Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
File: AS213234.roa (raw, json)
Hash identifier: h6JTeyjTagq0sJAIL7kyTM+SmWbyxsKdFEObhilfAwc=
Subject key identifier: F8:75:3E:78:98:2E:DD:6F:13:F7:BB:55:25:33:34:98:88:FC:10:A5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 31D30CD240E167E487BB185058070B1E2A4C7850
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
Signing time: Tue 15 Aug 2023 02:00:26 +0000
ROA not before: Tue 15 Aug 2023 01:55:26 +0000
ROA not after: Tue 13 Aug 2024 02:00:26 +0000
asID: 213234
IP address blocks: 2a0f:9400:802c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d3:0c:d2:40:e1:67:e4:87:bb:18:50:58:07:0b:1e:2a:4c:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:26 2023 GMT
Not After : Aug 13 02:00:26 2024 GMT
Subject: CN=F8753E78982EDD6F13F7BB552533349888FC10A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:15:23:fb:21:e7:ee:16:25:f5:e8:8c:d9:
3b:d7:6d:f2:e4:45:7f:e6:f7:86:66:4d:f9:fb:be:
86:a1:16:9d:12:da:57:e7:fd:81:3a:a9:9a:1d:6f:
bd:8a:fa:a2:62:05:97:d5:d4:59:96:e0:2e:d9:4f:
5a:dc:9e:33:30:70:0a:25:d9:64:5e:6d:57:57:13:
32:49:93:ae:1d:8f:a8:cf:5f:fa:df:a4:7e:3c:f2:
90:bc:2d:8b:1e:9c:71:c7:97:d5:33:e7:c5:fc:0d:
ec:c2:13:da:00:b0:e6:38:6c:7d:4b:85:80:a0:6e:
81:2d:7a:75:54:ec:5f:fe:65:1a:13:72:c5:85:e3:
36:8f:23:35:55:5d:e2:92:7d:ab:e3:a6:9d:f0:2f:
60:a7:14:5c:f2:c5:f7:1b:c2:87:f3:ee:d0:f2:0d:
8c:d5:53:b2:35:bc:f4:86:05:da:a2:0c:79:2f:03:
a2:97:8f:06:8c:86:f8:a7:d8:4f:2d:75:c0:8d:3c:
09:21:63:f2:1f:81:27:84:91:1e:bf:a8:96:4d:56:
be:98:24:81:cb:62:ef:2a:20:6f:58:81:ce:40:e6:
a9:d3:04:ea:be:b0:35:85:c6:4c:b5:1d:79:b0:70:
f9:3b:cd:bc:1e:0f:da:1b:e6:e0:60:44:9b:17:f3:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:3E:78:98:2E:DD:6F:13:F7:BB:55:25:33:34:98:88:FC:10:A5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:802c::/48
Signature Algorithm: sha256WithRSAEncryption
c0:e5:8b:97:9a:4f:42:24:c4:29:0c:82:2f:3b:d7:85:c0:a9:
03:8c:4c:00:cb:93:f3:60:d7:1a:3b:4d:13:68:a4:77:e6:a7:
9f:ae:e2:70:de:28:91:ab:b1:39:57:02:b2:a1:6e:c1:af:3d:
87:66:71:c4:19:1e:75:33:d9:6a:d9:e2:b4:9a:ee:b7:2c:a2:
f4:7f:60:23:7e:41:0e:5b:f7:8b:18:ac:af:6b:47:ee:b9:92:
ae:bf:8b:f4:f9:a4:4a:65:9a:d0:88:36:f7:b6:60:bd:72:83:
81:b1:0c:c6:4a:5f:cb:e1:e2:02:ad:95:9f:2e:70:68:3e:b8:
ed:2c:67:43:d6:a5:50:57:58:ad:f7:35:bd:af:e7:cf:0e:bf:
37:1f:b1:ad:b7:98:de:f6:cd:dd:43:14:b2:79:ab:cf:54:fd:
6c:29:68:15:55:95:d0:37:e6:2d:9a:79:9d:c2:e9:5a:33:66:
e1:42:15:d7:e4:22:ec:c4:c5:0b:80:48:e0:3a:05:88:7c:b0:
15:f4:a0:c7:01:2d:62:eb:11:8a:a0:2c:f8:95:ea:0d:fb:24:
e8:71:dc:b3:8e:61:eb:16:24:47:95:b0:e3:22:ec:34:02:fd:
2b:46:9f:99:9d:f9:c7:43:b7:89:ce:4b:1e:54:99:0c:34:91:
c2:52:d2:f1
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUMdMM0kDhZ+SHuxhQWAcLHipMeFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MTUwMTU1MjZaFw0yNDA4MTMwMjAwMjZaMDMxMTAvBgNV
BAMTKEY4NzUzRTc4OTgyRURENkYxM0Y3QkI1NTI1MzMzNDk4ODhGQzEwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmRUj+yHn7hYl9eiM2TvXbfLk
RX/m94ZmTfn7voahFp0S2lfn/YE6qZodb72K+qJiBZfV1FmW4C7ZT1rcnjMwcAol
2WRebVdXEzJJk64dj6jPX/rfpH488pC8LYsenHHHl9Uz58X8DezCE9oAsOY4bH1L
hYCgboEtenVU7F/+ZRoTcsWF4zaPIzVVXeKSfavjpp3wL2CnFFzyxfcbwofz7tDy
DYzVU7I1vPSGBdqiDHkvA6KXjwaMhvin2E8tdcCNPAkhY/IfgSeEkR6/qJZNVr6Y
JIHLYu8qIG9Ygc5A5qnTBOq+sDWFxky1HXmwcPk7zbweD9ob5uBgRJsX8xg1AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU+HU+eJgu3W8T97tVJTM0mIj8EKUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlACALDANBgkqhkiG9w0BAQsFAAOC
AQEAwOWLl5pPQiTEKQyCLzvXhcCpA4xMAMuT82DXGjtNE2ikd+ann67icN4okaux
OVcCsqFuwa89h2ZxxBkedTPZatnitJrutyyi9H9gI35BDlv3ixisr2tH7rmSrr+L
9PmkSmWa0Ig297ZgvXKDgbEMxkpfy+HiAq2Vny5waD647SxnQ9alUFdYrfc1va/n
zw6/Nx+xrbeY3vbN3UMUsnmrz1T9bCloFVWV0DfmLZp5ncLpWjNm4UIV1+Qi7MTF
C4BI4DoFiHywFfSgxwEtYusRiqAs+JXqDfsk6HHcs45h6xYkR5Ww4yLsNAL9K0af
mZ35x0O3ic5LHlSZDDSRwlLS8Q==
-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org