Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
File: AS214203.roa (raw, json)
Hash identifier: 8RJgDFiBT4Pwx5KbSP0A5RFvlYamNAoJjbzGiCziXmo=
Subject key identifier: C8:59:C9:28:AD:B6:EB:03:C0:A0:10:A0:1C:D2:72:65:51:6C:5C:7D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 021A46AE11DDD0BBF82E46EC0E9E03712F8E56C7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
Signing time: Tue 26 Nov 2024 01:35:11 +0000
ROA not before: Tue 26 Nov 2024 01:30:11 +0000
ROA not after: Tue 25 Nov 2025 01:35:11 +0000
asID: 214203
IP address blocks: 2a0f:9400:6163::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1a:46:ae:11:dd:d0:bb:f8:2e:46:ec:0e:9e:03:71:2f:8e:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 26 01:30:11 2024 GMT
Not After : Nov 25 01:35:11 2025 GMT
Subject: CN=C859C928ADB6EB03C0A010A01CD27265516C5C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:da:55:79:e5:4c:dc:34:4f:ec:cb:82:8d:
d5:59:ec:e2:e6:10:fc:e3:6d:02:5d:c8:85:9d:42:
28:a2:24:61:4b:a5:8f:a3:e5:23:50:38:ed:25:a2:
47:8d:a9:c3:10:5b:86:66:03:e7:24:df:39:c8:4f:
e4:2b:9d:fe:23:5d:f3:17:52:8d:a3:97:ad:87:cc:
90:46:21:3f:d8:96:bd:f6:88:14:79:db:9b:2d:83:
5d:cd:0a:82:6f:c7:b7:03:b0:5e:90:69:72:57:d4:
3d:db:53:64:4a:4c:66:93:b0:d1:e7:85:e4:4a:f3:
25:30:c2:cd:f2:fc:79:7f:b5:c2:89:17:ab:8a:57:
3c:d5:d3:f1:66:33:75:54:a2:4d:da:64:f8:90:71:
b9:29:a0:4a:11:ca:ef:ac:e9:b4:ee:c3:18:5c:5d:
85:d5:e4:5e:26:7a:dd:5a:8a:ce:86:08:a6:8d:86:
45:52:c1:51:20:ed:17:51:d6:2d:a9:18:f0:cf:27:
46:dd:59:4d:fb:77:49:ad:ee:67:d6:31:ad:82:3a:
8d:42:bf:25:f4:d0:34:65:88:b0:79:30:98:47:20:
9e:5b:29:91:3f:77:70:c6:61:ef:8e:8c:7c:0d:97:
c8:bb:87:39:5e:16:78:e9:ff:e0:43:f7:9e:99:56:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:C9:28:AD:B6:EB:03:C0:A0:10:A0:1C:D2:72:65:51:6C:5C:7D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6163::/48
Signature Algorithm: sha256WithRSAEncryption
bb:fb:c4:3c:ad:33:ff:3b:47:78:02:1e:75:79:2e:be:0d:3e:
68:dc:99:06:7f:1e:c4:6b:a9:c1:78:77:21:87:c8:b2:36:1d:
02:bb:91:68:24:ca:1b:22:b9:d8:ab:b1:bf:4e:99:18:e2:48:
b8:ca:bd:1f:50:48:c1:ec:3d:d3:60:49:79:aa:ce:97:9e:51:
26:ed:b6:74:c1:40:dc:19:0d:63:bd:8f:16:11:67:2d:0b:5b:
39:ab:54:d7:cb:41:02:00:3f:3d:90:38:9d:f4:c4:14:84:85:
0f:3f:2f:a9:82:ad:a4:87:e5:c4:89:f8:1c:6c:1d:bf:8a:28:
b0:44:88:cf:86:70:49:1b:38:fb:df:3b:a0:28:db:f9:1d:f8:
d5:f7:22:ca:7f:43:02:05:45:18:3d:22:11:80:6d:10:16:5f:
74:7e:2f:36:03:5f:78:15:db:aa:e1:30:cb:e0:6b:b9:b7:72:
e7:91:17:2b:24:60:ad:2f:19:de:b2:08:d6:37:a5:5a:e4:e6:
9b:d7:c3:fe:a4:bb:0e:27:7f:1c:97:22:4c:40:11:4d:55:70:
87:83:33:38:6d:ba:4c:9e:26:55:83:4e:cb:38:3e:1b:35:e8:
29:48:eb:e2:bb:e2:22:3e:02:fb:ad:10:1a:e9:0b:62:2e:d7:
f4:bf:0f:8c
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUAhpGrhHd0Lv4LkbsDp4DcS+OVscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDExMjYwMTMwMTFaFw0yNTExMjUwMTM1MTFaMDMxMTAvBgNV
BAMTKEM4NTlDOTI4QURCNkVCMDNDMEEwMTBBMDFDRDI3MjY1NTE2QzVDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP8dpVeeVM3DRP7MuCjdVZ7OLm
EPzjbQJdyIWdQiiiJGFLpY+j5SNQOO0lokeNqcMQW4ZmA+ck3znIT+Qrnf4jXfMX
Uo2jl62HzJBGIT/Ylr32iBR525stg13NCoJvx7cDsF6QaXJX1D3bU2RKTGaTsNHn
heRK8yUwws3y/Hl/tcKJF6uKVzzV0/FmM3VUok3aZPiQcbkpoEoRyu+s6bTuwxhc
XYXV5F4met1ais6GCKaNhkVSwVEg7RdR1i2pGPDPJ0bdWU37d0mt7mfWMa2COo1C
vyX00DRliLB5MJhHIJ5bKZE/d3DGYe+OjHwNl8i7hzleFnjp/+BD956ZVrmzAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUyFnJKK226wPAoBCgHNJyZVFsXH0wHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNDIwMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhYzANBgkqhkiG9w0BAQsFAAOC
AQEAu/vEPK0z/ztHeAIedXkuvg0+aNyZBn8exGupwXh3IYfIsjYdAruRaCTKGyK5
2Kuxv06ZGOJIuMq9H1BIwew902BJearOl55RJu22dMFA3BkNY72PFhFnLQtbOatU
18tBAgA/PZA4nfTEFISFDz8vqYKtpIflxIn4HGwdv4oosESIz4ZwSRs4+987oCjb
+R341fciyn9DAgVFGD0iEYBtEBZfdH4vNgNfeBXbquEwy+Brubdy55EXKyRgrS8Z
3rII1jelWuTmm9fD/qS7Did/HJciTEARTVVwh4MzOG26TJ4mVYNOyzg+GzXoKUjr
4rviIj4C+60QGukLYi7X9L8PjA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:16 2025 by rpki-client