Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
File: AS215765.roa (raw, json)
Hash identifier: JNaVWT3qdtmsc09NJHMjSLvQhGBx7JClX+n7L0qz6c8=
Subject key identifier: AE:39:D9:53:FB:26:F6:5A:95:04:1D:98:2A:E5:6C:C5:8D:5D:67:93
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 112B87219992D6BD569E17E5D16C1FD43105E0BB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
Signing time: Sun 08 Dec 2024 20:44:13 +0000
ROA not before: Sun 08 Dec 2024 20:39:13 +0000
ROA not after: Sun 07 Dec 2025 20:44:13 +0000
asID: 215765
IP address blocks: 2a0f:9400:6116::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:2b:87:21:99:92:d6:bd:56:9e:17:e5:d1:6c:1f:d4:31:05:e0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 8 20:39:13 2024 GMT
Not After : Dec 7 20:44:13 2025 GMT
Subject: CN=AE39D953FB26F65A95041D982AE56CC58D5D6793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:9b:a9:a6:d2:94:2f:60:2b:8c:52:d6:13:
1d:3d:d5:47:e3:5e:53:94:7e:d7:07:0c:0f:49:40:
f2:a9:d9:c0:8e:08:6d:02:06:bf:d5:d0:3f:6a:79:
99:c2:32:00:5c:13:25:a9:bb:b2:83:24:f7:1a:a7:
8b:d5:8f:80:87:2c:c4:2e:c2:b3:97:de:1d:88:01:
96:b2:f1:08:5c:12:81:a6:43:2b:5e:34:91:d8:49:
90:14:16:46:98:09:83:8c:6a:ef:a9:df:2c:91:0c:
94:f0:e9:36:74:e1:c4:5f:11:72:1c:85:52:e3:bd:
e9:c7:30:5c:1a:27:25:bf:89:eb:ec:32:77:41:b1:
9e:b1:c5:f6:73:1e:de:80:81:62:5e:03:cc:7f:6a:
0e:bd:04:96:13:12:c6:61:2d:ed:6e:a5:51:b5:be:
c2:9b:fa:b5:a2:60:0c:32:53:10:3c:8d:be:a9:75:
ea:dd:a3:37:85:ef:92:78:eb:d7:c5:62:15:8e:53:
ff:76:65:46:82:ad:8f:ae:38:c5:69:16:b9:98:50:
0e:54:34:87:3b:60:05:f5:06:15:ba:c0:50:ea:51:
33:88:7b:2a:f3:a1:2b:a8:10:14:a1:57:08:9d:33:
92:73:a9:e6:7a:b5:2d:49:5b:d6:fb:13:b3:87:85:
41:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:39:D9:53:FB:26:F6:5A:95:04:1D:98:2A:E5:6C:C5:8D:5D:67:93
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6116::/48
Signature Algorithm: sha256WithRSAEncryption
32:7b:b6:21:74:2e:ef:17:53:29:d0:ca:b2:03:bc:b0:53:f7:
2f:bc:b5:60:c5:6f:5b:b6:43:ce:a2:eb:ab:58:43:ff:5d:60:
d7:c4:de:97:9c:64:b8:e3:fd:8b:8b:3d:d8:38:18:f8:93:70:
f5:2e:b6:4e:25:82:2e:7d:7b:1d:1b:50:6f:af:e6:78:2f:fa:
fb:bf:2f:24:e9:59:e0:6e:02:40:2d:9b:16:b1:f1:a5:8c:21:
0d:16:0b:ad:61:a8:32:f4:7a:26:86:fe:c1:02:1e:67:b9:e4:
c1:93:f9:24:18:3a:ed:80:30:3a:78:f0:85:1a:86:0a:c8:6a:
8f:44:db:33:f6:cc:a4:f2:e8:76:47:8a:40:06:12:88:8b:89:
1d:8a:a8:b0:88:fb:d8:66:3c:95:6c:4a:8e:b4:62:d5:37:38:
89:92:7a:29:41:6b:c7:fa:7e:fc:55:fb:f8:50:6a:52:4f:0d:
56:3b:7e:e1:2c:f7:5b:62:fc:1f:3b:e3:9e:55:38:50:40:be:
ed:18:64:a7:58:91:a0:be:cb:4b:06:a5:63:0c:7d:ef:f4:5f:
d0:93:8a:78:c0:c4:08:8a:b7:18:7b:23:61:df:5e:53:3c:0c:
93:1f:39:17:03:b0:d3:4b:64:04:23:4e:73:77:7e:28:09:aa:
01:2d:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:12:24 2025 by rpki-client