WithRSAEncryption
27:33:17:55:d1:4f:a4:1d:d8:d0:8c:b7:b8:1b:92:72:d0:ad:
37:c2:96:a5:f4:4e:15:86:25:14:77:e9:d7:14:ba:60:68:fb:
a6:d7:53:b7:af:64:fa:94:71:0d:bc:d6:02:68:ec:0e:76:b8:
c5:93:c5:59:5a:c4:f6:3e:59:91:b0:63:aa:7c:64:15:0d:98:
40:c9:9d:33:7b:4d:81:42:51:e6:72:a6:14:a2:a6:e5:76:5e:
9c:c3:ee:5d:8d:02:2c:b3:be:bc:dd:87:47:37:e5:b4:e5:86:
67:01:13:f1:a2:4b:94:4b:67:d9:7f:8c:29:28:fa:d2:2e:ea:
1c:e6:59:73:cb:09:76:f0:f4:ce:46:06:7c:0f:36:d5:ed:08:
e8:6c:fb:3b:c8:97:d2:1a:31:21:7d:0b:6c:3c:c4:a7:80:51:
1b:ac:b0:69:ac:30:1d:01:13:82:ac:93:0b:d7:e6:22:47:01:
01:39:58:48:d2:f1:16:94:d9:72:48:7d:68:f3:a1:2e:8d:f3:
84:94:a4:47:65:2c:98:28:34:21:2b:62:0f:1a:11:ff:9f:e1:
81:9e:23:1e:04:c9:6e:6b:86:cc:63:fd:fa:56:61:53:72:1a:
9c:94:82:71:ea:53:00:f3:ff:23:e8:80:e7:d8:f2:eb:64:60:
71:e9:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:32 2025 by rpki-client