Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
File: AS216216.roa (raw, json)
Hash identifier: Ml0IqbRqYlTEDvYex4VM7hnkNYl335oRG/elMQwb4F4=
Subject key identifier: E9:A7:58:CA:79:13:84:FC:02:0C:1A:3E:82:F3:F2:24:62:D4:1F:4F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 15E7C238C274E5B47393828B3440916D4BDE7A09
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
Signing time: Wed 04 Sep 2024 07:03:40 +0000
ROA not before: Wed 04 Sep 2024 06:58:40 +0000
ROA not after: Wed 03 Sep 2025 07:03:40 +0000
asID: 216216
IP address blocks: 2a0f:9400:610b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:e7:c2:38:c2:74:e5:b4:73:93:82:8b:34:40:91:6d:4b:de:7a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 4 06:58:40 2024 GMT
Not After : Sep 3 07:03:40 2025 GMT
Subject: CN=E9A758CA791384FC020C1A3E82F3F22462D41F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:15:87:2d:1d:a7:c6:dc:a9:6c:e3:20:80:
74:e8:ab:52:44:9b:35:77:95:60:b8:d3:df:95:30:
dd:3d:06:50:75:d1:4f:bb:0e:16:c7:e8:e0:7c:d1:
78:47:b4:48:5e:fa:20:0d:d2:50:e6:8a:88:b4:04:
f8:43:7a:e5:4c:8a:2c:7a:51:78:2e:f0:2e:b4:57:
ae:d6:51:3f:13:f5:78:36:a7:f0:9c:c7:d7:98:aa:
46:56:18:ae:fb:43:c7:9f:f8:89:d7:76:cf:8e:e4:
a4:56:a2:0c:3c:ba:f0:2b:8e:bf:2c:64:da:09:cc:
13:ca:13:a0:e9:b0:19:74:b2:20:3e:c4:36:a5:72:
01:57:3a:9f:a5:a8:61:9d:17:8a:79:2d:a6:6b:04:
29:f2:5b:88:65:2d:09:84:8c:17:42:36:07:9c:ce:
26:78:08:ef:24:91:6b:b5:2b:ba:db:6a:20:39:d1:
70:79:1b:42:6e:f5:37:16:9f:49:66:a8:ba:d6:53:
6f:b1:a0:b3:44:7f:aa:65:d9:15:4d:4a:7d:a7:3f:
d9:02:4e:d0:cb:77:d1:5b:cb:d6:e8:99:6e:d3:09:
d9:e5:48:62:b0:00:a5:78:9e:b0:c8:39:fb:24:4b:
d4:9a:94:49:07:5f:24:0c:1c:bf:71:0e:db:c5:37:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A7:58:CA:79:13:84:FC:02:0C:1A:3E:82:F3:F2:24:62:D4:1F:4F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610b::/48
Signature Algorithm: sha256WithRSAEncryption
a8:2b:57:79:65:6a:0d:74:0a:79:00:58:1d:77:22:5d:4c:cd:
29:79:17:0d:00:6d:6b:c1:f0:83:c2:d0:db:1d:0a:6e:a8:91:
2a:92:b4:40:7c:e1:ab:e9:95:cc:83:68:5d:54:82:6f:0c:0e:
8a:39:18:4a:fb:97:35:eb:c1:df:07:c9:14:83:1f:60:b6:6c:
cf:13:6d:14:c1:dc:a2:6d:c9:d4:3d:48:31:b4:19:33:a8:54:
6b:33:53:04:b5:a2:69:8f:64:6b:c8:0e:aa:c9:90:6b:b0:ef:
6e:db:d2:37:8f:e3:3c:e9:31:19:e4:6f:f0:4e:10:19:24:bb:
9d:50:e3:26:42:8e:ab:34:1b:ee:9d:9f:04:eb:16:88:21:36:
22:dd:ee:6a:e5:b6:8a:cd:eb:89:b3:fb:12:91:3e:ca:29:8d:
ea:72:92:d1:de:f0:31:9e:0f:f8:66:8f:d3:be:3f:bb:d0:ac:
e0:36:4b:97:ed:c7:e2:08:5d:29:f6:1d:1b:63:6b:79:24:bb:
55:a6:5a:8d:d4:da:20:2e:f9:3b:df:e3:b8:d2:30:27:6a:85:
8c:ce:b8:53:7a:3e:93:74:82:81:65:6b:95:18:de:1f:be:ac:
01:c1:ab:1f:94:66:f0:78:bb:40:be:38:3e:b1:4b:bf:34:4a:
45:d1:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:22 2024 by rpki-client on console-fra.rpki-client.org