Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213316.roa
File: AS213316.roa (raw, json)
Hash identifier: uxHoopgFxvfjwUwfhKx4eyjDySboM8v8f6Bk4KxRGKw=
Subject key identifier: 39:DA:92:AE:57:8D:6C:E2:CD:50:8B:79:A6:D3:3E:17:BC:9C:41:88
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 290D114FD841887B0847FCCDACF3E2482881CCF1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213316.roa
Signing time: Tue 15 Aug 2023 02:00:25 +0000
ROA not before: Tue 15 Aug 2023 01:55:25 +0000
ROA not after: Tue 13 Aug 2024 02:00:25 +0000
asID: 213316
IP address blocks: 2a0f:9400:8018::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0d:11:4f:d8:41:88:7b:08:47:fc:cd:ac:f3:e2:48:28:81:cc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:25 2023 GMT
Not After : Aug 13 02:00:25 2024 GMT
Subject: CN=39DA92AE578D6CE2CD508B79A6D33E17BC9C4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:1d:6c:6f:e9:b9:e3:55:9e:bd:af:ea:83:
6c:78:0c:89:5b:f0:fe:78:6d:a9:8c:58:d0:c3:f3:
20:3b:21:b2:a1:c5:f9:b2:cb:14:40:d8:ab:a3:68:
16:c3:52:ec:32:16:4d:6e:64:0f:a1:8c:26:f7:61:
d0:0b:ed:9e:cc:e3:5a:d9:61:1c:72:6d:47:ce:d9:
ce:ae:cc:06:90:0a:26:cd:90:9e:8e:e2:29:09:91:
d4:23:51:1e:ba:90:9c:57:3d:42:d2:70:0a:cc:cc:
68:9b:b4:b1:34:8a:11:cd:24:28:50:7f:9b:13:b1:
48:92:cf:8d:8d:62:33:03:78:45:25:eb:e4:a0:6c:
11:b6:36:d9:95:8d:0c:d6:b8:55:7a:38:6a:0e:b3:
b5:1e:7b:5e:05:77:b4:1b:48:2b:b4:03:64:8b:e1:
0e:d7:ed:88:0d:58:16:db:5b:67:6b:35:1e:2b:11:
9f:e5:e6:11:c6:c5:33:7e:56:7f:2c:4c:9d:64:c4:
ac:0a:30:2a:3c:21:84:95:78:6a:a3:ae:31:ba:25:
87:d4:de:84:68:9b:97:26:b0:ea:ae:75:ed:38:9a:
23:d1:d1:64:1d:91:73:48:88:c2:47:27:56:59:32:
4e:25:8f:56:49:40:a0:89:f2:9e:77:ca:70:b6:df:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DA:92:AE:57:8D:6C:E2:CD:50:8B:79:A6:D3:3E:17:BC:9C:41:88
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8018::/48
Signature Algorithm: sha256WithRSAEncryption
7d:4c:94:d3:f8:46:be:bd:d1:de:76:84:3d:59:3b:8e:ea:bb:
b9:10:cd:75:34:99:b6:6f:e7:ff:b5:b6:37:01:54:e0:ee:fc:
c4:94:de:bc:a0:1e:a5:f1:15:35:28:a7:4b:3c:8d:35:f9:dd:
b7:83:a8:3f:d0:b5:fb:eb:02:08:78:f7:2a:af:05:59:45:ee:
61:d1:d2:2b:2f:39:65:c0:c1:cb:63:39:84:6f:fa:6a:b5:9d:
69:4f:d3:b6:78:49:ca:5d:09:b1:3d:4e:6f:6f:7b:d1:67:0a:
d1:77:e7:45:3f:af:c8:01:7f:2d:b1:23:1a:52:d4:a4:34:96:
39:7b:c5:c4:2b:30:03:42:cc:2f:88:c4:93:71:65:49:ab:e2:
8b:b6:bf:13:d7:65:3f:6c:d9:38:d7:95:aa:99:1b:c3:29:a3:
e6:5c:19:92:cf:6a:d9:64:38:4f:a0:9c:96:81:ef:fb:b1:79:
bc:bb:dc:9f:3a:09:c0:86:b7:f7:48:2f:0b:a1:64:5a:05:d9:
25:3f:b3:83:c8:1d:52:63:be:63:8c:bd:1a:61:fe:ad:50:fd:
f4:18:47:7f:7b:d0:39:c8:8e:fe:de:e2:bd:e9:b8:48:53:a7:
c4:9d:4e:40:6a:91:a2:2e:7e:3e:6e:b4:d8:b1:c6:ff:a0:08:
12:39:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org