Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa
File: AS213447.roa (raw, json)
Hash identifier: DEAUDdlhwPn1UAaj0+2je8EfpGSqTPXvSf/TeqVUBv0=
Subject key identifier: 65:0C:D8:57:B4:41:D1:FD:CF:7E:7D:F6:1A:4C:B4:64:1A:83:AF:31
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 56174B239779C8C9929688B229B43B74FA309154
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa
Signing time: Tue 11 Feb 2025 11:31:09 +0000
ROA not before: Tue 11 Feb 2025 11:26:09 +0000
ROA not after: Tue 10 Feb 2026 11:31:09 +0000
asID: 213447
IP address blocks: 2a0f:9400:6930::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:17:4b:23:97:79:c8:c9:92:96:88:b2:29:b4:3b:74:fa:30:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 11 11:26:09 2025 GMT
Not After : Feb 10 11:31:09 2026 GMT
Subject: CN=650CD857B441D1FDCF7E7DF61A4CB4641A83AF31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:42:e8:3e:f2:17:88:24:0d:08:e4:f3:ed:
d5:a0:27:57:4e:ca:f6:4a:23:fa:e3:e7:a9:1c:f3:
94:c3:c0:dd:12:7f:79:64:08:c7:e5:8f:4b:25:a8:
fd:5c:3d:ae:29:59:c9:87:ff:4e:69:0f:9e:56:d6:
46:f0:58:1a:2b:7f:3b:5b:e7:c8:e2:e0:8c:f9:83:
c8:a3:2b:ac:d1:bb:53:d0:c1:05:36:9b:a0:d4:3a:
9b:1f:b9:a0:6e:ea:50:e6:39:ba:cb:f1:e9:da:b9:
5c:94:5a:40:c5:32:62:7a:0c:69:e4:11:4f:21:25:
00:3e:66:66:bb:54:56:13:73:d7:fa:31:4d:f9:9a:
97:7e:6f:bf:d7:7a:ec:64:ed:0c:fe:78:f1:7d:ce:
aa:a5:18:9b:0a:94:a5:e5:15:a3:16:18:8f:ae:e8:
9f:7c:14:f3:7e:37:a9:3c:d9:2c:ff:f7:76:32:71:
6d:7e:e9:26:35:af:5c:c4:f6:43:70:50:a2:2c:0b:
93:9d:dd:04:8a:2d:df:2a:9f:14:c6:25:33:5a:4f:
9e:41:ca:f6:49:c3:48:51:08:0e:ab:28:47:27:cc:
61:06:ea:ef:f3:ad:66:7d:e3:98:78:96:61:60:b4:
c3:1d:f0:72:2d:bf:cb:7d:bd:bf:94:61:70:c8:7c:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:D8:57:B4:41:D1:FD:CF:7E:7D:F6:1A:4C:B4:64:1A:83:AF:31
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6930::/48
Signature Algorithm: sha256WithRSAEncryption
d1:9a:b2:90:7a:62:01:0b:52:59:90:c7:e5:19:ad:86:50:13:
12:57:d5:69:00:d7:29:c0:7c:49:82:07:c8:d2:ea:8b:66:0d:
c0:fc:2f:e7:7a:32:bc:81:15:b3:83:5c:ff:f9:82:a0:3a:eb:
e6:c3:c2:9d:8c:74:a9:f4:c8:e8:37:10:d2:c3:3b:21:47:c9:
e0:15:fa:d3:34:f9:c1:36:9e:a7:71:69:43:82:e2:87:77:6f:
85:51:e5:98:77:80:8b:83:20:bf:be:08:35:29:fd:d9:89:fc:
49:44:73:8b:af:9b:0a:1c:a4:46:d4:b1:c3:a9:a4:a0:ad:4d:
e4:e2:db:b3:b5:d1:7d:d5:5b:17:f2:7c:40:ca:e7:02:4f:74:
d9:d9:09:bb:e9:52:b2:71:5f:9f:85:e0:94:01:68:e2:4b:fb:
6e:5e:46:66:84:99:2c:ff:a8:b0:18:90:ec:ce:91:f4:c9:23:
11:99:ce:b8:8c:e2:5b:14:38:53:5f:b7:a2:37:5c:93:bf:53:
6f:ad:c0:8b:f0:5f:be:41:53:3d:d4:9b:81:78:39:c8:a8:cf:
6c:f3:66:ea:33:c0:83:36:6f:1e:67:3e:6f:61:81:46:1e:8c:
87:bf:bc:93:ef:69:c7:00:d9:4f:d8:37:3a:aa:bd:91:7e:e1:
f0:7a:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:14 2025 by rpki-client