Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215323.roa
File: AS215323.roa (raw, json)
Hash identifier: rT0NLXjP+BVxZYxOoR1fjHWiJry6YSFJMk5407twQO8=
Subject key identifier: 3F:A3:F2:38:F7:BC:61:8B:8C:D3:BB:69:6D:98:BA:C3:29:D2:93:EF
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 172A9F0D922A9C4AAD7BCBC07C69681C794AC2D6
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215323.roa
Signing time: Thu 14 Mar 2024 19:54:55 +0000
ROA not before: Thu 14 Mar 2024 19:49:55 +0000
ROA not after: Thu 13 Mar 2025 19:54:55 +0000
asID: 215323
IP address blocks: 2a0f:9400:6161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2a:9f:0d:92:2a:9c:4a:ad:7b:cb:c0:7c:69:68:1c:79:4a:c2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 14 19:49:55 2024 GMT
Not After : Mar 13 19:54:55 2025 GMT
Subject: CN=3FA3F238F7BC618B8CD3BB696D98BAC329D293EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:8b:26:a8:b3:db:b8:a9:f9:de:c8:01:0e:
8f:a3:9c:3e:d4:82:1c:ac:29:04:94:7a:1d:72:3b:
dc:be:d5:54:cf:c4:a2:e0:29:7b:60:92:f2:86:05:
df:eb:b2:66:5f:34:b9:ff:2d:30:9e:e9:ca:25:6f:
29:af:bc:04:92:9a:6d:8e:4c:16:f9:93:cb:1e:f7:
75:03:38:42:0f:ab:81:ee:11:82:9a:a0:0e:8f:ed:
0b:cc:3e:18:64:65:09:63:48:4d:86:0d:11:31:3e:
42:96:e9:61:ae:2e:fe:ee:5f:d6:d4:6d:a2:ad:db:
9c:47:3d:47:00:c6:56:58:ce:1b:76:38:2b:a2:6d:
0a:64:e8:28:e4:7a:6b:59:ff:cf:20:63:84:90:d0:
9b:c3:36:68:ab:78:a9:41:1e:19:bc:f4:18:a9:55:
7a:dd:b5:4d:eb:b2:fc:b0:c0:cd:1b:66:f4:28:73:
07:08:27:4f:0e:2a:20:73:1d:83:13:68:3b:ca:23:
e0:3c:3d:58:68:ab:c1:93:5d:8a:5e:94:08:66:e3:
b1:57:a2:bc:1e:64:6d:d6:c1:5e:76:20:a9:83:d0:
5f:7a:15:bb:01:d0:3a:a7:85:d3:c6:09:23:39:93:
b7:d4:0c:92:62:e1:d6:0a:00:b4:62:55:14:38:32:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:F2:38:F7:BC:61:8B:8C:D3:BB:69:6D:98:BA:C3:29:D2:93:EF
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6161::/48
Signature Algorithm: sha256WithRSAEncryption
c1:9d:2a:2a:47:26:99:47:ea:6a:e1:7f:3d:bd:84:89:df:1b:
59:e0:a7:07:29:45:f1:3b:50:33:bb:1e:48:74:0b:d3:01:4a:
8d:75:0c:7b:44:e1:ac:59:c1:35:4b:3f:d9:e0:d3:76:d7:36:
40:2b:f6:08:ab:dc:12:40:94:f3:57:8e:d5:9e:59:cc:e9:b4:
3e:25:0b:57:36:1d:2a:b4:68:8f:7e:61:ed:e6:63:a3:a5:00:
7f:73:f0:10:a7:f1:fe:02:64:61:b5:93:bc:05:60:ad:ca:f9:
c8:f7:f0:4c:6f:f1:46:44:b9:ac:88:b1:30:56:ba:8d:35:8f:
1f:2f:0a:57:07:b4:32:f8:e7:b2:fb:c6:19:34:2d:08:df:1d:
dc:54:d3:5f:09:db:39:06:70:08:c0:e3:c7:d8:93:a7:b8:fa:
cd:77:9a:c1:a6:ce:b1:e1:4b:0e:0e:cc:4a:ac:55:49:b5:b6:
08:1e:4d:be:ce:b8:dc:e4:77:40:0c:cb:e1:4f:80:e9:a3:40:
7c:95:73:eb:c2:71:14:23:42:a2:01:15:7d:88:34:e7:76:fe:
63:94:b0:9f:7e:30:6a:6f:3c:a2:93:fa:d0:14:60:f6:bd:8d:
32:10:25:2e:fe:17:9c:6a:69:91:01:14:48:22:d1:a1:02:98:
db:1a:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org