Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215716.roa
File: AS215716.roa (raw, json)
Hash identifier: DLECXUV2lj0o4QQci7UPUS1JR7VijlXUxtyVNvnoFAc=
Subject key identifier: 18:0B:3E:E4:FA:B3:4E:E3:9B:4C:AD:7F:3A:25:CD:4A:42:F5:4E:57
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2291AE26184D82333D6C253BD794193EE012E7B4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215716.roa
Signing time: Mon 15 Jan 2024 17:45:50 +0000
ROA not before: Mon 15 Jan 2024 17:40:50 +0000
ROA not after: Mon 13 Jan 2025 17:45:50 +0000
asID: 215716
IP address blocks: 2a0f:9400:6117::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:91:ae:26:18:4d:82:33:3d:6c:25:3b:d7:94:19:3e:e0:12:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 15 17:40:50 2024 GMT
Not After : Jan 13 17:45:50 2025 GMT
Subject: CN=180B3EE4FAB34EE39B4CAD7F3A25CD4A42F54E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:1b:4d:da:79:50:f8:ef:c6:cb:23:ae:d1:
cd:fa:e7:f3:ef:fb:a7:e0:0d:5c:fc:4e:28:e8:8a:
9d:3e:f0:90:99:9e:e4:03:a6:23:1e:7b:58:b5:80:
ca:36:e1:4c:a9:4b:f0:b2:ab:e5:70:17:25:6f:7e:
3e:41:d3:c9:c5:8a:6f:2f:aa:ad:c0:b3:e2:6b:76:
33:04:0f:0c:b4:f0:38:7b:59:ea:31:56:b9:76:a1:
d0:ea:78:41:38:cf:07:4d:ba:ac:3d:db:80:dd:a5:
09:3c:52:ce:16:f3:1b:1d:8d:b1:6b:88:88:65:60:
1c:65:a3:97:9e:2b:ca:5a:96:78:8c:23:0b:cd:a0:
f6:2e:e8:33:f1:8c:ff:d8:ef:6c:0e:71:2e:8f:ba:
4b:d6:54:c8:48:93:2d:7b:3b:85:b6:8e:3a:c0:80:
d8:f7:09:be:c3:f0:b3:67:0d:99:4f:bf:e7:b4:60:
59:ba:94:22:67:b3:5f:02:e9:7a:7f:ce:5e:a8:d3:
4a:64:12:f8:70:b1:73:12:b7:cf:2d:db:f0:bb:69:
89:b7:02:7d:2e:12:43:dd:c3:fc:98:97:60:21:a9:
5f:65:6b:14:27:7a:46:ac:00:e1:93:70:dd:58:8e:
87:63:45:08:d3:41:be:51:58:97:1c:0d:9c:42:d3:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:3E:E4:FA:B3:4E:E3:9B:4C:AD:7F:3A:25:CD:4A:42:F5:4E:57
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6117::/48
Signature Algorithm: sha256WithRSAEncryption
66:ed:a9:2c:24:41:47:cb:9d:9a:72:09:7c:ad:18:27:df:2d:
17:96:ca:0e:1c:ca:db:f8:59:8a:b8:a2:0d:ba:1c:fa:92:80:
87:01:3b:51:5b:b1:44:26:74:15:3f:9f:5c:6b:77:42:c4:0e:
cb:97:b2:a6:a7:12:57:3d:72:5c:c2:37:24:a6:ea:bd:e8:59:
d4:40:af:92:ea:3c:ed:db:59:11:67:ae:97:bc:26:1a:b5:57:
9f:eb:43:fa:ca:39:05:5d:e9:fe:67:4d:54:09:1f:3a:92:ab:
8c:40:8a:92:b9:58:d6:26:b2:b1:d2:27:69:72:ff:82:bb:ed:
e5:81:8a:08:76:2d:37:6a:f0:62:84:92:17:6a:75:06:1e:fe:
4f:4e:76:ec:5a:7e:58:c1:66:c6:4d:19:d1:47:84:53:a5:33:
c8:31:c9:05:3b:f1:8c:ff:4e:08:c7:69:33:11:82:e7:78:84:
e7:75:fb:96:48:18:7e:46:60:18:c9:88:78:aa:9f:0e:6d:ba:
5a:6b:22:51:10:c3:1d:45:d7:db:3a:1f:70:94:ab:dc:da:ed:
25:f5:2d:31:27:d6:e5:bd:64:f1:2b:56:da:f3:8e:7b:aa:a1:
e1:b8:03:5a:c6:0d:d9:46:4f:c7:46:17:df:ea:8c:12:88:62:
f7:b4:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org