Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216198.roa
File: AS216198.roa (raw, json)
Hash identifier: eyw/tfbvYUkOnv0vB3baH7qNXP8MWkpNXxpVkEjWezs=
Subject key identifier: AD:2A:97:14:F2:AC:50:75:95:B4:82:6D:F2:55:E0:44:A5:28:E6:BC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7D7455FFC894A227B03DD1F77510642E7F835AB8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216198.roa
Signing time: Tue 10 Oct 2023 13:53:48 +0000
ROA not before: Tue 10 Oct 2023 13:48:48 +0000
ROA not after: Tue 08 Oct 2024 13:53:48 +0000
asID: 216198
IP address blocks: 2a0f:9400:750c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:74:55:ff:c8:94:a2:27:b0:3d:d1:f7:75:10:64:2e:7f:83:5a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 10 13:48:48 2023 GMT
Not After : Oct 8 13:53:48 2024 GMT
Subject: CN=AD2A9714F2AC507595B4826DF255E044A528E6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:96:79:51:79:d8:57:85:14:b2:4f:9c:48:
b2:7f:18:52:60:f1:74:12:1b:24:42:71:3a:6e:6d:
a7:52:12:96:2c:58:66:33:8d:a4:33:68:6a:46:3d:
db:70:26:dd:fc:19:66:16:7f:f7:ef:d0:f5:aa:73:
de:e9:73:d3:17:be:dd:7f:0a:ff:06:d1:ff:26:6a:
e0:6a:78:7f:7d:36:c4:49:dc:86:ff:3c:2a:21:46:
af:9a:47:3f:63:bc:38:08:14:e0:da:21:59:c5:1d:
d4:6e:b8:c1:8b:50:83:dc:70:e2:52:ad:33:4d:84:
da:3c:83:ca:42:bf:02:62:02:11:4f:7d:cb:28:86:
9d:6d:06:51:4e:35:2d:25:c3:ba:cc:91:71:b6:2b:
0a:17:4a:a4:83:2a:fc:9a:6a:53:f5:82:41:3b:26:
38:b1:a1:a3:3c:c8:d4:81:38:2b:23:30:03:8e:50:
06:7a:90:a1:e7:03:bb:ba:22:ab:27:8b:12:f4:bd:
c7:d4:46:7d:ce:b4:0a:25:ff:94:cb:71:de:0d:b4:
8b:6b:4c:0b:50:53:bd:f4:4f:3f:2a:92:86:42:9b:
b9:35:04:39:0f:74:ce:15:55:f0:9f:29:b0:5d:3d:
ca:84:c8:c1:ee:0d:09:ae:ab:17:d7:43:d1:36:39:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2A:97:14:F2:AC:50:75:95:B4:82:6D:F2:55:E0:44:A5:28:E6:BC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:750c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a4:91:a1:3d:47:81:bd:24:97:16:7e:08:74:2b:6f:63:e7:
b4:62:37:4e:d6:40:48:74:01:8c:9b:93:bb:79:d1:72:49:1d:
6f:27:e1:cb:d6:06:cb:94:a2:c0:e8:4e:10:7d:f8:7d:bc:c0:
94:7a:15:69:d1:a4:74:2d:19:dd:a1:96:26:28:9b:44:cd:af:
be:15:0a:35:04:3c:ce:76:63:ca:50:40:8b:66:5e:5a:3b:ee:
e0:fb:13:72:fd:72:64:a0:a8:61:dd:c3:b4:f3:8b:b7:5e:40:
bb:ea:fa:20:ed:3f:0c:c6:99:37:ca:90:d8:c7:47:d6:5e:16:
04:f8:81:52:4e:48:47:a1:0e:58:e3:0f:f6:cc:2f:12:2f:8e:
54:b8:23:ca:15:d5:04:90:b2:95:26:39:e6:5b:91:11:a0:f7:
90:ff:13:02:00:ef:53:70:ae:a2:d4:04:58:6d:cb:5e:58:2f:
27:b8:e4:48:0f:86:b9:4d:08:d8:48:91:4b:77:42:09:5b:da:
11:e3:72:05:c4:fd:5e:d1:a5:e1:ae:6d:5e:7e:d1:51:38:d2:
b2:39:ae:f8:13:44:22:c2:69:3e:d7:be:82:23:4f:63:58:f6:
7c:3f:5d:0b:e9:b6:9d:77:9c:3c:a7:64:54:f9:e1:e8:d2:34:
4b:17:6f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:05 2024 by rpki-client on console-fra.rpki-client.org