Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
File: AS213262.roa (raw, json)
Hash identifier: 36cAr79XALyOMKW54axZt1cG1vnGiCA42RLX/8VZNCU=
Subject key identifier: EB:8E:95:8F:E5:D7:2E:B2:DD:A8:C1:6B:4A:D7:9D:29:BB:1F:F4:92
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2367BC1DF85CFFF79C0B0C3E1F6176ADEF9F103C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
Signing time: Tue 16 Jul 2024 02:42:25 +0000
ROA not before: Tue 16 Jul 2024 02:37:25 +0000
ROA not after: Tue 15 Jul 2025 02:42:25 +0000
asID: 213262
IP address blocks: 2a0f:9400:8019::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:67:bc:1d:f8:5c:ff:f7:9c:0b:0c:3e:1f:61:76:ad:ef:9f:10:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:25 2024 GMT
Not After : Jul 15 02:42:25 2025 GMT
Subject: CN=EB8E958FE5D72EB2DDA8C16B4AD79D29BB1FF492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:16:c9:cb:11:25:47:8f:ad:a9:25:49:ab:
7c:26:70:d1:a3:3e:03:8f:12:24:93:3d:c8:85:6d:
d9:93:9d:3f:7f:bb:b8:8b:1d:c7:cf:7a:bb:85:66:
f9:12:5a:84:4c:69:31:67:60:0e:7e:e8:e5:f8:28:
a4:ba:3a:0a:79:1f:91:72:68:00:8f:b7:96:fd:3d:
e8:31:c4:01:97:52:e2:c6:39:f2:63:dd:77:20:02:
42:b1:96:30:fd:ac:ff:06:50:c7:5e:24:cb:6c:10:
d0:a2:6c:28:64:0b:32:99:01:c1:01:01:f8:63:1f:
86:21:1e:31:74:ff:91:3e:2c:6c:98:4c:20:ed:c9:
81:f5:d0:90:42:09:7c:a5:de:b8:8a:9d:1c:05:90:
37:e6:22:47:5d:1f:67:b8:c4:e5:c5:e9:e0:9d:c1:
fa:fa:db:98:bf:22:b4:d4:db:2c:69:3a:9d:36:74:
6d:61:93:15:78:b7:82:50:4e:e9:ab:e0:fb:e8:3c:
74:bd:87:91:66:96:41:c3:22:5d:9f:c5:2b:e5:a2:
1f:79:e1:52:1b:5e:8a:98:89:eb:5a:00:be:87:0d:
aa:86:68:e8:3b:59:cf:87:39:6a:6d:0a:63:d5:7b:
d5:30:13:f8:70:79:cb:a1:22:b9:00:88:c4:8d:db:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:95:8F:E5:D7:2E:B2:DD:A8:C1:6B:4A:D7:9D:29:BB:1F:F4:92
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8019::/48
Signature Algorithm: sha256WithRSAEncryption
48:73:8a:da:85:3e:c4:d8:f6:56:cb:27:21:c8:d5:b1:eb:f7:
60:85:7a:1a:49:57:26:5f:fb:08:37:b5:e2:2c:1c:b3:de:17:
cc:47:99:01:90:9c:9e:a6:53:ca:30:8f:bb:51:18:60:4d:40:
8e:15:13:3f:03:81:88:7a:33:db:05:67:9a:bc:69:4b:3f:5d:
20:72:63:00:6d:05:69:02:b8:05:ac:74:77:ef:e0:08:2a:2f:
22:ff:23:97:a8:42:10:43:5c:f0:01:e4:17:9e:54:e9:3c:c3:
b9:3f:04:26:9e:b1:42:47:55:f1:94:fb:a7:ee:fc:4c:41:2d:
07:33:a7:aa:2a:05:45:6b:8d:60:03:1f:cc:e6:c9:bf:1e:12:
55:21:f6:1b:5e:3e:e7:62:06:79:32:05:e4:bb:ce:27:bb:2f:
02:e2:1a:36:c3:d2:68:03:32:15:59:86:14:59:1f:b9:f3:04:
22:f3:d4:d8:c5:cb:41:e5:4b:73:b9:03:4e:29:ef:41:04:12:
9e:c3:a2:87:58:bd:56:96:26:28:4b:c3:0a:1f:c8:0e:b6:f2:
55:b5:bf:fb:7d:6c:10:d1:36:f9:8b:5d:39:b0:60:75:8d:74:
fb:20:bb:cd:e4:ad:5f:c0:bf:1a:0c:f7:cd:62:bf:2c:32:7b:
5e:d3:15:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org