Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211481.roa
File: AS211481.roa (raw, json)
Hash identifier: 8LBj2Ux/rXhYE+vA63Tg/98hYpnJOK+DtiUDpUGduTY=
Subject key identifier: 14:04:BA:B5:AC:43:41:45:FC:A1:8D:15:F8:B6:A4:84:E6:B5:49:C0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 40B9A08118A65E519A1F5151099BE359EBF926C0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211481.roa
Signing time: Tue 15 Aug 2023 02:00:24 +0000
ROA not before: Tue 15 Aug 2023 01:55:24 +0000
ROA not after: Tue 13 Aug 2024 02:00:24 +0000
asID: 211481
IP address blocks: 2a0f:9400:770a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b9:a0:81:18:a6:5e:51:9a:1f:51:51:09:9b:e3:59:eb:f9:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:24 2023 GMT
Not After : Aug 13 02:00:24 2024 GMT
Subject: CN=1404BAB5AC434145FCA18D15F8B6A484E6B549C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:cd:c8:c3:4e:f5:8f:27:b0:22:99:b8:98:
de:42:1e:d7:4e:0c:17:c5:2c:a5:d3:cb:89:13:ea:
50:d4:0b:b6:cb:94:66:1b:3b:bc:03:88:fd:02:f2:
89:cb:07:ee:80:57:0b:d0:50:93:65:84:64:a1:b8:
45:1f:16:0d:12:e2:d8:80:6c:5e:56:99:e4:c6:48:
72:22:8f:bf:57:f3:52:24:36:1c:ba:9f:8c:2c:5a:
d4:08:02:57:b2:5a:bd:1f:0f:6f:3b:8a:d0:0c:e9:
2a:a7:61:0a:5b:ed:7c:60:4f:5f:cc:d2:d2:a8:3f:
ed:3b:e5:9b:d9:df:2f:59:3b:e5:4b:c0:ca:a9:96:
9b:e0:2b:de:e3:c7:f6:fd:45:04:1f:76:76:dc:0e:
5b:dc:3f:5a:21:a3:48:17:6b:0d:14:08:4c:3c:e7:
cd:d3:da:4a:5a:08:c8:5a:83:73:7c:5f:e2:9e:cd:
29:29:b9:d5:4e:e9:4b:1f:74:6c:c3:5c:b8:63:63:
b0:5c:8a:a8:35:42:09:90:12:6e:cb:a5:06:87:42:
8e:5c:df:91:65:1f:4c:6b:8a:f0:4d:f3:b8:f7:e0:
42:8e:52:48:52:22:c4:ab:80:60:cb:e2:4f:cf:45:
00:2b:2e:e3:7b:3d:b6:f3:0e:b7:5c:ba:4c:9c:fb:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:BA:B5:AC:43:41:45:FC:A1:8D:15:F8:B6:A4:84:E6:B5:49:C0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS211481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770a::/48
Signature Algorithm: sha256WithRSAEncryption
51:b0:11:83:48:08:57:18:95:47:38:d9:b3:d4:b2:d8:0a:30:
dd:b2:7a:ba:97:1c:a3:b8:52:9a:4a:15:83:70:41:38:82:96:
b7:fb:18:c9:d7:04:a2:21:4b:36:fd:15:91:82:e8:02:eb:64:
ee:99:10:d3:aa:ad:db:e3:7d:05:7e:83:79:39:75:b3:d5:db:
1f:ce:e7:22:92:33:9a:05:8c:ab:24:c0:06:16:1e:ff:25:46:
5f:e3:df:58:33:53:a2:1a:ff:43:be:2d:7f:94:07:7c:31:a5:
53:a7:bd:fb:3e:c9:d1:0c:98:7a:9a:58:cd:67:e8:f3:e7:20:
f2:cc:c6:41:40:73:05:d7:24:b4:cb:21:24:61:74:7e:9a:e7:
d7:65:d3:73:e9:06:1a:be:47:f0:a9:36:e4:e9:e2:16:f7:bc:
e1:70:f4:57:07:45:8f:c0:bb:a6:c9:a5:e5:c1:f0:3e:68:06:
e8:cb:9b:1e:0f:76:a8:ee:ee:bc:ae:bd:18:a7:40:72:1c:c7:
00:9d:7a:e2:97:b6:8b:0e:a6:d1:8f:0f:dc:75:03:d6:45:57:
5f:61:00:63:ef:ee:42:7b:2e:78:72:9c:58:12:e7:98:af:04:
8f:fa:da:1b:2c:cd:f9:15:eb:48:2b:c5:6d:f3:47:e0:9a:c7:
6b:50:91:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org