Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216198.roa
File: AS216198.roa (raw, json)
Hash identifier: /om8hO88e/Xr0LMvwuZJpN19cOaXfMgqRPkYl/c7aLc=
Subject key identifier: 4E:65:4D:70:26:B4:4D:BD:5F:13:F0:5A:90:90:08:9F:54:AD:81:79
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1412181562FD1BAE2BCB3BC6486EDC81E2779D26
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216198.roa
Signing time: Tue 10 Sep 2024 14:06:14 +0000
ROA not before: Tue 10 Sep 2024 14:01:14 +0000
ROA not after: Tue 09 Sep 2025 14:06:14 +0000
asID: 216198
IP address blocks: 2a0f:9400:750c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:12:18:15:62:fd:1b:ae:2b:cb:3b:c6:48:6e:dc:81:e2:77:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 10 14:01:14 2024 GMT
Not After : Sep 9 14:06:14 2025 GMT
Subject: CN=4E654D7026B44DBD5F13F05A9090089F54AD8179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:c6:07:15:98:e0:20:b8:77:82:18:f7:58:
61:14:50:bc:60:65:27:61:0b:11:45:99:8d:f0:62:
31:5a:b1:c4:ab:f3:d1:8d:f6:17:a9:63:f2:d4:97:
09:5e:9d:d9:23:62:b2:a4:d0:65:0d:17:e1:c6:7e:
f2:ed:7c:b6:1d:b4:81:6e:58:6b:b1:b3:61:e9:c1:
99:f5:bc:ae:1e:40:46:0a:45:32:8e:30:da:10:09:
46:c3:82:d5:05:61:af:32:26:9f:af:e7:f9:98:2c:
bb:9a:40:bb:5a:fa:1c:c3:41:60:db:e0:61:7b:c6:
1d:82:70:66:56:33:e0:68:63:97:7f:99:f8:9e:80:
48:cf:90:b8:04:5e:b2:71:31:db:13:2c:26:4c:85:
b5:45:6d:6b:c9:eb:2e:aa:b0:b0:83:96:2a:1d:e2:
68:b8:7b:96:2f:92:14:60:13:58:2e:d3:4b:a5:d7:
8f:a2:cd:04:01:2c:2c:34:b0:10:38:68:15:dd:e4:
a6:15:ad:b4:81:8e:41:c0:7e:89:73:b5:47:08:f4:
6a:6b:9d:78:29:61:f2:e8:12:9b:a3:9e:89:9b:78:
65:15:80:a4:c3:ca:8e:c5:01:eb:1c:2d:c0:45:37:
14:e1:69:0c:ab:f5:34:fe:ab:08:a0:13:d8:d0:da:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:4D:70:26:B4:4D:BD:5F:13:F0:5A:90:90:08:9F:54:AD:81:79
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:750c::/48
Signature Algorithm: sha256WithRSAEncryption
94:27:31:9b:59:a3:44:4f:a3:1a:17:e8:c7:c5:a9:54:b7:3b:
5a:0f:c6:25:8e:92:5b:f2:8a:08:db:00:28:02:69:45:8c:b2:
13:8c:21:eb:ac:32:51:d0:9a:00:56:45:14:e8:1f:74:da:57:
1c:00:b5:d6:76:cb:61:7d:6c:3f:01:88:26:d2:ce:84:a5:3b:
d6:ed:67:23:65:10:bb:69:fc:d5:50:b1:28:ab:c1:35:8e:41:
3a:3a:c7:7b:43:da:7f:89:01:ed:5b:dd:ca:5c:cf:fd:48:0d:
0f:63:89:ad:98:e9:6e:44:7f:bd:12:2b:65:6b:27:98:4a:be:
f2:61:16:0c:4e:97:21:0e:95:9d:46:d6:e5:65:32:79:1d:4a:
31:26:c7:6a:78:9a:4d:6e:86:7f:4b:85:83:d9:fe:af:7a:25:
04:4e:83:f0:28:0b:b0:28:92:4a:26:8a:09:d0:29:3a:c5:f2:
e5:76:1f:00:2a:23:37:15:28:43:7a:43:1d:93:bf:bc:ab:a3:
84:27:b1:fd:ac:d4:1c:85:5a:ec:62:2b:fc:93:48:fc:39:4d:
f1:24:83:6c:2b:3b:6b:fd:cd:0f:63:b1:10:0e:86:86:a2:58:
c9:ed:f6:fa:d2:2c:8b:07:6d:9f:31:52:13:ff:5b:fd:ef:76:
1b:60:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org