Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: PNTDffOqxS+i/fEo0AcDyl+tmKbWn7gAYFvE9exiA/s=
Subject key identifier: 0B:32:AC:C0:02:FA:30:68:95:D4:9B:84:80:09:C9:2B:47:86:B8:79
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2618C04D158DCE30524A6DF99F1EF48FC7F05257
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
Signing time: Mon 22 Apr 2024 19:15:32 +0000
ROA not before: Mon 22 Apr 2024 19:10:32 +0000
ROA not after: Mon 21 Apr 2025 19:15:32 +0000
asID: 216183
IP address blocks: 2a0f:9400:6164::/48 maxlen: 48
2a0f:9400:6166::/48 maxlen: 48
2a0f:9400:6800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:18:c0:4d:15:8d:ce:30:52:4a:6d:f9:9f:1e:f4:8f:c7:f0:52:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 22 19:10:32 2024 GMT
Not After : Apr 21 19:15:32 2025 GMT
Subject: CN=0B32ACC002FA306895D49B848009C92B4786B879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:f0:0b:99:6e:15:5d:a4:67:e5:23:da:94:
0c:28:e4:5d:5e:b4:bb:a3:1d:b7:71:ae:ef:4f:cb:
3b:2a:e5:09:76:eb:3c:77:2b:d7:17:1a:db:71:dc:
51:42:bf:1d:71:0e:13:26:80:51:64:eb:6a:3b:88:
84:16:d2:1f:6a:0c:6f:46:31:9e:5e:1a:4c:6c:c4:
79:2e:99:14:29:08:20:36:a6:b3:e1:d1:43:55:b0:
52:eb:a0:4c:c7:6e:a6:43:d0:11:b2:98:19:a2:ab:
a5:f9:47:42:d8:22:7e:c5:94:5c:3d:f5:96:c0:35:
de:34:1e:b6:88:90:05:7e:28:d3:24:73:1c:18:63:
47:d6:08:76:cb:25:a8:08:4f:54:71:6e:53:97:84:
5a:fd:23:11:5f:d0:75:cd:f9:93:4d:76:13:4e:8c:
07:56:46:5c:51:b2:67:ce:1c:9c:51:e7:03:33:24:
2b:e0:2a:6e:83:b9:c4:42:e4:2d:61:95:91:79:08:
cb:d0:2f:51:91:b3:fa:65:5a:70:a8:f6:c7:4c:af:
20:e4:26:e4:81:1d:4d:c8:35:dd:a4:4c:59:6e:9c:
4b:5b:04:c2:ae:e3:b1:c0:ab:31:b5:0b:b2:94:b5:
32:39:fd:5b:eb:04:4b:51:9d:bc:53:87:98:48:89:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:AC:C0:02:FA:30:68:95:D4:9B:84:80:09:C9:2B:47:86:B8:79
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6164::/48
2a0f:9400:6166::/48
2a0f:9400:6800::/40
Signature Algorithm: sha256WithRSAEncryption
0a:3b:d9:12:48:78:e4:0c:b5:4c:c9:22:29:7e:3b:2b:6b:85:
e4:1a:07:88:47:9c:94:ac:ef:d0:95:9d:9b:d3:62:2e:d5:f6:
d9:28:ed:c2:91:50:6b:af:18:16:c5:f1:a3:f8:85:80:98:db:
47:88:a4:4b:81:9e:86:96:95:65:83:b4:1a:dd:5f:20:14:3e:
70:e7:99:45:7c:6c:fd:05:71:74:91:a8:1f:37:91:1e:f1:27:
f2:df:7b:d3:b2:92:b8:ba:04:b7:5a:8c:30:5b:4b:e2:a3:10:
1c:2e:91:8d:66:6d:5a:ad:65:00:40:10:0f:d7:a4:c5:90:f4:
c7:f7:c7:9e:97:47:f9:fd:fe:6f:b8:df:e9:5b:cd:a3:72:05:
a4:f9:98:cc:a9:35:15:ad:6b:71:73:b4:a3:53:93:55:70:36:
df:21:69:1b:1f:48:4d:8a:6c:65:cb:2a:22:dd:09:60:fd:18:
71:dc:c1:75:50:a0:23:86:f2:53:e9:6a:0c:e4:76:0a:68:36:
d3:11:20:a4:8a:29:d3:d2:09:75:9f:c8:6f:30:0e:c6:63:df:
e9:0c:8f:da:48:3f:d2:62:98:e9:26:88:f7:4f:e2:d3:0a:67:
18:6e:2f:42:66:6a:a7:7d:7c:d9:ca:a9:80:89:57:ba:71:fc:
1d:58:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org