Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
File: AS214669.roa (raw, json)
Hash identifier: CdN8Vu6TRz42Pu7CFlPT3Iu/mKmRsZvi8uNGHSKxkWw=
Subject key identifier: 3D:81:84:DF:8A:3F:35:8C:B9:1A:BB:DE:05:14:6A:B6:9E:2E:AD:8E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 23F10D86E055CEB6FC9A2C2CC0C7BC0110AB855E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
Signing time: Mon 09 Sep 2024 06:55:32 +0000
ROA not before: Mon 09 Sep 2024 06:50:32 +0000
ROA not after: Mon 08 Sep 2025 06:55:32 +0000
asID: 214669
IP address blocks: 2a0f:9400:6150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f1:0d:86:e0:55:ce:b6:fc:9a:2c:2c:c0:c7:bc:01:10:ab:85:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 9 06:50:32 2024 GMT
Not After : Sep 8 06:55:32 2025 GMT
Subject: CN=3D8184DF8A3F358CB91ABBDE05146AB69E2EAD8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:5a:44:ae:00:92:56:08:ec:8e:c4:e9:88:
ec:8b:93:c3:57:7c:1f:5b:60:f8:a2:da:95:3e:cd:
97:96:95:d7:ee:f4:0f:18:d7:53:27:20:de:78:97:
0b:5f:57:53:6a:d5:05:d5:de:70:34:dd:c9:ba:9a:
e2:02:99:93:c6:3b:11:63:16:95:27:05:42:59:e0:
40:f8:ac:87:2f:fe:a5:15:51:4f:21:4f:b6:02:d0:
af:e5:f7:eb:27:d6:31:02:c0:73:3d:be:f2:75:58:
15:e0:b8:57:a1:23:04:31:c8:7e:2d:fd:93:9c:e1:
3a:03:31:f3:be:30:1e:68:0f:3a:88:ef:bc:74:7a:
bd:75:67:b2:48:a2:b0:24:0a:a1:73:0b:97:8d:d9:
19:10:f5:8d:53:6c:7f:2d:e0:05:a1:9c:4f:cf:ca:
57:49:86:60:1a:5b:d4:37:54:23:a6:2c:1b:db:61:
db:ae:4f:4f:06:84:cc:68:a8:43:54:db:e6:74:ca:
3a:c2:60:ae:c2:26:a8:fc:83:a2:49:83:6c:58:05:
0a:c3:07:e2:f3:2a:7a:44:d9:0c:cf:4f:ce:e5:c6:
de:63:f9:32:17:cc:42:9a:d8:90:a9:45:d7:fb:e4:
ec:fd:8c:4e:c0:61:42:62:b4:04:2e:65:f4:2f:fe:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:81:84:DF:8A:3F:35:8C:B9:1A:BB:DE:05:14:6A:B6:9E:2E:AD:8E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6150::/44
Signature Algorithm: sha256WithRSAEncryption
82:20:9e:08:02:87:03:ac:df:c4:21:9a:27:7c:db:35:36:76:
dd:6c:10:49:9c:af:30:b7:58:4a:e7:73:da:47:ce:9a:42:f4:
49:c3:2a:49:5b:c8:e0:98:13:45:85:72:12:5a:ad:b6:d3:76:
a3:b3:e8:7c:20:52:14:b5:07:f0:6f:0d:1c:44:eb:cb:c8:cf:
c9:3e:80:89:2b:15:cb:48:4e:0d:49:b5:d4:1a:76:12:f0:94:
85:a2:15:32:bb:b6:e2:f5:54:28:e5:0c:25:ee:0b:f8:75:c6:
d1:c8:91:95:7b:aa:fa:b3:bf:58:79:d7:08:3e:6b:b1:46:d7:
ef:5b:99:b2:42:23:7c:95:bc:db:b8:75:8d:7a:53:b0:21:80:
1b:e7:5f:19:69:00:02:3b:4c:42:75:83:ea:d9:81:d4:ea:d1:
46:b9:cb:2b:83:18:29:f2:09:74:32:9c:a7:04:95:d4:ae:59:
97:58:b3:de:d1:93:a2:81:76:29:34:e4:88:9b:9f:8a:50:3e:
ca:0c:00:9c:84:45:0c:b7:99:b1:34:f3:bf:97:e2:9f:aa:2a:
60:64:d3:14:67:ff:9e:6a:c3:22:a9:ed:64:72:c8:d2:b1:73:
18:06:96:83:46:69:e9:02:29:ee:44:d9:50:ad:f1:e3:a6:dc:
cf:1f:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org