Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
File: AS213312.roa (raw, json)
Hash identifier: xR6Fi20KpH6iwRAWqP+IFAuxxHGBulA8nHz1kwnKqS8=
Subject key identifier: 9A:5A:FF:24:64:8F:B4:B1:5F:3A:F8:24:33:BC:62:FE:CA:97:A7:63
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 03E0D4E12EC3BA63CE0B18B5A3FBAE80FB67ED9F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
Signing time: Tue 16 Jul 2024 02:42:24 +0000
ROA not before: Tue 16 Jul 2024 02:37:24 +0000
ROA not after: Tue 15 Jul 2025 02:42:24 +0000
asID: 213312
IP address blocks: 2a0f:9400:7709::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e0:d4:e1:2e:c3:ba:63:ce:0b:18:b5:a3:fb:ae:80:fb:67:ed:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:24 2024 GMT
Not After : Jul 15 02:42:24 2025 GMT
Subject: CN=9A5AFF24648FB4B15F3AF82433BC62FECA97A763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:86:68:e1:b9:29:a4:75:c8:7f:57:66:06:
bc:c5:b3:e2:68:93:e8:8f:f9:6c:b3:0c:63:11:ad:
14:34:14:ae:9a:82:09:07:bc:df:52:3a:18:c1:3e:
82:08:cf:ce:b8:0c:73:5b:b8:a4:fb:d4:fd:35:13:
19:1d:c0:c3:93:19:30:a7:80:3e:fe:a6:72:43:6c:
10:93:c7:a0:c7:54:0c:a7:ec:c5:62:c8:17:47:d7:
ea:81:7a:5a:54:65:a8:1c:a2:7c:1c:6f:66:22:91:
65:24:9b:63:a7:2e:03:91:06:25:ce:c0:49:fb:aa:
1a:1b:58:38:ee:8f:73:bd:9b:c7:18:7d:06:c5:4e:
96:6b:f2:e1:c0:9f:04:ca:ea:9f:da:91:1b:97:45:
4b:0d:96:23:6f:1a:6d:af:9a:e0:4d:6f:71:c3:eb:
21:87:fe:5b:a3:08:c0:6d:31:59:67:87:cd:1e:bf:
d7:57:5c:81:ea:dd:e7:f1:66:9c:99:a5:34:85:d8:
07:ca:56:8d:ec:36:b2:ca:02:c8:a3:0f:0f:c9:17:
0e:ba:83:ff:0e:ec:c4:ef:34:3b:06:5f:e6:fa:8f:
b7:77:37:d1:58:fe:60:db:b9:a3:b8:14:67:0c:57:
3e:73:e4:08:4d:c6:65:ce:b6:16:0d:98:52:64:dc:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:FF:24:64:8F:B4:B1:5F:3A:F8:24:33:BC:62:FE:CA:97:A7:63
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7709::/48
Signature Algorithm: sha256WithRSAEncryption
8a:9e:60:f5:95:c2:39:ba:2b:f2:65:43:3f:26:0d:08:09:f5:
bd:cd:5e:62:d0:b0:7c:5e:87:0c:c2:fb:30:e0:7e:05:a2:23:
37:76:19:44:f1:15:af:2e:55:ef:1e:a0:4a:90:99:2d:8f:68:
5a:75:c5:a9:19:5a:84:1e:98:98:34:d1:ed:27:2c:e0:c8:04:
24:12:d2:82:c9:09:18:9a:a2:2e:d9:22:c3:2a:64:29:ae:50:
32:b6:0a:d6:a8:3c:a6:f5:16:48:8a:ff:7a:be:5d:2f:b2:0d:
67:7f:b0:73:97:5a:46:80:33:ce:3d:da:4c:c3:3b:97:64:f5:
f3:6c:2d:23:1c:6e:ff:18:f9:96:15:15:20:46:6b:60:34:ff:
23:b5:cf:1f:5d:a8:7a:17:4b:fc:4a:87:bb:16:d7:ef:f8:a9:
48:cc:32:c2:cc:e9:05:e0:3d:26:cc:25:3a:07:12:32:31:fa:
ad:28:91:d9:ed:29:27:18:35:4c:e1:d1:6d:a9:30:a0:47:ee:
3b:ce:b8:f5:ce:f2:72:69:ea:9e:d5:e1:fd:66:65:64:89:61:
d8:45:15:54:1e:d6:bf:de:a3:5c:aa:f1:75:41:cf:3b:30:aa:
3d:56:b5:ae:cb:99:d9:7c:fd:12:70:6f:17:8c:bd:fa:5a:c7:
1d:3a:47:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org