Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
File: AS213262.roa (raw, json)
Hash identifier: HEgfCy7ia2EQGKLggQ+/lFyYZnT0QEOUFha5ZbGnu20=
Subject key identifier: D5:12:7F:37:AB:C4:67:D7:24:CD:4B:EC:29:72:5C:D5:E6:CE:06:23
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 04B3445E9B318998945A786D1B03E35010D2DB6B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
Signing time: Tue 15 Aug 2023 02:00:25 +0000
ROA not before: Tue 15 Aug 2023 01:55:25 +0000
ROA not after: Tue 13 Aug 2024 02:00:25 +0000
asID: 213262
IP address blocks: 2a0f:9400:8019::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b3:44:5e:9b:31:89:98:94:5a:78:6d:1b:03:e3:50:10:d2:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:25 2023 GMT
Not After : Aug 13 02:00:25 2024 GMT
Subject: CN=D5127F37ABC467D724CD4BEC29725CD5E6CE0623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:5e:f9:a6:7d:92:12:b9:80:21:81:88:9d:
5b:d6:1a:30:df:c6:0b:57:64:5a:59:b2:5c:c8:27:
13:50:17:15:45:64:07:b8:16:85:c3:fd:8f:18:c5:
d6:08:88:fc:5e:ad:6d:a0:21:48:c1:4d:03:b3:66:
87:ff:fd:a1:2c:da:36:b5:83:fe:f7:ba:9d:6b:5b:
5f:94:05:b0:38:2e:59:96:40:50:bf:bd:aa:bf:6c:
70:58:b9:b1:13:cd:11:19:77:ac:a5:f4:84:3c:de:
03:60:e8:25:ed:c8:d4:df:c0:66:66:9b:b2:bb:17:
d3:c8:83:30:84:ac:db:ea:15:d4:ca:f5:f3:5e:34:
46:11:15:b6:4d:c6:ec:af:2c:f6:18:4a:de:00:cb:
02:6a:9d:dd:a7:8f:34:16:71:61:0c:22:9e:25:e9:
b6:11:c0:1f:8a:93:e1:82:e2:06:27:18:78:ab:80:
8a:a9:4e:1a:5e:1b:95:ef:f5:46:f8:64:c5:a2:c1:
0b:fa:a1:68:60:9a:79:10:cf:88:44:87:4d:e1:6b:
a7:93:da:85:b5:b4:fa:f1:4a:31:f8:e3:0c:ad:7f:
6e:8b:c2:e9:4e:c2:9d:fe:c9:fd:a9:88:ca:b7:59:
d4:ad:77:4c:a8:96:bc:f5:10:3b:56:06:22:d8:7f:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:7F:37:AB:C4:67:D7:24:CD:4B:EC:29:72:5C:D5:E6:CE:06:23
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8019::/48
Signature Algorithm: sha256WithRSAEncryption
6f:5d:60:f2:aa:fe:38:83:40:fa:b4:2d:c5:d7:be:51:5f:89:
4d:1a:e5:25:1b:48:14:26:71:5a:89:6a:82:4c:85:54:5d:2e:
cb:21:24:5e:f7:10:61:1b:14:3e:3d:d6:b2:87:50:7f:fd:7d:
24:d9:2b:f3:eb:85:7a:57:f7:fc:19:9c:13:ea:c0:75:67:80:
8f:b3:ce:c4:d8:e7:66:09:96:cb:f8:1a:39:71:fa:62:3a:7a:
1b:49:1a:00:38:ed:03:c4:3f:4e:b1:86:dd:36:1f:fd:42:7b:
da:70:18:85:4d:88:b0:2d:c5:44:97:a2:b0:12:39:6c:8d:42:
bb:50:04:18:4e:2a:58:5a:81:c0:00:53:b4:58:f1:37:ea:2b:
a0:12:36:83:82:91:07:8d:8f:25:5a:63:70:f0:cb:5e:54:ce:
88:ce:ab:a6:a4:49:2e:af:db:1c:5d:08:08:25:9f:fe:a0:56:
23:84:4f:ff:f5:ed:55:f5:df:97:06:d4:16:2b:16:d2:33:df:
7f:a0:7a:d2:df:e6:2d:c4:6a:bb:5e:64:a6:63:f7:30:9b:5f:
82:ab:26:18:af:8c:65:a2:04:cf:2b:5a:ea:4e:f7:6d:2e:5c:
ab:c9:50:6d:d3:9b:f2:89:2f:68:ca:65:0a:07:04:aa:59:1a:
2f:f3:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org