Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
File: AS212793.roa (raw, json)
Hash identifier: M+Db94A8WHsoVrM6ahs6CH+DwEVNfmWC4RaMucgbPj4=
Subject key identifier: B2:47:DA:99:2A:82:B7:04:27:D2:FA:83:29:AD:B2:2F:62:68:DF:BC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 288E67FB576E6923D339BCB3D47106144D4696F8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
Signing time: Tue 16 Jul 2024 02:42:23 +0000
ROA not before: Tue 16 Jul 2024 02:37:23 +0000
ROA not after: Tue 15 Jul 2025 02:42:23 +0000
asID: 212793
IP address blocks: 2a0f:9400:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8e:67:fb:57:6e:69:23:d3:39:bc:b3:d4:71:06:14:4d:46:96:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:23 2024 GMT
Not After : Jul 15 02:42:23 2025 GMT
Subject: CN=B247DA992A82B70427D2FA8329ADB22F6268DFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:9f:d8:59:ea:4f:42:66:8d:c6:45:dc:e6:
9a:83:7b:be:74:36:91:c2:e8:3d:0e:42:a8:d2:5f:
36:ba:ae:d3:88:17:0f:ab:91:56:cd:c3:8f:02:13:
07:7f:84:7a:83:9c:86:9a:3c:59:9c:89:b7:9a:e4:
6b:32:ec:b1:e9:c6:e2:01:16:a2:ca:11:ea:9a:ea:
80:db:48:95:49:0a:fe:73:71:81:7a:22:ef:9b:84:
5e:27:fc:9d:21:3f:0b:8e:18:9a:bb:5a:52:c5:42:
8e:5f:99:cb:79:b5:31:63:32:83:18:b0:f7:02:2a:
8a:ca:9b:59:7f:0e:01:57:51:ae:9e:8a:f3:58:b4:
ae:ac:f8:e6:a4:9f:ac:48:ac:56:dc:e1:9e:7b:c7:
0c:e6:82:db:24:78:a2:60:c4:40:4d:3b:ed:c2:87:
65:33:fa:e8:f5:ef:16:4b:4a:4f:e3:2e:3d:ba:e9:
ba:90:84:6f:ea:09:e7:9e:fd:3b:5a:29:dd:ae:3f:
cb:59:7d:cf:41:a6:95:82:43:78:63:31:2e:60:46:
91:e3:e4:51:54:5a:1e:33:f5:80:a2:cb:94:48:75:
e4:f6:d8:f6:08:61:89:90:f5:d5:87:96:e2:10:14:
db:4c:a7:ca:1b:be:f1:fc:bb:47:e1:0e:95:33:9e:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:47:DA:99:2A:82:B7:04:27:D2:FA:83:29:AD:B2:2F:62:68:DF:BC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:800b::/48
Signature Algorithm: sha256WithRSAEncryption
4e:61:1c:7b:0b:b5:3b:24:69:92:4d:b2:f8:22:15:94:07:82:
e6:af:4b:75:46:84:2c:2d:5d:28:9b:57:f9:a1:fb:31:fc:e5:
94:db:4f:40:80:00:a3:1f:d9:d4:23:c4:05:8d:0d:28:52:09:
5d:03:03:e0:5e:7f:71:b9:81:66:19:13:37:21:89:06:59:59:
ac:76:cb:35:ba:a8:08:11:c9:b5:d4:f0:c0:d3:bb:b4:65:d8:
1c:a0:7a:9e:92:24:40:1c:75:08:77:b6:65:e8:3a:61:7f:1b:
b7:3a:a6:77:9d:5a:f7:3d:1e:c1:d1:3d:91:5a:a3:67:a9:33:
90:68:72:f0:1e:a5:30:03:c7:58:09:16:aa:cb:a4:ca:34:6e:
c1:02:70:33:7a:4f:40:ed:54:44:f6:be:d7:69:a0:3b:0a:80:
6c:d9:3f:b4:8f:23:af:fd:96:71:d7:03:37:66:71:e8:10:d1:
c4:9f:da:fc:c9:23:a2:03:35:dc:b3:d4:2b:9e:e2:d0:78:0b:
51:d6:ae:1d:d5:19:1e:a2:92:e1:97:e6:35:55:27:21:e6:af:
33:47:94:e1:34:52:ec:ac:8d:90:32:a4:fd:ce:07:92:8e:e7:
2b:22:f0:e4:92:a7:91:eb:bf:03:a9:c2:c2:26:b4:01:fa:48:
2b:10:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org