Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
File: AS215765.roa (raw, json)
Hash identifier: EXgqNkpe7eMssYFPnefL8om+T6Bz8CvJ0MhqrpzgIX4=
Subject key identifier: 67:E2:41:15:1D:36:C6:6D:5A:56:AB:AF:21:ED:F0:65:24:6E:1C:62
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 086EE718A6EA98F895748BCC2767068FAAE59574
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
Signing time: Sun 07 Jan 2024 19:57:10 +0000
ROA not before: Sun 07 Jan 2024 19:52:10 +0000
ROA not after: Sun 05 Jan 2025 19:57:10 +0000
asID: 215765
IP address blocks: 2a0f:9400:6116::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:6e:e7:18:a6:ea:98:f8:95:74:8b:cc:27:67:06:8f:aa:e5:95:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 7 19:52:10 2024 GMT
Not After : Jan 5 19:57:10 2025 GMT
Subject: CN=67E241151D36C66D5A56ABAF21EDF065246E1C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:85:30:3a:3e:17:e5:6f:d7:aa:48:83:74:d5:
c7:b0:0a:84:2a:4b:37:66:f5:31:e5:cd:ba:bf:94:
02:e7:ba:c7:82:2c:c2:88:18:b2:bd:ee:d7:67:60:
4a:72:a9:5a:ae:6a:c9:df:52:b9:56:b6:0f:0f:bb:
30:9b:ac:54:fc:4e:1b:24:ae:b6:84:d7:2d:c5:4a:
53:1d:00:fd:4c:be:69:5d:8c:17:2a:43:39:47:04:
46:d9:7b:a2:25:15:a6:73:92:f6:5b:b7:95:dc:cd:
66:0c:6a:9b:28:ae:1b:53:71:aa:47:bb:52:03:ef:
fe:48:2c:34:89:b7:5c:33:01:ee:bc:3c:b9:9c:74:
84:23:c7:7d:51:a0:c6:86:b9:fe:8f:37:aa:04:84:
a2:e8:25:bc:c1:d2:29:43:2e:56:44:35:7b:4e:40:
02:80:ce:af:f2:fb:1e:c1:32:26:b6:69:59:79:e2:
f9:7f:3e:7c:9f:fe:81:c7:3c:2a:3f:aa:4e:ce:a0:
23:05:04:bf:37:01:b3:a3:14:61:9e:53:40:cb:6d:
3a:45:a8:23:ae:52:57:3a:d8:7e:d5:23:93:ae:fc:
42:5b:c7:7e:76:b2:0d:ac:7c:aa:88:95:2b:2f:3d:
51:a0:9e:86:63:6f:2f:46:07:d3:4f:a7:d3:df:d7:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E2:41:15:1D:36:C6:6D:5A:56:AB:AF:21:ED:F0:65:24:6E:1C:62
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215765.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6116::/48
Signature Algorithm: sha256WithRSAEncryption
9a:65:b3:91:86:7e:f3:4f:7d:36:a7:45:ea:b1:98:17:4e:72:
cc:8b:c6:74:bc:4a:9a:94:2d:45:04:44:a6:31:ca:05:ba:b8:
8d:f5:4e:11:31:48:bd:7c:96:03:51:1a:33:13:d2:ea:87:81:
2a:de:ee:b5:79:d0:e8:b1:19:99:4b:26:12:b9:34:2c:ee:27:
22:43:70:b1:68:e6:bf:3c:04:68:be:e5:ac:b4:0b:8b:4c:cb:
0a:d0:d4:85:e9:41:16:14:c2:72:77:50:65:e7:d6:01:42:a7:
e5:9a:39:30:f4:d8:84:69:36:c0:e3:fb:aa:6d:95:9e:ab:e9:
c8:b2:4f:ea:02:86:8f:d8:fd:02:45:af:ec:db:c5:29:9b:c6:
33:e1:3f:a6:f4:03:ac:de:11:c8:27:34:83:75:0b:3b:97:8e:
56:91:1b:69:f4:fb:0e:42:fb:27:5e:68:f1:2b:ec:65:07:e1:
e5:4c:d3:24:d6:5c:20:9d:6b:49:b7:24:25:bc:f5:03:43:72:
7a:19:a6:d9:43:c3:f1:95:28:25:98:8e:d6:48:53:05:05:8b:
6b:5f:a0:6b:b2:df:be:29:84:3d:4a:df:a5:ec:11:79:df:cd:
10:1b:c1:bc:02:b1:ea:63:8e:ab:60:f0:f8:cc:78:4e:7b:01:
cb:8e:04:d4
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUCG7nGKbqmPiVdIvMJ2cGj6rllXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDAxMDcxOTUyMTBaFw0yNTAxMDUxOTU3MTBaMDMxMTAvBgNV
BAMTKDY3RTI0MTE1MUQzNkM2NkQ1QTU2QUJBRjIxRURGMDY1MjQ2RTFDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3hTA6Phflb9eqSIN01cewCoQq
Szdm9THlzbq/lALnuseCLMKIGLK97tdnYEpyqVquasnfUrlWtg8PuzCbrFT8Thsk
rraE1y3FSlMdAP1MvmldjBcqQzlHBEbZe6IlFaZzkvZbt5XczWYMapsorhtTcapH
u1ID7/5ILDSJt1wzAe68PLmcdIQjx31RoMaGuf6PN6oEhKLoJbzB0ilDLlZENXtO
QAKAzq/y+x7BMia2aVl54vl/Pnyf/oHHPCo/qk7OoCMFBL83AbOjFGGeU0DLbTpF
qCOuUlc62H7VI5Ou/EJbx352sg2sfKqIlSsvPVGgnoZjby9GB9NPp9Pf14MbAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUZ+JBFR02xm1aVquvIe3wZSRuHGIwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxNTc2NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhFjANBgkqhkiG9w0BAQsFAAOC
AQEAmmWzkYZ+8099NqdF6rGYF05yzIvGdLxKmpQtRQREpjHKBbq4jfVOETFIvXyW
A1EaMxPS6oeBKt7utXnQ6LEZmUsmErk0LO4nIkNwsWjmvzwEaL7lrLQLi0zLCtDU
helBFhTCcndQZefWAUKn5Zo5MPTYhGk2wOP7qm2VnqvpyLJP6gKGj9j9AkWv7NvF
KZvGM+E/pvQDrN4RyCc0g3ULO5eOVpEbafT7DkL7J15o8SvsZQfh5UzTJNZcIJ1r
SbckJbz1A0Nyehmm2UPD8ZUoJZiO1khTBQWLa1+ga7LfvimEPUrfpewRed/NEBvB
vAKx6mOOq2Dw+Mx4TnsBy44E1A==
-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org