Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
File: AS213347.roa (raw, json)
Hash identifier: 7S2WwsX0kn3JTfKuMdNsT01fj9IcCXZs1xUyVysn16o=
Subject key identifier: 39:85:3F:C3:A8:02:D2:77:D9:A9:0A:03:9B:AA:AA:D7:F5:45:08:8A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0BC56D4299822D4F9C0B4FEFFCDBC70CAE79035D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
Signing time: Tue 15 Aug 2023 02:00:24 +0000
ROA not before: Tue 15 Aug 2023 01:55:24 +0000
ROA not after: Tue 13 Aug 2024 02:00:24 +0000
asID: 213347
IP address blocks: 2a0f:9400:8014::/48 maxlen: 48
2a0f:9400:8015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c5:6d:42:99:82:2d:4f:9c:0b:4f:ef:fc:db:c7:0c:ae:79:03:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:24 2023 GMT
Not After : Aug 13 02:00:24 2024 GMT
Subject: CN=39853FC3A802D277D9A90A039BAAAAD7F545088A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fc:a0:51:05:78:9b:de:ef:6a:5f:d2:8d:a4:
73:21:14:17:44:18:e4:48:41:66:9e:7d:85:a2:3b:
38:6b:e0:d6:a1:e1:f5:ca:76:ba:4f:1c:12:f1:d0:
2a:35:5b:da:2e:36:ac:87:a8:76:80:9b:1e:f9:ba:
7a:0e:b6:bc:b6:a5:6a:f9:be:3e:20:6a:59:9d:d9:
79:c9:4d:bb:8c:fc:39:17:b2:29:ba:0e:5c:43:f9:
12:c3:6c:d2:a6:00:43:39:20:3c:a6:c3:07:c6:10:
2f:38:9d:b3:24:9d:8f:f9:d2:19:c2:23:d3:82:3d:
66:6c:74:03:b6:0e:a2:8b:6b:54:14:ba:da:2c:2d:
32:51:1c:9f:de:e3:28:a2:81:2d:a5:48:d8:e6:cb:
83:3d:0e:72:37:52:44:47:f4:3b:01:a7:f8:5c:5a:
a0:fe:9d:87:7f:63:81:d9:fe:43:dd:c9:8b:02:70:
8a:4b:08:2b:0f:0a:26:86:a7:2d:86:c5:43:f4:ed:
c5:a2:db:31:02:0a:3c:96:b1:1a:f9:24:49:bb:db:
fe:a8:79:97:1c:0a:c4:74:7c:e7:52:e3:e5:bd:99:
b6:77:21:90:3a:26:3c:06:df:7d:0a:28:4b:0a:08:
bc:67:25:aa:0d:6b:3c:dd:29:b3:0c:be:92:5d:20:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:85:3F:C3:A8:02:D2:77:D9:A9:0A:03:9B:AA:AA:D7:F5:45:08:8A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8014::/47
Signature Algorithm: sha256WithRSAEncryption
cb:51:59:4f:46:a7:6c:43:11:49:c5:b1:b5:fe:3e:7b:70:b8:
62:d3:94:f2:8c:99:ff:5e:d1:10:d7:70:1b:78:76:e1:49:75:
bc:c2:5f:f3:60:36:5d:39:98:61:0f:d6:70:7a:a3:dc:e5:53:
0a:b3:c6:c7:0b:28:a8:2d:88:7e:bb:88:7a:45:08:88:80:55:
b4:15:5a:a1:e3:67:bc:01:2b:68:97:82:19:60:b3:d1:b5:50:
b8:fe:4b:6d:a6:8e:f3:b0:e3:00:3c:78:00:b2:d1:30:c9:f7:
31:d6:c9:43:19:40:b6:48:e2:e2:ad:82:5b:4d:ac:e4:7a:31:
1a:66:3d:a7:b7:44:13:97:ca:f5:cd:c4:89:c2:ff:00:6b:e2:
79:41:d2:a4:f7:85:4e:e8:ee:e9:2b:eb:74:b0:03:f9:6a:3d:
45:fb:65:72:ab:f4:bf:4b:4a:47:6d:46:71:6c:dc:37:a0:5d:
59:28:c0:63:7d:ef:c4:a6:c8:22:74:33:b9:46:cb:34:e8:4e:
2d:a3:7c:53:3f:c1:58:61:48:c2:fe:ab:96:8b:16:1d:28:49:
c1:85:23:30:6c:6c:69:77:ea:99:59:e0:a1:31:d5:3b:8a:03:
45:59:1e:72:7b:d3:73:02:6e:a9:9f:03:f7:56:cb:69:c0:de:
08:7c:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org