Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
File: AS210714.roa (raw, json)
Hash identifier: EIZDPdJxzckTYF1BVloPLSZDuAEjlaBpwEI6RTFN3DI=
Subject key identifier: AA:A9:DD:DA:75:C9:BC:F0:7B:4E:5A:27:18:84:43:B9:22:A8:4B:91
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 521EE6B290017346F9E3398634F3AA9E324BF0A0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
Signing time: Tue 16 Jul 2024 02:42:23 +0000
ROA not before: Tue 16 Jul 2024 02:37:23 +0000
ROA not after: Tue 15 Jul 2025 02:42:23 +0000
asID: 210714
IP address blocks: 2a0f:9400:7862::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1e:e6:b2:90:01:73:46:f9:e3:39:86:34:f3:aa:9e:32:4b:f0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:23 2024 GMT
Not After : Jul 15 02:42:23 2025 GMT
Subject: CN=AAA9DDDA75C9BCF07B4E5A27188443B922A84B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:13:a7:1f:d2:eb:f3:3a:aa:c8:1f:36:c7:
4a:6a:01:77:39:52:12:44:07:ed:c6:46:4f:33:4e:
67:95:7c:66:56:58:fc:8b:e3:cf:80:da:c2:a7:86:
4a:07:79:d2:eb:ad:26:5b:0c:c2:9a:82:e8:08:2a:
32:d9:d8:b0:0e:ce:c7:a9:bc:66:d1:53:1f:30:9b:
12:1c:d7:5d:33:6b:c9:98:83:e2:1b:37:2a:30:5e:
f1:34:9f:f9:65:35:31:9b:52:69:91:87:ce:02:25:
da:52:f0:3b:7d:30:1c:2c:ca:34:8c:df:e1:a0:d1:
24:42:b5:e4:21:44:4b:28:2f:02:69:71:46:48:5d:
7d:a5:5b:f0:e6:60:25:45:d2:b9:b8:eb:87:a4:35:
ad:6f:c4:af:20:11:8a:5f:db:93:1d:8e:f9:78:47:
1c:8a:ed:2a:fe:9a:28:44:d7:1b:31:a5:22:70:19:
8d:ba:b9:6f:96:94:b0:1a:30:04:28:f7:85:ad:a1:
06:a7:f0:81:ff:27:27:44:e0:b0:b1:f9:29:0a:bf:
9f:af:e4:25:27:44:98:d6:01:17:8b:f5:a2:71:b3:
89:27:29:e7:cc:04:f0:0d:0f:44:ac:08:ce:60:aa:
6c:f0:c8:7a:8d:a3:57:75:23:af:40:5f:a0:e4:5d:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A9:DD:DA:75:C9:BC:F0:7B:4E:5A:27:18:84:43:B9:22:A8:4B:91
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210714.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7862::/48
Signature Algorithm: sha256WithRSAEncryption
72:0a:4c:9e:6b:02:fd:94:ec:95:2b:8c:75:cd:f0:da:ee:19:
6c:90:02:fd:9e:aa:1e:56:e4:fc:91:82:95:bf:a6:42:39:3b:
05:9c:95:eb:d2:52:46:af:95:df:af:cb:b3:55:80:2b:da:ee:
25:42:bd:8b:40:65:1f:94:b3:79:2e:8f:f5:05:01:55:01:cb:
a9:a1:ca:dc:b1:3b:db:44:d3:6c:ef:e8:28:6f:65:db:04:f3:
f4:71:c8:c3:a3:2e:e1:3b:44:c9:09:17:9c:87:1c:9f:2d:84:
bc:dc:f4:54:3d:cf:d3:b2:3a:ec:4b:7c:ce:d9:f6:60:b4:67:
81:cb:5b:6d:83:15:f5:c4:08:48:ab:c3:99:3b:8c:c5:8f:df:
09:5e:83:40:2b:85:61:e0:09:60:22:4b:c4:8b:22:11:52:33:
d7:a7:b5:a5:1f:6e:79:65:21:13:16:79:78:bd:a8:36:88:74:
2a:4f:d0:7a:1b:bd:8a:e7:c1:42:2f:2a:c4:ec:62:95:3c:e5:
84:6c:f4:67:f7:38:84:be:44:63:1f:56:4f:ae:04:15:bf:e9:
0d:7a:d9:4a:aa:55:dd:1e:d7:f4:af:35:90:f1:b2:a7:bf:d1:
66:ed:bb:19:c4:46:39:bb:3a:42:54:df:0b:bf:d4:6b:2b:4c:
eb:7f:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org