Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215987.roa
File: AS215987.roa (raw, json)
Hash identifier: GZJ2TQM4t4WAN/KVA3VXyqvuqc6pXhy3fWRt0aI8fIw=
Subject key identifier: 3E:21:8D:74:38:35:0D:32:90:A7:00:97:B6:0D:0C:E2:30:24:C3:15
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 427F925D82E258A54312A3D6AC9BF9ED5485468B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215987.roa
Signing time: Thu 16 Nov 2023 13:53:34 +0000
ROA not before: Thu 16 Nov 2023 13:48:34 +0000
ROA not after: Thu 14 Nov 2024 13:53:34 +0000
asID: 215987
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7f:92:5d:82:e2:58:a5:43:12:a3:d6:ac:9b:f9:ed:54:85:46:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 16 13:48:34 2023 GMT
Not After : Nov 14 13:53:34 2024 GMT
Subject: CN=3E218D7438350D3290A70097B60D0CE23024C315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:54:8d:24:6e:ed:ef:88:21:86:9e:ee:59:
82:ce:22:95:35:7a:e4:b6:55:de:ff:65:a0:89:d8:
9a:91:75:5c:92:1a:f6:e7:a4:46:39:28:93:d9:c8:
6e:95:62:8d:a9:93:36:02:de:c6:41:cf:53:b4:6a:
42:6c:50:27:d5:31:1e:94:ad:bc:d6:43:db:7b:bd:
94:a3:d5:40:cf:ad:e0:ce:6d:5b:cd:fd:9c:06:4d:
fd:ca:97:5f:2a:09:f1:92:e2:0b:61:d0:bb:03:5e:
52:81:f5:68:2a:db:b7:51:0b:9e:07:33:98:2a:ac:
4f:a1:bc:52:2e:63:50:23:31:dd:59:60:8d:e5:de:
3f:13:77:20:b2:0a:32:bd:70:87:f7:68:9d:3c:e8:
e4:b1:25:17:77:48:0a:50:0f:88:3c:75:91:07:46:
1f:6f:f9:14:07:fb:94:0a:f8:82:8f:cd:00:45:b5:
c3:d6:48:43:50:67:7d:ca:02:1f:40:2f:6a:d1:52:
0f:12:55:72:de:40:0e:67:22:93:b9:c3:d8:1b:72:
52:cd:be:7c:ad:fb:4c:11:b2:0b:ec:60:9d:e9:b8:
46:33:2c:a2:a8:b8:c5:29:52:58:61:85:2f:4a:83:
9c:8b:a4:aa:4a:4f:a2:04:da:5c:63:14:a2:43:02:
30:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:8D:74:38:35:0D:32:90:A7:00:97:B6:0D:0C:E2:30:24:C3:15
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215987.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
11:a8:45:2e:e0:72:12:b5:f5:7e:f0:7c:35:3c:9b:b3:e6:a4:
b0:ee:39:77:cf:fe:9a:8f:1d:4d:89:c9:3c:d2:51:ae:57:77:
f0:2f:6f:2e:f7:2a:21:b5:7c:af:ea:00:aa:c0:21:1f:2b:dc:
8e:7f:bf:41:ce:21:15:ad:b8:2f:24:e6:02:ab:b9:f5:b1:02:
d9:e2:9c:8f:38:52:e6:84:04:a8:af:96:bb:ef:34:f5:73:08:
bd:b1:3f:0c:92:b2:70:29:04:6f:b4:fc:95:9f:d6:a4:a4:be:
72:c6:d7:e0:70:30:f7:6b:b8:19:fc:4c:85:85:84:ac:9f:00:
df:99:b6:eb:75:2d:27:fd:1c:11:b4:3c:db:eb:56:95:22:e5:
ff:05:80:fa:06:5c:37:3f:5d:e3:5a:3c:8d:e9:ab:3c:aa:36:
44:37:75:04:0f:24:1e:54:6a:a2:63:1f:bd:e8:d7:d4:e8:a7:
c8:45:81:9c:d9:89:12:06:02:02:2f:17:8b:ea:16:bf:67:81:
b8:32:29:74:6e:94:3e:67:7e:3d:cd:d7:a8:4d:bb:11:91:9e:
ab:6f:01:7e:f3:66:0d:6d:18:42:25:db:fa:ac:ee:98:83:a7:
8b:2d:1b:02:be:f7:a3:3e:27:dc:4b:89:98:a1:39:6d:ae:08:
6e:55:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org