Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215987.roa
File: AS215987.roa (raw, json)
Hash identifier: I4juR6X8DHNnzEdr/DBLKCS4+Ua0+7/HPdSnzz9Oi6Q=
Subject key identifier: 19:E0:8F:66:25:EC:25:7A:F5:12:4A:58:F8:E0:66:5B:DB:17:44:B5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4099154977781773D9FDF2485364B5420F82CB08
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215987.roa
Signing time: Thu 17 Oct 2024 14:21:41 +0000
ROA not before: Thu 17 Oct 2024 14:16:41 +0000
ROA not after: Thu 16 Oct 2025 14:21:41 +0000
asID: 215987
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:99:15:49:77:78:17:73:d9:fd:f2:48:53:64:b5:42:0f:82:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 17 14:16:41 2024 GMT
Not After : Oct 16 14:21:41 2025 GMT
Subject: CN=19E08F6625EC257AF5124A58F8E0665BDB1744B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:0b:14:a2:c9:d9:05:9f:f3:e2:ed:ad:3c:
5c:6b:66:97:04:2d:0b:70:8a:06:ee:6d:c8:76:7e:
e0:9a:a2:01:a9:f0:04:b3:26:10:bc:39:b9:e6:48:
c9:b2:10:c0:77:0a:5f:9b:8a:d4:a8:b8:29:e1:b3:
76:56:77:38:dc:22:ce:63:1a:91:f1:b1:62:4e:9c:
0c:a8:e7:3d:18:88:3a:86:22:43:84:e4:5b:af:b8:
56:a9:ad:2e:d0:8d:12:24:79:5f:03:65:db:f6:13:
d2:f0:6b:10:4a:81:b0:61:1b:79:af:0a:a4:68:bd:
15:3d:21:05:31:75:7e:d0:a9:71:1f:d0:94:ae:3d:
20:05:8d:7c:3e:9f:03:b8:12:b6:63:c3:45:45:1b:
e5:03:b8:99:5a:3e:d6:a0:bd:8f:76:91:8c:8a:3c:
00:f7:a6:e2:5a:f8:a3:aa:1f:fb:2b:b4:ce:ec:f3:
79:c1:ca:a4:09:58:9c:a5:90:a3:a3:fa:37:0a:c0:
9b:9a:8f:99:c7:08:16:1e:97:73:2a:e8:e4:60:73:
95:a8:7e:31:2a:aa:33:07:8d:a4:92:54:23:cb:33:
b7:6a:bc:fb:ab:6d:1a:3c:8e:a1:b6:b3:8b:e4:ca:
99:5b:82:87:da:be:5a:39:e2:40:f5:06:cc:4f:53:
04:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E0:8F:66:25:EC:25:7A:F5:12:4A:58:F8:E0:66:5B:DB:17:44:B5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
72:70:d3:ee:b0:2a:5b:dd:64:2b:c3:ff:7b:46:a4:0f:e4:f7:
b6:ad:23:61:1e:4d:b2:d7:85:28:3c:e4:1a:15:a4:44:26:b2:
c1:6e:a9:77:6a:58:7e:1d:a7:99:69:39:7f:4b:e2:b8:a2:2d:
c8:4a:b3:f2:06:9a:85:28:ec:1e:8d:09:b3:a8:44:20:ff:0d:
d5:aa:1e:e4:c4:22:b6:1f:eb:ed:34:97:6e:2b:b5:4f:5c:7f:
46:9d:89:6c:ea:35:b9:ee:3d:14:c5:b2:d5:67:55:a0:35:db:
b5:34:e8:dc:67:a8:5e:41:f4:ce:fb:ad:5b:a8:8b:3e:b2:f3:
fb:e2:62:69:5b:42:4b:9b:4e:f8:87:ee:75:1c:b6:6d:85:41:
28:59:a9:ec:ea:52:de:d4:52:1e:5f:2f:e6:8c:03:5d:cd:a9:
98:79:40:ec:b2:24:6f:5a:f1:51:8b:8b:17:14:9c:b5:67:a4:
8c:58:24:d0:6a:67:0d:d8:e4:02:63:89:61:0e:97:89:0f:b9:
f9:b3:6c:4d:41:c5:45:5c:5b:bf:a6:51:9c:cb:3d:61:0e:54:
15:a5:45:91:7b:bb:25:ca:cc:04:b1:4b:f9:95:2c:1f:cc:7e:
a0:64:f9:82:8a:31:24:40:5f:31:d4:b0:49:19:cb:da:ae:6e:
52:12:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:22 2024 by rpki-client on console-fra.rpki-client.org