Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
File: AS213234.roa (raw, json)
Hash identifier: FDHGM4c1+NO8fiVwVXynnLEEqopP5R5rnlP+5Ef9rwk=
Subject key identifier: 13:87:0B:64:F9:ED:7E:71:6E:53:33:8F:67:E7:08:AA:8B:51:48:A5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6B1825DA943BCCAF1F1B927211EA54C5FA9A8A28
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
Signing time: Tue 16 Jul 2024 02:42:24 +0000
ROA not before: Tue 16 Jul 2024 02:37:24 +0000
ROA not after: Tue 15 Jul 2025 02:42:24 +0000
asID: 213234
IP address blocks: 2a0f:9400:802c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:18:25:da:94:3b:cc:af:1f:1b:92:72:11:ea:54:c5:fa:9a:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:24 2024 GMT
Not After : Jul 15 02:42:24 2025 GMT
Subject: CN=13870B64F9ED7E716E53338F67E708AA8B5148A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:11:8c:3d:be:09:3a:d6:e0:9a:b3:83:22:
d9:1c:c8:c2:e2:d9:7b:38:47:09:46:ab:db:a2:86:
6f:5e:1b:26:d3:1e:bb:6b:76:57:a3:37:ee:ec:8d:
35:e8:85:f4:61:81:90:55:51:1c:fd:0e:04:1b:53:
66:e0:12:14:f8:83:36:a1:e9:fb:6e:1e:5b:e4:3e:
cb:bb:b1:43:01:fc:f0:6f:45:55:0a:76:21:3a:fb:
ca:d6:2a:cf:62:13:01:e7:29:19:a6:bd:a4:48:cf:
84:e5:2d:cb:cd:69:b3:3d:1e:65:c4:e1:97:08:42:
b0:2e:3f:84:b6:8a:c2:b8:ec:9a:65:9b:86:ee:fc:
24:bd:86:2b:b6:60:5e:0e:3d:ba:75:c1:99:1d:8c:
75:d7:db:9d:ce:8f:0d:96:48:0d:3f:ba:b2:8d:45:
42:47:77:61:5b:63:24:35:11:0c:e3:67:21:2a:15:
96:17:f3:30:f7:e3:1d:a2:64:99:dc:9e:e0:7b:38:
ed:3b:e4:de:e9:0e:48:14:1a:4f:c2:34:52:ef:ff:
9b:64:02:69:19:07:83:f6:e6:d4:11:f7:50:98:32:
75:32:6c:13:7b:b5:c6:01:41:52:44:7c:03:9e:c2:
33:b3:47:e1:bf:56:1e:46:78:ed:e8:0a:f6:f4:06:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:0B:64:F9:ED:7E:71:6E:53:33:8F:67:E7:08:AA:8B:51:48:A5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:802c::/48
Signature Algorithm: sha256WithRSAEncryption
2f:30:45:23:00:63:7f:25:c2:fd:e7:cf:ea:7a:2c:d8:05:19:
02:22:51:55:fc:d8:da:bf:7e:42:89:dd:2b:85:b1:ab:b5:51:
18:81:bc:8b:59:5d:7d:cd:b2:e4:27:80:a7:dc:41:3b:d2:d9:
88:62:a6:c9:8e:20:c3:34:76:89:99:d4:c6:3c:f4:2f:09:83:
86:b2:72:94:3a:fc:61:ec:81:63:75:a3:91:fd:fa:d4:3b:ff:
06:e9:e3:b8:db:ac:a9:4a:04:0f:d1:dc:36:75:f0:a0:93:30:
a0:75:14:32:bb:cf:cc:6c:ce:a5:f4:ec:35:33:0d:a1:08:77:
ee:8e:9b:76:10:c6:ed:5b:a3:53:5d:16:98:87:03:30:cb:f8:
c7:21:33:05:f4:24:5b:15:4c:f4:b4:0d:22:74:34:13:17:d4:
4c:6e:3f:af:a5:b3:e3:e5:7c:e7:9e:52:d2:12:c9:c0:25:32:
20:39:ff:ba:46:80:99:37:cf:4c:64:87:84:1b:28:b1:76:f5:
b8:af:0e:8c:5b:98:f0:0c:a4:90:b3:dd:86:cb:15:90:4c:a8:
b9:71:ce:06:fc:59:8f:b0:51:cb:85:2f:c9:29:d0:0a:a2:d9:
53:83:57:a4:bf:a3:0f:09:71:53:10:86:ac:d8:cd:52:29:b0:
08:7f:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org