Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
File: AS213323.roa (raw, json)
Hash identifier: c/0BFNRZmzm7Uqrh/54xotrmLtaqSMIql5EUi0gkddA=
Subject key identifier: 7A:A7:A9:55:C0:ED:1E:D9:C3:8C:49:D2:07:23:5B:AF:FA:82:44:58
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 706740096D899257C7DEF98A98C3A820782B7CC7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
Signing time: Mon 04 Mar 2024 19:21:18 +0000
ROA not before: Mon 04 Mar 2024 19:16:18 +0000
ROA not after: Mon 03 Mar 2025 19:21:18 +0000
asID: 213323
IP address blocks: 2a0f:9400:6907::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:67:40:09:6d:89:92:57:c7:de:f9:8a:98:c3:a8:20:78:2b:7c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 4 19:16:18 2024 GMT
Not After : Mar 3 19:21:18 2025 GMT
Subject: CN=7AA7A955C0ED1ED9C38C49D207235BAFFA824458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:cc:2c:32:7c:f4:ce:64:2f:ff:cc:3a:dc:
98:a2:ff:66:b1:09:93:2e:86:c9:33:f3:26:e2:25:
57:3d:33:cf:f1:21:43:75:f3:e3:ee:80:1f:7a:d6:
f8:62:2e:01:16:08:ab:4c:1d:5d:3c:2a:93:ba:4d:
89:a4:75:df:7a:60:0e:32:37:3a:df:1e:89:78:ef:
02:6d:d5:ba:fc:d3:eb:3d:96:52:57:eb:2d:d7:d7:
c7:2c:c3:9e:47:88:19:0d:6a:1b:2c:84:03:ec:ab:
6d:9e:a4:68:fc:a3:ba:68:30:53:b7:5c:8d:d3:0a:
5c:6c:d6:f4:9e:33:d8:01:e2:ae:a2:b8:45:28:3e:
b8:7f:37:8c:85:ec:17:84:63:e3:0c:83:7c:cc:4b:
76:04:a5:49:41:51:eb:64:f7:d0:ff:b1:30:60:11:
92:e7:af:8c:8f:55:55:94:52:45:66:ac:31:bc:3e:
c9:5e:d8:2d:04:05:9b:cc:37:a8:c2:c8:03:28:25:
18:6b:cc:4e:bd:f0:68:f2:64:21:1c:7d:bf:ef:1a:
69:1c:9f:ad:48:4c:51:5c:af:c3:ba:d8:76:9c:ed:
e3:30:c6:20:aa:5e:83:8e:ab:3f:44:53:9e:bc:bc:
e8:00:a9:be:50:64:c9:97:0a:43:01:cb:5b:d7:c4:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:A9:55:C0:ED:1E:D9:C3:8C:49:D2:07:23:5B:AF:FA:82:44:58
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6907::/48
Signature Algorithm: sha256WithRSAEncryption
15:69:48:f5:a1:2b:80:44:41:a5:1a:ea:f9:d8:db:ce:04:ba:
dc:1d:e3:45:8a:08:e8:73:29:1a:38:26:bd:71:47:e9:08:3b:
ca:5e:5f:0b:56:37:04:df:df:c5:47:58:a6:4b:90:68:06:d6:
0b:a9:67:10:0c:53:9f:d9:fe:80:1a:18:c5:34:3a:bc:84:51:
7a:fb:8c:66:e7:ce:8f:06:4d:7c:cd:16:22:65:77:ce:28:39:
55:1e:7d:ad:b4:a5:20:fd:3a:ec:7a:48:15:8a:d8:4d:0e:c9:
3b:13:5b:c3:92:c5:7f:f6:64:f1:ac:8f:14:ef:0d:57:fa:77:
df:ab:03:3e:1d:55:71:14:8a:e8:ba:62:21:7e:38:ec:60:ae:
0d:6d:9e:a7:f9:0f:3b:9b:c9:2b:cd:80:60:42:4c:54:0c:6a:
47:62:87:0d:f7:a1:6d:76:e1:18:6d:0c:40:d4:55:03:41:d0:
ef:37:ae:a1:6e:85:bf:9d:82:13:30:44:06:d3:26:c1:8d:fd:
2a:35:e8:1b:da:33:f0:ba:b9:a2:01:ad:63:f8:b8:1f:79:51:
ae:3c:0c:50:92:c1:cf:30:10:48:2d:0e:7d:16:34:cf:ed:c3:
8a:08:7a:c6:d5:46:2a:9d:5a:e7:a7:35:7c:01:70:c5:f1:53:
c4:e3:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org