Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
File: AS210714.roa (raw, json)
Hash identifier: VERB9Pcl0t/fkhiBvyCDpq3aQ3nieFGi9HUlYiml/IQ=
Subject key identifier: 8B:53:AF:3E:60:B8:BD:79:FB:D4:81:27:54:6B:6B:DE:4E:A4:25:96
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5291339DBE66828937E9D0BA9C19F8DEB564A18A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
Signing time: Tue 15 Aug 2023 02:00:25 +0000
ROA not before: Tue 15 Aug 2023 01:55:25 +0000
ROA not after: Tue 13 Aug 2024 02:00:25 +0000
asID: 210714
IP address blocks: 2a0f:9400:7862::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:91:33:9d:be:66:82:89:37:e9:d0:ba:9c:19:f8:de:b5:64:a1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:25 2023 GMT
Not After : Aug 13 02:00:25 2024 GMT
Subject: CN=8B53AF3E60B8BD79FBD48127546B6BDE4EA42596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:67:1b:0f:98:39:13:1c:bd:06:ca:f9:b7:
46:8a:92:43:1c:f1:a4:5c:ee:91:ca:b1:a5:4e:88:
89:43:e2:dd:a2:0f:13:c4:57:ec:78:67:86:d7:96:
85:97:65:56:5c:6f:8a:8b:c7:24:7b:49:de:fd:24:
aa:e7:2c:0a:e5:f7:66:de:48:30:55:53:33:af:d4:
44:70:67:bc:70:7d:75:4c:63:d6:c1:ca:eb:16:08:
b5:55:31:65:e8:0e:3b:1d:3d:79:bf:34:01:ca:e1:
41:6c:6d:f2:43:a7:98:7b:46:65:2f:d8:9f:0a:43:
81:83:40:cc:aa:ea:45:19:4d:9d:db:6a:34:7e:bc:
ec:13:39:59:37:54:1b:cc:47:e3:ad:35:1b:3d:66:
90:72:cd:04:09:64:49:17:38:48:fb:cd:60:f5:e0:
06:9e:3c:96:94:14:8f:7b:fe:20:5e:c9:76:d1:79:
cf:f4:0d:f5:f0:ff:ac:a1:32:4c:cb:4c:fc:5b:64:
b8:3d:a8:d8:48:65:0c:17:dc:0a:b4:9b:5d:cd:75:
8e:1b:b7:49:f1:73:5d:ec:62:35:27:b9:cb:c9:43:
52:10:a3:a4:ef:f4:a1:81:9e:52:66:cb:4e:c5:47:
08:b3:df:7b:8c:3f:c3:e3:46:82:6e:e0:64:d1:3f:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:AF:3E:60:B8:BD:79:FB:D4:81:27:54:6B:6B:DE:4E:A4:25:96
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7862::/48
Signature Algorithm: sha256WithRSAEncryption
79:c0:14:86:30:6c:a7:61:b0:74:85:85:6c:41:50:ac:f0:5a:
2a:58:f7:fb:98:ce:5d:94:57:34:13:47:74:2e:09:93:fb:a1:
df:bc:f0:4f:17:9d:09:14:b9:61:20:6b:1f:e8:e0:05:5e:cc:
57:a9:d9:09:4e:c5:7e:18:85:48:c9:91:27:f0:1d:79:47:e3:
1d:58:0a:cf:e1:07:81:5d:83:3f:87:3c:98:7f:21:bf:88:ef:
b1:84:d4:0e:3a:0e:10:b6:44:70:af:75:f9:42:cd:00:69:6f:
e5:a5:29:af:79:41:75:42:01:60:65:59:87:01:44:57:a1:cc:
a2:2b:fd:e2:d0:53:cd:0d:83:26:21:e4:99:f4:56:f0:13:67:
d1:b4:82:f7:dc:7a:c8:14:68:a4:b8:04:4b:f1:1f:71:62:8d:
07:97:3a:ec:c0:cb:36:ed:b1:9a:64:9e:aa:d8:82:76:18:d9:
2d:a8:4d:f9:42:77:84:c8:0c:dc:c4:dd:57:28:bc:b9:f1:34:
3f:c9:48:35:d6:a3:27:9b:be:9c:77:2b:10:a2:4d:13:08:56:
fd:b0:29:e7:fa:c0:b3:44:60:ee:ce:1a:2f:42:1d:be:4c:4f:
a7:ec:ee:1b:c0:fb:57:24:e0:c7:25:9a:e4:26:ea:74:91:3a:
95:46:09:5b
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUUpEznb5mgok36dC6nBn43rVkoYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MTUwMTU1MjVaFw0yNDA4MTMwMjAwMjVaMDMxMTAvBgNV
BAMTKDhCNTNBRjNFNjBCOEJENzlGQkQ0ODEyNzU0NkI2QkRFNEVBNDI1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEL2cbD5g5Exy9Bsr5t0aKkkMc
8aRc7pHKsaVOiIlD4t2iDxPEV+x4Z4bXloWXZVZcb4qLxyR7Sd79JKrnLArl92be
SDBVUzOv1ERwZ7xwfXVMY9bByusWCLVVMWXoDjsdPXm/NAHK4UFsbfJDp5h7RmUv
2J8KQ4GDQMyq6kUZTZ3bajR+vOwTOVk3VBvMR+OtNRs9ZpByzQQJZEkXOEj7zWD1
4AaePJaUFI97/iBeyXbRec/0DfXw/6yhMkzLTPxbZLg9qNhIZQwX3Aq0m13NdY4b
t0nxc13sYjUnucvJQ1IQo6Tv9KGBnlJmy07FRwiz33uMP8PjRoJu4GTRPwJNAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUi1OvPmC4vXn71IEnVGtr3k6kJZYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMDcxNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB4YjANBgkqhkiG9w0BAQsFAAOC
AQEAecAUhjBsp2GwdIWFbEFQrPBaKlj3+5jOXZRXNBNHdC4Jk/uh37zwTxedCRS5
YSBrH+jgBV7MV6nZCU7FfhiFSMmRJ/AdeUfjHVgKz+EHgV2DP4c8mH8hv4jvsYTU
DjoOELZEcK91+ULNAGlv5aUpr3lBdUIBYGVZhwFEV6HMoiv94tBTzQ2DJiHkmfRW
8BNn0bSC99x6yBRopLgES/EfcWKNB5c67MDLNu2xmmSeqtiCdhjZLahN+UJ3hMgM
3MTdVyi8ufE0P8lINdajJ5u+nHcrEKJNEwhW/bAp5/rAs0Rg7s4aL0IdvkxPp+zu
G8D7VyTgxyWa5CbqdJE6lUYJWw==
-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org