Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214189.roa
File: AS214189.roa (raw, json)
Hash identifier: wSHUqeJlixr6d1gMmJP5o1EzsqE4Q6JROzRrhiUQeXU=
Subject key identifier: 95:28:BF:27:E0:A2:11:E2:8C:33:AD:00:2E:C6:EC:97:DE:EB:A6:E5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0B960C06A2737D4FAE2D6866762801F25B58DABC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214189.roa
Signing time: Wed 18 Sep 2024 07:49:31 +0000
ROA not before: Wed 18 Sep 2024 07:44:31 +0000
ROA not after: Wed 17 Sep 2025 07:49:31 +0000
asID: 214189
IP address blocks: 2a0f:9400:750d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:96:0c:06:a2:73:7d:4f:ae:2d:68:66:76:28:01:f2:5b:58:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 18 07:44:31 2024 GMT
Not After : Sep 17 07:49:31 2025 GMT
Subject: CN=9528BF27E0A211E28C33AD002EC6EC97DEEBA6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:32:1a:c8:2e:78:77:d0:89:a6:e5:8d:01:
93:9e:02:d1:57:2c:79:cd:bb:9f:b4:87:09:90:3f:
9d:5e:31:c1:e8:2f:b6:06:74:55:da:6e:81:55:64:
e8:be:fc:77:73:f7:79:54:8f:b6:cb:90:c3:3b:e4:
2b:ae:2c:9c:f6:52:70:d6:ed:fe:96:4e:42:8b:7b:
43:bc:ce:8f:41:db:79:92:aa:1b:75:fd:45:b1:4e:
80:ac:e3:81:ac:42:40:fe:b3:e3:3d:60:f0:b3:65:
5a:9f:85:81:be:ec:49:0b:82:f4:24:25:ae:a7:70:
50:0a:6c:ca:ab:5f:8c:91:dc:28:79:aa:67:6f:51:
f8:77:db:26:91:98:7e:46:37:c7:18:70:3f:7c:e1:
3f:68:51:6d:b5:9b:11:e1:5b:3b:fb:15:d4:a9:06:
2e:8a:86:9a:cc:1b:57:d7:4c:a8:ac:9b:ee:b0:74:
3f:55:02:02:35:43:38:ea:27:de:95:32:ef:6d:53:
94:5c:55:9c:75:e7:aa:96:04:87:32:d0:b1:bb:f1:
d3:e8:90:57:c3:6e:5e:63:cf:92:be:95:8e:2f:05:
6b:26:d3:ba:84:f1:8a:9f:5f:70:77:1c:12:b5:57:
8b:c6:3e:a6:28:25:31:ac:89:a6:7d:34:be:a3:85:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:28:BF:27:E0:A2:11:E2:8C:33:AD:00:2E:C6:EC:97:DE:EB:A6:E5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214189.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:750d::/48
Signature Algorithm: sha256WithRSAEncryption
27:98:04:91:96:51:e5:f4:b4:cd:3d:32:1a:fa:ec:54:bd:43:
7c:4b:4a:ca:3e:2c:96:de:3e:bd:98:64:b8:de:33:a0:e8:35:
21:05:d9:1e:c9:10:c8:db:e7:ab:10:1e:50:27:06:26:c1:1e:
13:18:9a:0e:e3:32:b2:de:ab:2b:c4:95:46:ea:ea:f1:49:c2:
84:26:3e:a4:2e:91:e4:94:cb:b6:1a:63:ba:05:43:a6:2b:cd:
68:5b:0a:88:fa:d9:a0:67:de:43:20:5e:4d:e7:9e:9b:c0:42:
85:22:4e:3d:de:36:39:9a:e7:f4:cc:c2:03:40:5b:87:27:69:
50:eb:20:44:21:90:be:0a:ea:d7:d7:fc:eb:c8:58:f4:24:a8:
74:71:25:f4:82:af:a8:66:3e:bd:d3:9c:29:7a:68:f3:9a:cc:
7b:a7:12:2a:53:5e:36:65:77:b4:e5:a2:15:9f:ae:ac:46:34:
30:85:89:57:25:f0:07:b2:cb:43:ca:fa:fc:6f:31:5d:55:1e:
58:a2:82:76:f0:5f:6a:e6:86:54:52:46:e8:34:74:42:e6:7b:
7e:20:7a:d3:c9:7d:f9:f7:23:7e:b1:b4:d1:17:e0:4f:a8:6b:
02:6d:40:98:ec:1f:4b:af:7d:c6:79:49:78:7a:2d:b9:4d:c0:
1d:c1:d2:0e
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUC5YMBqJzfU+uLWhmdigB8ltY2rwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA5MTgwNzQ0MzFaFw0yNTA5MTcwNzQ5MzFaMDMxMTAvBgNV
BAMTKDk1MjhCRjI3RTBBMjExRTI4QzMzQUQwMDJFQzZFQzk3REVFQkE2RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQjIayC54d9CJpuWNAZOeAtFX
LHnNu5+0hwmQP51eMcHoL7YGdFXaboFVZOi+/Hdz93lUj7bLkMM75CuuLJz2UnDW
7f6WTkKLe0O8zo9B23mSqht1/UWxToCs44GsQkD+s+M9YPCzZVqfhYG+7EkLgvQk
Ja6ncFAKbMqrX4yR3Ch5qmdvUfh32yaRmH5GN8cYcD984T9oUW21mxHhWzv7FdSp
Bi6KhprMG1fXTKism+6wdD9VAgI1QzjqJ96VMu9tU5RcVZx156qWBIcy0LG78dPo
kFfDbl5jz5K+lY4vBWsm07qE8YqfX3B3HBK1V4vGPqYoJTGsiaZ9NL6jhVj9AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUlSi/J+CiEeKMM60ALsbsl97rpuUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNDE4OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlAB1DTANBgkqhkiG9w0BAQsFAAOC
AQEAJ5gEkZZR5fS0zT0yGvrsVL1DfEtKyj4slt4+vZhkuN4zoOg1IQXZHskQyNvn
qxAeUCcGJsEeExiaDuMyst6rK8SVRurq8UnChCY+pC6R5JTLthpjugVDpivNaFsK
iPrZoGfeQyBeTeeem8BChSJOPd42OZrn9MzCA0BbhydpUOsgRCGQvgrq19f868hY
9CSodHEl9IKvqGY+vdOcKXpo85rMe6cSKlNeNmV3tOWiFZ+urEY0MIWJVyXwB7LL
Q8r6/G8xXVUeWKKCdvBfauaGVFJG6DR0QuZ7fiB608l9+fcjfrG00RfgT6hrAm1A
mOwfS699xnlJeHotuU3AHcHSDg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org