Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216382.roa
File: AS216382.roa (raw, json)
Hash identifier: MBsZWgyU7Rsw6rbey5kaK3Cbmcqaa92gnAMqP1Mc3NQ=
Subject key identifier: 62:89:6F:13:26:D1:6D:8A:A4:D2:63:38:93:44:B7:C8:BB:70:B6:F9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 64B37F51EBF26B49A6C297F4E6CF9CBE0F502FCF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216382.roa
Signing time: Thu 29 Aug 2024 03:01:59 +0000
ROA not before: Thu 29 Aug 2024 02:56:59 +0000
ROA not after: Thu 28 Aug 2025 03:01:59 +0000
asID: 216382
IP address blocks: 2a0f:9400:6900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b3:7f:51:eb:f2:6b:49:a6:c2:97:f4:e6:cf:9c:be:0f:50:2f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 29 02:56:59 2024 GMT
Not After : Aug 28 03:01:59 2025 GMT
Subject: CN=62896F1326D16D8AA4D263389344B7C8BB70B6F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:6d:dd:48:c5:65:01:d1:d6:a2:1c:aa:1a:
ed:fb:28:b7:25:d7:fe:57:d4:e9:bd:97:09:d9:c4:
7c:33:30:3c:2d:65:5c:02:43:df:92:12:82:e1:9d:
f9:fa:5f:19:7d:e3:91:32:4a:bd:9a:4e:5b:cc:42:
c6:27:1f:1e:da:ec:df:e4:09:4f:04:ae:78:af:6b:
d4:bc:c3:bf:6f:14:29:c3:fd:bd:c5:7d:91:d9:d7:
f5:74:c1:4f:2b:4a:d7:8f:20:bc:00:af:f8:d6:84:
80:6b:27:05:7c:e6:d8:8e:4f:53:b0:3a:ec:c5:cf:
a9:fd:09:23:91:14:d7:35:87:a8:8e:77:d2:c2:fb:
d7:7a:4b:8f:e2:3f:19:04:ef:e7:50:a5:d3:71:a8:
32:0c:5d:13:f0:69:e2:43:fb:91:de:1a:f6:5d:a2:
ac:5c:b9:38:31:aa:cd:61:cd:84:b6:33:bf:21:87:
ab:d8:79:47:50:1c:02:28:4d:f8:f3:7f:b6:4e:04:
b9:73:22:de:81:7c:36:c4:d1:52:35:70:28:4b:3f:
3d:a0:37:94:b5:e4:a8:1e:8e:38:2a:b2:83:85:0a:
bd:90:00:03:65:de:a5:6b:47:50:ae:57:52:85:b8:
9d:ea:d0:b0:2d:4f:94:a7:19:af:50:55:a3:3e:ed:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:89:6F:13:26:D1:6D:8A:A4:D2:63:38:93:44:B7:C8:BB:70:B6:F9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS216382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6900::/48
Signature Algorithm: sha256WithRSAEncryption
96:26:fe:03:c8:a2:dc:85:06:17:f2:32:fe:d8:28:62:27:8b:
16:bb:4f:db:9c:80:a4:73:8d:d8:1e:a7:ef:57:71:14:af:46:
e6:12:29:03:22:fd:1d:27:b1:63:5b:01:80:31:08:42:ea:b3:
58:4a:7b:e1:72:3d:27:9b:13:d2:14:68:8f:71:67:a7:9f:57:
86:b7:e9:e8:4d:48:a3:f5:0f:9f:e7:08:89:29:53:4a:5a:79:
cd:7e:0f:8c:15:d1:8c:24:40:c0:7b:1a:9f:f3:a9:d8:d8:e1:
96:3c:a5:87:8d:3e:ae:94:ca:1d:98:cd:24:b6:ba:6c:6c:26:
53:73:c1:39:29:15:cb:0a:61:3a:59:ba:93:c5:8e:7e:88:19:
db:bd:8b:8b:cc:e1:34:fa:62:05:3c:42:c7:e0:38:4e:1a:62:
ce:1e:6f:4f:84:d8:3f:63:dc:67:fd:0f:83:fc:16:62:e2:37:
37:16:d2:d6:d4:31:cb:39:1a:9f:36:a3:ea:9c:e7:d9:ca:ca:
ab:0f:30:06:b9:44:04:4e:90:d5:a1:7f:95:78:ae:2b:0d:3b:
4e:80:dc:16:aa:33:ed:3d:4f:0a:02:0c:49:e8:c1:5d:1e:e5:
71:10:fb:18:96:57:b3:a6:f2:0e:03:d6:73:ef:29:62:62:08:
7b:2f:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org