Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216072.roa
File: AS216072.roa (raw, json)
Hash identifier: rtWKSK2W+iuDVOnAAHr2wCrxBcMXCGsYxBxcAqQs904=
Subject key identifier: 5F:89:BA:A4:07:D3:46:4B:7B:6E:F0:C4:BA:A5:96:42:DC:9B:84:DA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 789CDFBE0079FEC2287B714A6713B42BBEB5F2C1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216072.roa
Signing time: Wed 02 Oct 2024 20:15:34 +0000
ROA not before: Wed 02 Oct 2024 20:10:34 +0000
ROA not after: Wed 01 Oct 2025 20:15:34 +0000
asID: 216072
IP address blocks: 2a0f:9400:6909::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9c:df:be:00:79:fe:c2:28:7b:71:4a:67:13:b4:2b:be:b5:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 2 20:10:34 2024 GMT
Not After : Oct 1 20:15:34 2025 GMT
Subject: CN=5F89BAA407D3464B7B6EF0C4BAA59642DC9B84DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:34:10:d8:40:93:96:66:80:08:f2:23:b2:
72:bf:ad:d6:11:2a:5e:1d:68:e1:0a:1b:16:06:ab:
74:a8:eb:55:9a:81:bc:3f:73:60:70:22:ed:74:23:
41:a9:1a:7f:df:e3:25:50:26:eb:c7:f9:52:c5:8f:
ed:5b:bd:a6:28:28:c3:ea:e1:09:bd:47:cc:4c:1e:
ab:5e:9c:00:c7:8e:8d:af:56:4e:6d:08:9f:de:bd:
e6:b9:a1:ba:b0:2b:51:09:3f:65:64:af:07:86:2b:
ee:75:ed:2a:9b:b2:3d:e1:f4:a4:26:ba:d3:4d:7e:
ad:ff:69:ce:e9:1c:dc:35:66:f4:95:aa:c2:e0:dd:
e0:d4:68:cf:0d:39:c0:9a:ab:36:e9:a7:7c:32:27:
0f:0b:d1:51:7e:95:10:60:5e:08:39:aa:70:4c:2e:
3a:73:41:79:bc:9e:1a:f1:58:ca:84:a6:3b:4b:dc:
3e:be:0c:79:c5:9e:af:7d:78:1c:ee:cc:9b:3d:7b:
57:b1:3d:f9:c1:34:be:fd:c4:b3:2f:15:46:3e:18:
a6:ec:6f:38:d4:07:05:06:51:4d:2a:d6:31:be:89:
c6:5b:d9:7f:12:9e:50:3b:15:e8:16:f1:c4:fb:05:
d0:3f:de:34:63:ba:04:fb:c2:2b:9f:e0:ab:fe:3e:
12:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:BA:A4:07:D3:46:4B:7B:6E:F0:C4:BA:A5:96:42:DC:9B:84:DA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6909::/48
Signature Algorithm: sha256WithRSAEncryption
d0:9c:01:4f:c0:4d:db:18:e5:74:cf:02:fa:b6:6e:d2:2b:b2:
e2:c6:f6:39:8d:e4:86:9c:bf:98:7c:a8:6c:f5:4a:21:41:46:
3d:1a:88:56:19:10:44:ab:de:e6:91:0a:b5:f2:57:29:4b:a8:
de:d0:45:5b:f0:c8:7e:b4:af:f5:27:6e:88:bd:7f:5d:93:3d:
0d:f5:b7:f2:b8:e5:7f:91:f8:2a:95:4b:ae:05:38:c7:23:00:
52:5b:3d:37:a0:41:8a:26:fa:4c:25:bb:0c:f9:f4:6b:df:70:
30:d6:34:72:85:1f:d0:e3:87:42:8a:54:e8:d4:ec:31:18:bd:
b2:8b:b3:05:77:85:7b:de:85:fd:a1:27:e5:15:80:7b:95:89:
20:61:5b:cd:cb:c2:44:4a:8b:72:f6:61:da:f9:d1:cd:f5:0b:
ac:0b:fb:8e:6c:50:f6:5b:7d:ac:5c:ab:bc:87:a2:48:55:05:
3e:22:0a:13:9b:8c:5d:f0:35:4b:98:6d:49:34:a9:82:5b:46:
d2:9c:69:85:d7:38:9d:0d:cd:af:4b:ac:da:dd:2d:7d:e5:04:
c4:fd:77:1d:e4:0f:a5:bb:57:2c:80:d3:c8:c4:34:8c:7c:8f:
03:da:5d:0c:71:3f:5d:46:b1:f5:2e:b7:a8:0b:21:1c:53:3d:
3f:d9:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org