Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
File: AS210718.roa (raw, json)
Hash identifier: W7n4fqfQ3YlDH23d4Yq8z8xJUzqVZ8qJBgS/GOeNVgk=
Subject key identifier: EA:71:2F:7C:1D:EE:46:C7:84:29:EE:A7:3C:EC:53:E3:4F:AB:BB:64
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 643A39852CBA30479C16B75158D5BAA845BCBEF4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
Signing time: Fri 20 Sep 2024 10:00:04 +0000
ROA not before: Fri 20 Sep 2024 09:55:04 +0000
ROA not after: Fri 19 Sep 2025 10:00:04 +0000
asID: 210718
IP address blocks: 2a0f:9400:7e01::/48 maxlen: 48
2a0f:9400:7e02::/48 maxlen: 48
2a0f:9400:7e03::/48 maxlen: 48
2a0f:9400:7e06::/48 maxlen: 48
2a0f:9400:7e07::/48 maxlen: 48
2a0f:9400:7e08::/48 maxlen: 48
2a0f:9400:7e17::/48 maxlen: 48
2a0f:9400:7e18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3a:39:85:2c:ba:30:47:9c:16:b7:51:58:d5:ba:a8:45:bc:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 20 09:55:04 2024 GMT
Not After : Sep 19 10:00:04 2025 GMT
Subject: CN=EA712F7C1DEE46C78429EEA73CEC53E34FABBB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:6b:a1:43:d3:73:1f:79:30:c9:c0:3c:a0:
fc:71:d3:7c:25:a5:6a:1a:ec:d3:2f:ef:ce:20:85:
94:98:0f:1a:6e:09:70:3d:bd:51:25:53:d0:07:59:
5b:6d:a5:25:6c:26:74:44:52:c8:b4:23:76:76:ca:
9f:84:92:73:7e:12:a4:b2:96:e5:86:83:1a:66:14:
dc:38:75:8c:86:94:53:27:79:81:bd:a3:8b:aa:6a:
2b:57:33:da:62:b9:84:cd:5d:0d:69:7d:77:db:da:
3a:04:c1:66:25:37:c6:02:5c:75:34:10:f9:fd:04:
a7:f5:36:29:17:01:c7:a5:52:c6:2e:a7:26:ab:d8:
8f:10:ab:3e:9e:5b:57:4b:ab:4d:07:b7:ea:ad:0a:
4a:c5:67:f0:8b:ca:f6:be:47:a7:18:3a:a9:fe:1e:
4a:05:82:2b:65:4c:67:7f:cb:53:63:92:52:2d:87:
34:be:06:76:94:d2:a9:28:f2:6a:11:d6:ac:4c:67:
71:88:f2:9a:3a:eb:ef:6c:9d:16:41:2c:bc:e0:eb:
05:25:15:fe:76:65:ec:ac:c1:92:9c:3f:62:22:7e:
23:8f:9c:d7:96:5f:d2:26:f8:9b:8a:3f:75:c9:ce:
4f:71:2e:db:01:67:dd:52:cb:42:61:f9:d6:7e:80:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:2F:7C:1D:EE:46:C7:84:29:EE:A7:3C:EC:53:E3:4F:AB:BB:64
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e01::-2a0f:9400:7e03:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e06::-2a0f:9400:7e08:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e17::-2a0f:9400:7e18:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:e7:cc:65:8d:b2:14:9a:9b:2e:d9:d4:82:ae:7a:4e:e4:9d:
7b:c0:d0:a9:2a:dd:86:77:fe:d8:11:18:89:a5:64:57:cf:b4:
4a:96:91:49:87:93:51:7e:41:ca:d9:a0:fb:8f:4e:cb:f3:65:
0f:df:71:5d:6f:96:5b:53:3d:a5:d7:a9:1d:21:52:88:43:08:
3f:58:86:f7:03:49:e4:ca:2f:b1:08:29:24:19:d6:90:0a:bd:
d3:e2:06:da:ae:80:30:f7:6c:1c:8a:00:55:aa:14:e6:5b:ef:
8b:0e:8f:09:98:01:39:dd:78:b2:ab:f6:85:20:b0:72:85:08:
7c:8e:99:88:94:eb:f5:c7:5a:f1:26:48:3f:a8:8f:71:2b:b3:
d2:db:99:7b:f0:ff:4c:67:27:51:20:9c:4d:e7:c3:14:f9:72:
34:00:74:06:40:1e:0b:f4:fd:e3:9d:3b:0b:ee:75:da:8b:f0:
21:67:7e:ae:3e:85:97:3f:92:cd:a2:da:c4:f1:41:15:b5:36:
cd:4a:ed:bf:29:a1:d3:72:0d:c2:34:d4:e0:5c:04:8f:59:90:
5a:4d:a4:3f:e7:0a:69:2b:4b:02:ff:bf:9c:d7:5c:5f:5a:6b:
e7:23:fe:02:9d:7a:a2:44:a8:34:41:9c:19:98:23:a7:86:f2:
b0:17:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org