Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
File: AS216216.roa (raw, json)
Hash identifier: 8PfjxPW876/65MdLz9Q4jlaNKCx851cAeZjfeAneXJM=
Subject key identifier: 3D:D9:C8:24:C7:22:1F:E8:F6:BF:FE:B8:62:B3:15:1D:0B:7E:34:DB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 09F32642CE7E18BEADF054811C2A316C01968B24
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
Signing time: Wed 04 Oct 2023 06:26:28 +0000
ROA not before: Wed 04 Oct 2023 06:21:28 +0000
ROA not after: Wed 02 Oct 2024 06:26:28 +0000
asID: 216216
IP address blocks: 2a0f:9400:610b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f3:26:42:ce:7e:18:be:ad:f0:54:81:1c:2a:31:6c:01:96:8b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 4 06:21:28 2023 GMT
Not After : Oct 2 06:26:28 2024 GMT
Subject: CN=3DD9C824C7221FE8F6BFFEB862B3151D0B7E34DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:2e:f7:39:da:c2:84:e4:e9:a3:61:b6:c4:
88:0a:c7:78:06:08:fb:85:7d:52:53:be:e8:e5:da:
84:11:f5:8a:25:54:cd:16:63:2e:e0:b1:f3:e7:a5:
82:95:f9:ca:32:f4:d6:ac:0f:00:97:b6:77:04:14:
e2:c4:d1:48:71:52:2d:7b:cf:c9:3e:37:e7:93:b8:
8f:ec:d4:62:de:8f:68:c1:53:a0:54:c9:7d:55:63:
e7:ed:8c:08:3d:74:5c:5e:67:da:90:39:85:ac:34:
bb:5e:2e:96:f8:1c:36:0b:d6:fe:25:fd:6e:2c:ba:
43:26:fe:53:0c:3b:aa:38:1c:23:a2:3e:61:9d:30:
9e:3a:3b:55:84:06:dd:d2:04:45:bf:15:09:22:6c:
86:fe:9f:a8:53:7d:90:a4:6a:ea:45:53:d9:0e:d1:
56:4e:60:50:14:e8:c2:70:2e:c8:c1:39:6e:f0:23:
f6:a8:8d:34:89:82:0e:4c:d7:1d:d6:e9:b4:1d:72:
82:66:b9:37:b0:5e:cd:9a:ee:d4:a5:c4:c8:58:86:
6e:41:ce:67:70:cc:58:78:26:c2:33:2d:af:20:4c:
2a:a9:15:c8:83:72:75:34:91:4c:29:57:0f:c4:c3:
f4:ae:87:4f:eb:08:1e:a3:2c:66:d2:1a:56:de:fb:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D9:C8:24:C7:22:1F:E8:F6:BF:FE:B8:62:B3:15:1D:0B:7E:34:DB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610b::/48
Signature Algorithm: sha256WithRSAEncryption
7f:03:61:3d:48:4f:49:a6:01:22:ff:c5:c7:c9:85:9f:ed:26:
77:10:eb:8c:46:ca:18:91:f0:4a:e1:a5:ff:12:9e:6d:33:9d:
70:5c:ab:d0:a5:fa:a2:a9:50:b9:b0:cb:dd:54:4e:be:1d:41:
c4:ad:0c:c6:a1:3c:da:dc:d4:f9:9e:af:fa:18:12:23:dc:20:
c8:fd:7e:4d:b1:2f:02:a7:1d:ff:66:a8:b5:17:d7:9f:e2:64:
ce:1a:1a:b3:1f:d8:70:f6:b8:b5:08:e3:e4:09:9a:72:a7:c6:
5c:01:b8:1f:90:75:84:13:b3:1b:f5:b4:5f:54:8c:3f:cf:2b:
ed:0e:38:63:f0:6c:cd:c9:09:ac:dc:2d:83:c7:f3:a1:6d:ad:
33:5f:05:d7:08:f8:06:cb:7f:06:7d:36:bb:db:01:42:7b:f7:
6c:a1:82:97:c6:47:b7:da:c9:b5:05:dd:b1:a2:4d:3b:44:93:
b4:9c:3a:af:4b:3d:24:5b:30:7b:e3:5a:7a:c2:39:21:36:5e:
40:90:fe:fd:88:13:e0:a4:c7:47:bd:7b:4e:86:90:76:2b:09:
fc:34:c2:d5:eb:c5:fd:02:be:3c:d7:1e:83:74:ab:81:4a:e4:
15:fc:ac:90:fe:6c:ce:0d:2b:99:78:c0:e3:11:8a:ac:90:3e:
fe:44:d1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org