Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 5urOiHcQgxVEJff4ZkFzBUraVKsZ28FXMnNKD9gegX0=
Subject key identifier: 95:7B:4E:00:D7:30:7A:BF:A4:01:C3:4C:7D:1A:2E:60:68:CD:27:3E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 02E51D5120C291BEA35157388453D3827E1906A7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
Signing time: Sat 19 Oct 2024 17:48:23 +0000
ROA not before: Sat 19 Oct 2024 17:43:23 +0000
ROA not after: Sat 18 Oct 2025 17:48:23 +0000
asID: 26042
IP address blocks: 2a0f:9400:611f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e5:1d:51:20:c2:91:be:a3:51:57:38:84:53:d3:82:7e:19:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 19 17:43:23 2024 GMT
Not After : Oct 18 17:48:23 2025 GMT
Subject: CN=957B4E00D7307ABFA401C34C7D1A2E6068CD273E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:bb:2d:9b:6d:71:2c:c5:ae:35:d1:02:bd:
e8:3c:ff:0e:4b:33:41:2f:33:e8:0a:b2:41:49:c2:
65:8d:2c:1a:4f:04:10:f2:3e:f4:4b:f1:f9:0b:10:
dd:69:d8:6d:f3:72:5d:a1:57:d2:a4:83:55:7d:e4:
c1:a9:37:e2:31:b4:a4:0e:97:7c:1a:1d:92:0d:62:
c3:03:38:6b:0c:a8:00:20:dd:05:5e:49:81:e3:95:
49:59:94:b5:d7:d8:81:2e:c4:ff:e7:14:0c:66:3b:
d1:eb:a5:42:b6:8e:3b:cb:3b:a7:53:72:5d:3e:f2:
e9:76:ce:71:a9:cc:27:7f:52:db:e5:b5:95:a8:d8:
57:f8:69:95:17:cb:53:71:a0:c2:fe:82:9c:0e:3e:
cf:ea:24:56:69:bf:f7:20:4c:62:6d:7d:08:1b:bc:
f2:7c:15:f7:52:cd:e6:a5:2e:f9:ff:4f:f1:b3:f5:
65:29:6f:68:10:6a:dc:46:ef:36:81:5b:70:4b:23:
f4:5d:c9:5d:57:1b:f5:b6:d3:d4:a3:ed:fc:9d:86:
d2:ff:9d:24:28:d2:24:83:34:89:23:6a:aa:fd:61:
66:9d:43:7a:dd:12:cb:66:ce:d1:6e:9d:a6:89:45:
37:ad:6e:9b:b1:d2:85:e6:b9:79:2d:87:3c:8f:db:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7B:4E:00:D7:30:7A:BF:A4:01:C3:4C:7D:1A:2E:60:68:CD:27:3E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:611f::/48
Signature Algorithm: sha256WithRSAEncryption
30:b1:5f:7b:a4:2e:38:44:ea:ab:9c:ea:9a:53:93:75:4a:d4:
81:ce:3e:25:aa:76:7f:a1:e3:14:55:08:d1:d2:3a:ef:fe:05:
8a:bc:87:b2:2b:a1:d4:84:59:9f:4a:17:e9:c0:0a:1d:78:e8:
9b:cd:c2:eb:27:c4:10:71:db:6b:e5:3c:aa:4d:09:39:1c:3b:
b0:f7:df:0f:1c:1a:53:b4:e6:ce:7e:9b:0c:9b:1e:e2:df:cd:
bb:22:a3:56:03:db:17:47:94:26:2b:38:91:81:7c:2c:07:43:
2b:c7:cb:1f:d8:d4:3a:54:7a:b8:11:0f:f7:22:dc:8e:66:6f:
be:4b:ad:de:02:85:8d:96:0b:e6:61:06:63:14:e4:01:50:02:
c9:fa:26:3b:02:36:47:f5:7a:09:4c:13:37:12:c5:1b:f1:cb:
55:72:66:95:c6:9a:51:c0:9f:03:cb:c5:11:52:88:14:22:4b:
2e:99:38:ea:a9:fc:d8:30:3e:11:a6:e7:6a:81:a5:28:8b:2a:
d4:73:73:a2:30:90:69:8e:de:22:a1:a7:d3:e8:98:d5:eb:7f:
c1:5b:ff:30:c6:78:41:15:8d:19:1f:d7:3c:72:58:c1:bb:4c:
c4:53:9e:2c:0c:8d:8a:a9:a3:f7:2a:9c:32:a3:76:5a:a9:12:
1b:a9:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org