Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213605.roa
File: AS213605.roa (raw, json)
Hash identifier: WaKIgNXijyukEPY9bLOvi+5cQD2pS8avMmhQBNwJrow=
Subject key identifier: 26:0A:E2:78:9A:A0:FC:C4:83:74:BD:9A:36:17:56:6D:2D:9B:F7:5F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 54A9DBF3D564A78DAAACF264F3126BD2ACD2D09A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213605.roa
Signing time: Mon 10 Feb 2025 20:41:26 +0000
ROA not before: Mon 10 Feb 2025 20:36:26 +0000
ROA not after: Mon 09 Feb 2026 20:41:26 +0000
asID: 213605
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a9:db:f3:d5:64:a7:8d:aa:ac:f2:64:f3:12:6b:d2:ac:d2:d0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 10 20:36:26 2025 GMT
Not After : Feb 9 20:41:26 2026 GMT
Subject: CN=260AE2789AA0FCC48374BD9A3617566D2D9BF75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:a9:da:2b:c4:b4:8c:c3:06:0f:6d:c5:9e:
76:16:12:97:97:8c:93:98:e1:b3:ff:4a:7f:91:a3:
93:0d:1c:0e:6e:9c:4e:91:ac:94:e2:86:2c:5b:7d:
eb:91:25:b0:85:40:5b:c5:63:ee:90:4c:7f:fe:df:
6a:64:5a:a3:e9:0d:66:1d:97:07:c5:5d:1e:db:92:
66:88:0f:a3:3f:db:ff:c4:c7:29:22:cb:ff:6f:ae:
30:83:46:8c:85:87:26:3a:7d:f6:38:96:ec:6b:88:
36:67:c6:81:13:f8:7b:7e:08:43:57:51:9f:4e:38:
59:77:7c:72:0c:2f:fd:d3:6a:9b:d4:06:f0:22:35:
d4:2a:6c:5f:e0:24:06:8c:d7:a5:07:8f:99:08:e1:
78:6b:98:a3:8d:3b:14:58:98:a6:f9:2d:03:cb:92:
95:54:ae:0a:35:98:91:52:5e:13:17:2c:c8:69:1f:
81:1c:16:e5:8a:40:2d:04:da:41:dc:17:d5:08:0f:
83:60:85:38:29:7d:ea:da:13:c1:6c:40:ea:a2:24:
38:e2:bf:cf:f2:91:af:71:e3:d2:2e:8b:33:79:24:
49:9a:91:bb:77:67:7b:d2:e0:0a:a9:7e:72:ec:0c:
64:54:99:5f:26:14:87:4b:fb:d6:7d:3f:dd:26:a1:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0A:E2:78:9A:A0:FC:C4:83:74:BD:9A:36:17:56:6D:2D:9B:F7:5F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
bf:17:f7:9a:0d:29:4a:10:c3:10:f5:2d:92:ef:9c:dc:7a:fd:
ff:3d:ae:6a:34:8b:8a:b9:84:73:e1:f1:86:c1:2c:fa:93:f3:
09:91:03:e6:12:7d:19:ed:f1:f7:8f:44:7e:9c:7c:e6:b8:22:
84:29:ed:37:12:0d:ad:a0:6a:8c:ad:3a:f1:60:03:87:e6:76:
d3:5e:d2:82:82:97:62:79:47:38:6a:2d:13:99:6d:ae:fc:b7:
8b:d3:fc:d1:6d:3d:ca:f1:2c:2f:3b:e8:0e:2b:16:13:b2:d0:
13:8e:6b:50:eb:dc:76:1c:85:1a:09:f8:b8:85:93:d2:c5:e4:
8d:6c:8e:f3:3f:0f:ff:7e:68:be:48:61:f9:75:31:17:2b:88:
40:94:87:cd:8c:11:cd:2b:ec:ca:1d:ea:7b:34:d3:d1:41:7c:
9b:2e:25:e3:59:fd:e7:60:72:7c:37:11:18:31:88:a4:6b:dd:
01:24:fc:79:d4:0b:30:06:35:87:9b:47:4b:4c:78:6e:fd:7d:
0d:32:31:f9:23:fa:86:43:34:df:ac:5e:87:45:f1:de:be:2f:
21:4b:e1:23:0c:3f:f6:1f:7e:f4:36:44:66:13:05:57:05:10:
9b:49:2a:2b:c3:b9:8b:4f:1e:8f:ca:f6:29:f2:b6:21:5b:6c:
f0:45:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:39:50 2025 by rpki-client