Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
File: AS213312.roa (raw, json)
Hash identifier: d+245Jb+GKPl3NB92pDiRGEkzGfO2N2csTObD6jiLhk=
Subject key identifier: 58:B8:2B:F0:80:26:B4:CE:07:EF:1C:0B:93:1C:81:B1:9E:01:B0:2C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 482955C302E25140281D0B6E085378AF29E6745D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
Signing time: Tue 15 Aug 2023 02:00:24 +0000
ROA not before: Tue 15 Aug 2023 01:55:24 +0000
ROA not after: Tue 13 Aug 2024 02:00:24 +0000
asID: 213312
IP address blocks: 2a0f:9400:7709::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:29:55:c3:02:e2:51:40:28:1d:0b:6e:08:53:78:af:29:e6:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:24 2023 GMT
Not After : Aug 13 02:00:24 2024 GMT
Subject: CN=58B82BF08026B4CE07EF1C0B931C81B19E01B02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:27:fa:fb:bc:7b:f7:93:6a:78:24:e2:1c:45:
bc:c2:2e:0f:49:2a:5b:8a:fe:f5:7d:e2:24:d7:61:
0c:95:b4:f5:5c:f7:e0:be:af:d6:55:93:43:99:b9:
d1:c6:03:45:00:f1:38:53:11:be:0c:0e:fa:1f:d1:
1b:ce:6b:dd:62:ce:f5:4b:78:0f:6b:4a:9a:20:73:
d5:1d:20:45:a5:fc:84:dd:c2:e3:94:2b:bb:ca:df:
41:9e:ac:e9:83:0b:60:ff:8a:b3:22:2a:7e:f7:f5:
42:a9:5a:11:52:dd:b6:5f:76:f6:0d:f6:fb:be:47:
2b:8f:f3:29:25:2a:70:10:89:d7:38:77:58:01:22:
be:da:3d:27:f7:d7:3d:02:6f:66:fc:5e:ad:f8:da:
a0:8d:b4:09:99:7f:ac:81:ba:f6:76:be:aa:7b:99:
5b:e8:63:6b:0a:cb:8e:f9:06:e7:b6:0c:02:f0:f2:
9b:89:11:d8:eb:5a:9b:72:f2:07:8f:ce:e6:d1:a1:
e5:9d:f1:ad:bb:c1:28:de:94:54:8d:5c:53:5b:be:
08:d7:cc:a3:2e:24:f3:56:8f:1d:7d:3e:b5:00:30:
b7:29:9e:8e:a4:f7:67:d4:f8:9d:d3:9e:c2:06:10:
20:f5:02:2f:f3:34:cc:0e:a5:95:fb:7b:ea:4d:0d:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B8:2B:F0:80:26:B4:CE:07:EF:1C:0B:93:1C:81:B1:9E:01:B0:2C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7709::/48
Signature Algorithm: sha256WithRSAEncryption
44:9f:b1:23:df:4f:74:fa:3a:d3:fa:82:74:49:73:d0:e8:a0:
19:99:0c:0e:80:69:c6:10:c1:57:96:6a:a2:3f:26:c2:f2:7a:
9c:44:6c:c2:6e:e1:3d:7f:a9:58:b9:fe:58:65:5d:f7:38:19:
03:e8:39:61:e8:df:3b:d3:a3:24:fb:22:3a:61:49:ce:c1:91:
26:fa:b3:67:9b:78:9a:57:95:6d:2d:70:ba:e9:df:b9:17:7f:
38:bf:24:62:14:30:cf:01:bf:e8:ff:ca:6b:29:a4:87:9c:96:
e5:73:7d:2e:3f:85:74:b3:df:e8:76:76:45:ce:23:0b:54:a9:
8e:d7:3a:8a:df:2f:24:b1:cb:3f:46:e8:be:d9:64:c8:7e:7b:
ad:70:f4:26:55:8c:6a:ab:3d:36:a7:b4:67:9b:9d:24:3c:c9:
8d:39:77:61:3d:cf:fa:38:79:c0:72:d7:3e:0e:c1:d4:84:94:
7b:3b:86:b9:f1:16:32:70:ea:e7:d7:db:c4:0c:29:53:f5:dc:
30:86:65:0b:c8:4e:dc:e8:37:e5:b0:b8:2e:9e:ed:9e:d6:e3:
15:3d:89:64:3d:3b:a2:8c:16:c8:48:7a:eb:38:63:eb:d0:22:
89:19:42:ce:d7:e8:c1:ce:74:92:23:a8:9a:f7:a7:0d:46:89:
ef:94:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org