Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: OfCRQfIq29q/l8fZcL1GoUA12X2g2Rv7BNm4MwdcOEc=
Subject key identifier: EA:C1:01:DA:4B:DC:5D:C9:0C:65:E5:2C:72:89:D3:CE:AB:D2:BF:92
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7142C2F377BFC401DE72261E5D00FA4283AC1379
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
Signing time: Sun 19 May 2024 17:23:40 +0000
ROA not before: Sun 19 May 2024 17:18:40 +0000
ROA not after: Sun 18 May 2025 17:23:40 +0000
asID: 216183
IP address blocks: 2a0f:9400:6140::/48 maxlen: 48
2a0f:9400:6141::/48 maxlen: 48
2a0f:9400:6142::/48 maxlen: 48
2a0f:9400:6143::/48 maxlen: 48
2a0f:9400:6164::/48 maxlen: 48
2a0f:9400:6166::/48 maxlen: 48
2a0f:9400:6168::/48 maxlen: 48
2a0f:9400:616a::/48 maxlen: 48
2a0f:9400:616b::/48 maxlen: 48
2a0f:9400:616c::/48 maxlen: 48
2a0f:9400:616d::/48 maxlen: 48
2a0f:9400:616e::/48 maxlen: 48
2a0f:9400:616f::/48 maxlen: 48
2a0f:9400:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:42:c2:f3:77:bf:c4:01:de:72:26:1e:5d:00:fa:42:83:ac:13:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 19 17:18:40 2024 GMT
Not After : May 18 17:23:40 2025 GMT
Subject: CN=EAC101DA4BDC5DC90C65E52C7289D3CEABD2BF92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:b3:0e:ae:c5:44:b0:64:c1:5d:d6:a7:31:
90:d6:f0:53:34:3c:ff:5d:f4:d0:3d:6c:67:91:04:
64:5e:ca:46:64:7e:f8:e1:e7:09:6e:99:09:75:97:
8a:f3:86:60:01:02:55:06:5c:d1:88:ac:39:e4:3e:
48:25:d4:c0:2b:47:68:e5:02:5f:17:63:13:d8:fb:
4a:08:79:d9:74:da:c3:70:42:2b:e2:40:33:3c:bf:
4e:b4:fb:df:3a:59:9f:5a:b4:69:63:01:94:29:69:
e8:d7:73:90:61:67:b2:63:47:41:cd:41:81:20:26:
85:47:1b:19:c7:3c:3a:ae:44:ef:88:35:e1:7f:58:
b3:7e:15:15:88:1a:74:69:3f:49:cb:3d:57:d0:ce:
ca:4f:7e:80:33:46:a0:27:ba:58:58:d7:3d:14:e7:
cd:35:7f:e2:6b:ae:13:ab:78:b6:83:b3:51:06:aa:
f9:9a:0d:c6:b2:bb:fa:29:63:cc:1e:b1:5b:7c:62:
48:c2:04:e9:c7:19:e7:9f:65:b5:42:2a:be:19:e1:
70:9e:c8:dc:71:e3:1a:d8:fc:69:cb:28:3c:2d:43:
d6:9a:cd:c4:6d:25:8f:64:82:ff:ef:11:0b:86:c1:
61:1d:b7:b1:33:67:d6:2c:aa:16:9d:42:fc:ae:48:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C1:01:DA:4B:DC:5D:C9:0C:65:E5:2C:72:89:D3:CE:AB:D2:BF:92
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6140::/46
2a0f:9400:6164::/48
2a0f:9400:6166::/48
2a0f:9400:6168::/48
2a0f:9400:616a::-2a0f:9400:616f:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
68:2f:57:a6:ae:ef:f8:0d:e0:48:a6:45:cb:68:a3:cf:49:05:
8a:bb:00:48:e9:6b:9b:7f:09:6a:e2:80:94:c6:d9:03:3d:dd:
d5:ba:cb:94:ab:1a:f0:10:08:0d:58:eb:b1:5a:61:c2:2a:6c:
db:1d:1e:f6:7a:47:9d:cc:1a:70:f9:6b:f2:8a:a0:5a:1c:42:
67:c0:e4:8a:26:64:1b:27:85:ea:b6:cb:08:f5:6a:d8:dd:07:
7d:62:59:1a:c4:d7:64:59:98:0f:06:9b:12:d3:c3:15:97:c4:
9d:3b:dc:0d:a2:62:d0:c9:22:ca:5a:63:03:04:11:5a:32:7e:
9e:4a:6c:e8:39:72:e0:7d:c2:ef:dc:17:fe:48:00:a0:65:4f:
f6:0e:d3:c3:ce:94:60:85:e5:68:f7:1b:ee:51:4f:7e:09:f0:
c8:ac:a6:64:0e:dc:90:06:06:67:fb:64:bd:3c:07:2b:a6:ce:
92:ac:ae:c1:fe:c5:cd:86:b6:0d:59:32:d3:19:21:fe:76:57:
29:5a:16:0d:69:c0:c9:cd:ce:4e:d9:d0:a3:5e:25:35:2b:b8:
88:5b:ea:15:e2:10:c2:fd:94:00:75:3f:48:a6:51:82:13:12:
18:84:04:a9:22:dc:82:e8:02:6a:67:4b:8b:09:a7:87:04:fc:
0b:0b:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org