Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
File: AS212793.roa (raw, json)
Hash identifier: iKmgLBU2FIKc7w9jC9obzFfipYNPVBUAEAqFJuJZ9K0=
Subject key identifier: 5C:39:CC:1A:CF:C2:19:B3:74:02:6C:9A:31:CA:8B:A0:FD:52:5C:44
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0E217316A2A33AF41DE9BF898293B5707B9B0B64
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
Signing time: Tue 15 Aug 2023 02:00:26 +0000
ROA not before: Tue 15 Aug 2023 01:55:26 +0000
ROA not after: Tue 13 Aug 2024 02:00:26 +0000
asID: 212793
IP address blocks: 2a0f:9400:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:21:73:16:a2:a3:3a:f4:1d:e9:bf:89:82:93:b5:70:7b:9b:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:26 2023 GMT
Not After : Aug 13 02:00:26 2024 GMT
Subject: CN=5C39CC1ACFC219B374026C9A31CA8BA0FD525C44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:91:48:de:63:33:16:64:3a:b1:5f:8b:67:
b9:4c:d5:30:43:3c:9d:c1:cf:e6:95:fa:47:3c:3d:
1a:e3:d0:d9:c6:a1:0d:ad:96:ff:d4:05:b3:47:b5:
d4:dd:ea:7e:2a:e9:82:39:fc:5d:37:ac:04:bf:8f:
ab:19:2b:d6:f2:34:a2:0e:b2:d7:27:26:d7:d4:e4:
79:44:a4:5e:84:11:35:1b:a2:c4:96:91:2e:e4:9d:
90:be:68:ce:c7:ff:61:1b:78:06:e1:6a:aa:22:32:
17:fc:0f:d8:30:53:24:0b:4f:33:22:0e:88:32:69:
52:72:bf:39:65:e4:37:14:b7:27:40:81:2a:7a:30:
41:a2:2c:9f:57:cb:7f:8a:3b:6b:68:16:b9:5e:2b:
b1:0e:44:a4:76:07:d2:2e:e4:35:93:7d:8c:38:aa:
f7:21:3a:0d:7d:05:c3:ec:ba:7c:64:b3:f8:7a:85:
47:a9:a5:75:f0:5c:74:cb:32:41:17:a5:4e:4f:b2:
36:4f:da:e5:a1:0d:78:e9:e1:de:c4:f7:ad:69:93:
c7:2e:56:4c:fa:3e:54:a4:d6:5e:5f:3d:90:cb:60:
69:29:b7:6e:b9:88:84:b5:03:a4:18:72:6a:15:77:
7f:2d:80:5c:85:88:b2:b1:6c:52:ab:99:33:d0:da:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:CC:1A:CF:C2:19:B3:74:02:6C:9A:31:CA:8B:A0:FD:52:5C:44
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212793.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:800b::/48
Signature Algorithm: sha256WithRSAEncryption
7f:0e:3a:9d:50:4f:4c:34:77:63:23:5a:12:5f:07:6e:c6:0b:
fd:3f:8c:29:82:53:c1:5b:19:b2:24:ea:3a:44:0f:64:eb:06:
3f:64:81:89:b6:0d:5a:5c:fc:fe:a5:8a:26:82:06:f2:c1:a3:
da:b1:36:eb:f5:35:8b:6b:2c:a3:15:6a:c9:7e:e2:7b:88:06:
4b:c0:24:3e:0c:3b:d3:99:49:34:fc:1c:8b:74:22:6c:a7:cf:
22:5d:fa:bc:6c:50:66:26:37:db:5d:b1:02:ca:e0:45:95:e2:
cb:85:2c:e5:36:f7:58:61:36:68:2b:40:17:00:7a:c6:f0:4c:
c3:b4:72:76:d4:3a:75:bc:0c:4d:61:85:b1:b4:23:8c:94:6e:
2e:02:9f:3d:33:ca:bd:fb:50:26:d7:99:31:b0:b2:20:45:7c:
74:ed:f4:40:00:a9:ab:e6:6c:91:75:44:65:11:c4:53:33:6b:
ba:29:29:2a:72:3b:62:e0:75:e9:1a:e2:01:96:57:be:b5:47:
6e:db:12:70:ff:19:08:40:5d:02:53:6f:64:83:4e:9d:1a:de:
cf:3e:a9:8f:87:b1:50:be:16:5c:aa:81:fd:36:f7:c5:d0:29:
1a:a8:96:32:5c:9c:52:e4:09:cf:8a:b6:c1:e6:b4:ef:93:ae:
ca:72:ac:60
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUDiFzFqKjOvQd6b+JgpO1cHubC2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MTUwMTU1MjZaFw0yNDA4MTMwMjAwMjZaMDMxMTAvBgNV
BAMTKDVDMzlDQzFBQ0ZDMjE5QjM3NDAyNkM5QTMxQ0E4QkEwRkQ1MjVDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMpFI3mMzFmQ6sV+LZ7lM1TBD
PJ3Bz+aV+kc8PRrj0NnGoQ2tlv/UBbNHtdTd6n4q6YI5/F03rAS/j6sZK9byNKIO
stcnJtfU5HlEpF6EETUbosSWkS7knZC+aM7H/2EbeAbhaqoiMhf8D9gwUyQLTzMi
DogyaVJyvzll5DcUtydAgSp6MEGiLJ9Xy3+KO2toFrleK7EORKR2B9Iu5DWTfYw4
qvchOg19BcPsunxks/h6hUeppXXwXHTLMkEXpU5PsjZP2uWhDXjp4d7E961pk8cu
Vkz6PlSk1l5fPZDLYGkpt265iIS1A6QYcmoVd38tgFyFiLKxbFKrmTPQ2pSVAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUXDnMGs/CGbN0AmyaMcqLoP1SXEQwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMjc5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlACACzANBgkqhkiG9w0BAQsFAAOC
AQEAfw46nVBPTDR3YyNaEl8HbsYL/T+MKYJTwVsZsiTqOkQPZOsGP2SBibYNWlz8
/qWKJoIG8sGj2rE26/U1i2ssoxVqyX7ie4gGS8AkPgw705lJNPwci3QibKfPIl36
vGxQZiY3212xAsrgRZXiy4Us5Tb3WGE2aCtAFwB6xvBMw7RydtQ6dbwMTWGFsbQj
jJRuLgKfPTPKvftQJteZMbCyIEV8dO30QACpq+ZskXVEZRHEUzNruikpKnI7YuB1
6RriAZZXvrVHbtsScP8ZCEBdAlNvZINOnRrezz6pj4exUL4WXKqB/Tb3xdApGqiW
MlycUuQJz4q2wea075OuynKsYA==
-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org