Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215522.roa
File:                     AS215522.roa (raw, json)
Hash identifier:          EQ54w2N1YRIBCJHmjAO1zUut0eRo1m/E0UuroTC9Rsk=
Subject key identifier:   11:53:20:9D:F1:19:42:33:90:94:CA:27:2E:88:A1:60:C2:8E:02:24
Certificate issuer:       /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial:       0A126B8C683CCF95A080586CFC30C74870860630
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215522.roa
Signing time:             Mon 26 Aug 2024 05:24:39 +0000
ROA not before:           Mon 26 Aug 2024 05:19:39 +0000
ROA not after:            Mon 25 Aug 2025 05:24:39 +0000
asID:                     215522
IP address blocks:        2a0f:9400:611b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:6b:8c:68:3c:cf:95:a0:80:58:6c:fc:30:c7:48:70:86:06:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
        Validity
            Not Before: Aug 26 05:19:39 2024 GMT
            Not After : Aug 25 05:24:39 2025 GMT
        Subject: CN=1153209DF11942339094CA272E88A160C28E0224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:01:3b:29:8e:22:94:06:5d:30:16:4c:08:
                    89:9f:6c:f4:dc:3b:00:1b:b8:af:84:39:96:e2:9e:
                    a1:37:60:e7:e8:04:29:ff:73:e8:43:c1:2f:0c:7c:
                    8a:58:4a:2b:88:9d:c7:fa:55:09:e2:5c:ac:e1:2c:
                    f5:38:97:44:5f:52:ee:5e:d1:ff:bf:ba:9d:6f:2e:
                    6a:c3:36:b2:69:20:ff:78:a0:00:5f:51:33:96:01:
                    46:b3:a0:28:ab:f8:83:4a:ca:fc:c9:89:22:e1:91:
                    95:f5:66:96:ac:37:2b:18:9c:fc:6d:51:23:c7:98:
                    98:9c:0d:11:ae:5a:19:03:a5:d3:10:1d:19:e5:d0:
                    10:68:3f:f9:d0:23:d8:da:27:23:7f:7d:3b:28:af:
                    fa:b3:89:62:27:e9:82:a7:88:eb:6f:98:e4:5f:16:
                    d1:e9:98:a1:a1:9a:9d:ab:d3:1d:51:e4:ef:0d:c0:
                    02:6e:2e:da:55:4f:60:13:92:cf:c1:e5:40:bd:e9:
                    8e:ba:f4:b7:f0:53:d3:93:ce:fd:77:d2:b9:9d:aa:
                    be:46:db:4e:87:02:cf:9d:73:92:99:06:53:7e:f6:
                    7a:fd:9d:48:1d:b4:ab:1b:cc:c9:31:eb:ab:43:e1:
                    a3:a7:d8:3f:64:d5:c3:7b:a3:4e:24:24:b8:48:cf:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:53:20:9D:F1:19:42:33:90:94:CA:27:2E:88:A1:60:C2:8E:02:24
            X509v3 Authority Key Identifier:
                keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215522.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9400:611b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:b3:f4:bf:87:e4:35:5c:9d:34:f9:40:0b:65:90:72:23:90:
         d1:33:f6:e9:8b:37:9c:90:2b:38:e5:f9:8b:1d:95:ac:08:44:
         e1:91:db:79:bc:d9:c8:6c:9c:79:3a:3a:18:ce:45:b1:bc:55:
         bc:2f:b1:c9:bc:a6:74:42:d1:29:e6:18:9f:c7:a9:43:51:6e:
         fa:eb:76:cd:3b:a8:e5:fa:8d:d8:05:5d:a9:67:0a:49:25:88:
         c0:df:14:c5:22:7d:9f:3d:b2:5e:22:fc:c3:dc:0c:ed:35:b8:
         78:7a:e0:84:b9:a5:fc:ef:29:35:ac:b8:7c:5d:92:7a:9e:f0:
         55:75:39:21:ca:e0:b2:95:fe:e8:b3:66:56:8d:b5:ee:0e:5a:
         4e:19:83:ff:2f:a5:92:c0:de:c1:36:de:27:5c:1c:5c:63:dc:
         5d:6d:77:a7:45:08:e8:7a:ab:a2:6e:e3:9d:ca:bf:68:da:6b:
         43:c7:9e:f3:e9:08:66:c9:66:e8:ae:97:88:16:7a:44:41:10:
         bd:7f:8e:04:b3:8a:f7:70:29:e8:91:61:33:6a:1c:6f:97:8f:
         8b:92:eb:a6:c2:34:d4:d5:f3:65:45:93:83:7c:65:91:50:f9:
         f6:f9:33:19:e9:e1:1b:fc:00:ab:55:87:89:0c:31:57:91:b0:
         56:29:3a:48
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUChJrjGg8z5WggFhs/DDHSHCGBjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA4MjYwNTE5MzlaFw0yNTA4MjUwNTI0MzlaMDMxMTAvBgNV
BAMTKDExNTMyMDlERjExOTQyMzM5MDk0Q0EyNzJFODhBMTYwQzI4RTAyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0cwE7KY4ilAZdMBZMCImfbPTc
OwAbuK+EOZbinqE3YOfoBCn/c+hDwS8MfIpYSiuIncf6VQniXKzhLPU4l0RfUu5e
0f+/up1vLmrDNrJpIP94oABfUTOWAUazoCir+INKyvzJiSLhkZX1ZpasNysYnPxt
USPHmJicDRGuWhkDpdMQHRnl0BBoP/nQI9jaJyN/fTsor/qziWIn6YKniOtvmORf
FtHpmKGhmp2r0x1R5O8NwAJuLtpVT2ATks/B5UC96Y669LfwU9OTzv130rmdqr5G
206HAs+dc5KZBlN+9nr9nUgdtKsbzMkx66tD4aOn2D9k1cN7o04kJLhIzwQnAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUEVMgnfEZQjOQlMonLoihYMKOAiQwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNTUyMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhGzANBgkqhkiG9w0BAQsFAAOC
AQEAurP0v4fkNVydNPlAC2WQciOQ0TP26Ys3nJArOOX5ix2VrAhE4ZHbebzZyGyc
eTo6GM5FsbxVvC+xybymdELRKeYYn8epQ1Fu+ut2zTuo5fqN2AVdqWcKSSWIwN8U
xSJ9nz2yXiL8w9wM7TW4eHrghLml/O8pNay4fF2Sep7wVXU5IcrgspX+6LNmVo21
7g5aThmD/y+lksDewTbeJ1wcXGPcXW13p0UI6Hqrom7jncq/aNprQ8ee8+kIZslm
6K6XiBZ6REEQvX+OBLOK93Ap6JFhM2ocb5ePi5LrpsI01NXzZUWTg3xlkVD59vkz
GenhG/wAq1WHiQwxV5GwVik6SA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org