Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
File: AS215026.roa (raw, json)
Hash identifier: CY6IFq8OhY8ER1Q5fJfJcu5Di22w9mgVSRyWVLCzhDw=
Subject key identifier: BE:4F:76:88:83:B6:8A:49:45:44:A6:92:56:D1:CD:53:2D:3D:6A:D0
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 50F9C3F968D433401835FD7CA6D51CA85FDD6AEF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
Signing time: Tue 31 Dec 2024 15:09:04 +0000
ROA not before: Tue 31 Dec 2024 15:04:04 +0000
ROA not after: Tue 30 Dec 2025 15:09:04 +0000
asID: 215026
IP address blocks: 2a0f:9400:6146::/48 maxlen: 48
2a0f:9400:6149::/48 maxlen: 48
2a0f:9400:614f::/48 maxlen: 48
2a0f:9400:6905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f9:c3:f9:68:d4:33:40:18:35:fd:7c:a6:d5:1c:a8:5f:dd:6a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 31 15:04:04 2024 GMT
Not After : Dec 30 15:09:04 2025 GMT
Subject: CN=BE4F768883B68A494544A69256D1CD532D3D6AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f1:03:c9:03:2f:87:ed:01:6a:5a:45:b8:d7:
44:34:38:a1:7c:45:3c:84:ef:93:c3:d1:5e:75:06:
75:56:bb:f0:25:e0:5a:57:36:23:20:5d:63:05:51:
40:9f:cd:88:1f:8b:56:90:7a:cd:33:b6:78:fe:4b:
38:ef:2d:1a:64:2f:72:ab:99:53:44:de:dd:28:a9:
0f:4d:ee:c9:b2:81:fc:e3:9c:63:38:67:b4:71:e6:
f4:2c:17:64:ec:99:ba:71:90:0a:d0:59:5d:16:47:
e5:38:c5:f5:8a:b5:1f:8d:bd:fc:65:b6:e5:09:9d:
e1:49:ea:4f:8e:25:17:a7:78:51:da:e7:7d:79:38:
42:2f:21:58:04:06:d3:9b:3e:45:84:0c:c8:f9:d0:
0e:e8:df:04:56:ed:53:61:aa:96:32:29:eb:8b:dc:
2a:ef:30:35:f0:93:2f:5a:bd:fe:e4:ee:d8:3c:28:
8b:8f:6d:15:9d:62:de:e7:d2:25:cd:5c:3e:d2:5e:
79:36:35:ec:52:de:20:c5:ea:a4:5f:df:9b:9b:70:
00:ab:14:d1:e5:25:2d:29:98:a2:4d:a3:75:37:17:
94:37:19:63:64:27:c0:07:85:4c:87:9e:05:08:71:
a7:33:94:06:49:b6:4f:3a:97:51:e1:19:9e:f7:b1:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:76:88:83:B6:8A:49:45:44:A6:92:56:D1:CD:53:2D:3D:6A:D0
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6146::/48
2a0f:9400:6149::/48
2a0f:9400:614f::/48
2a0f:9400:6905::/48
Signature Algorithm: sha256WithRSAEncryption
4a:3e:04:1f:e8:a0:1f:ca:95:54:07:62:32:d2:7c:24:b4:86:
c6:94:77:85:80:5c:47:9b:fd:93:ef:95:9f:20:db:06:c7:92:
34:db:d6:f9:c4:20:a1:7e:bd:b8:9b:7f:22:f5:9d:07:a0:c3:
0b:3f:41:80:fc:24:83:84:4d:7a:20:18:d7:75:4f:10:de:27:
f6:a8:48:87:b2:8b:10:37:57:99:c6:63:85:fc:b0:79:89:2e:
ed:b1:13:86:2d:ed:7a:99:77:69:ea:bc:72:1a:29:ad:9a:b3:
a6:aa:93:c3:3e:f9:ca:be:e7:8f:c8:97:f8:65:ba:3c:7c:ac:
e3:f2:9c:73:34:63:b5:fc:66:d8:17:49:3f:c1:48:90:0b:ed:
f8:87:12:dd:ff:44:39:db:99:2f:0c:7a:96:42:ee:1d:e8:28:
39:ab:08:24:0d:52:fa:a2:d0:90:23:42:e6:d5:a4:2a:fb:e9:
91:56:1b:43:b8:5d:c1:bf:8a:5b:41:a2:6e:70:2a:fa:b3:dc:
78:09:81:51:03:ca:e6:f1:75:78:bd:52:15:6c:72:d8:b4:99:
77:12:7d:b3:d1:50:9a:29:61:a5:5d:67:5a:97:b7:7c:28:ac:
69:a1:07:1b:3b:7f:1b:24:95:94:04:6d:5d:b7:33:94:9f:1c:
68:df:25:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:50 2025 by rpki-client