Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: ITB6q3DX3xGaH2QNi4KcgVMPQvq71rxNPAQYspSCcrA=
Subject key identifier: 22:13:46:5D:B7:BD:EC:EF:BE:B0:DC:C5:64:69:48:C7:69:D8:C9:5F
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 302528C459B59C6B36E3ABD1F6BC015C15C16340
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
Signing time: Wed 18 Oct 2023 04:56:59 +0000
ROA not before: Wed 18 Oct 2023 04:51:59 +0000
ROA not after: Wed 16 Oct 2024 04:56:59 +0000
asID: 26042
IP address blocks: 2a0f:9400:610f::/48 maxlen: 48
2a0f:9400:611f::/48 maxlen: 48
2a0f:9400:6905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:25:28:c4:59:b5:9c:6b:36:e3:ab:d1:f6:bc:01:5c:15:c1:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 18 04:51:59 2023 GMT
Not After : Oct 16 04:56:59 2024 GMT
Subject: CN=2213465DB7BDECEFBEB0DCC5646948C769D8C95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:cb:9d:18:f4:3f:60:69:ce:ed:d5:3b:82:
52:56:c0:cd:74:49:46:fb:e4:62:9f:36:9b:6b:3a:
73:d7:8b:bd:f6:f9:22:8b:12:6f:3e:e9:94:8e:c1:
a0:74:2f:c5:d8:62:db:45:c2:ca:96:fb:65:34:48:
9c:be:af:32:29:74:57:45:5f:b9:40:e7:41:76:7b:
f2:a1:27:2e:ea:39:d5:88:c6:ad:93:36:d0:e9:cd:
7c:a1:ac:7e:28:a3:b3:e7:b6:44:58:bb:24:23:e8:
af:15:9d:cc:12:9b:10:c3:a7:b5:a3:3b:50:60:fc:
8b:f6:19:b9:54:ea:1d:4b:77:04:33:47:60:87:9c:
c0:23:8d:2b:1d:d0:da:8f:9d:69:78:79:16:80:2c:
2b:52:29:26:af:e9:6a:ff:e0:be:7f:83:ae:2c:04:
60:ea:6b:be:36:dc:a0:aa:69:40:fc:16:76:bd:e5:
69:5a:90:6f:34:58:d1:f6:95:d6:ba:50:d2:40:b9:
f0:da:f7:d0:69:d2:3b:e2:2e:4e:42:ba:6c:17:d3:
f9:50:5d:c7:75:96:01:88:f4:55:f2:0c:ce:fc:fb:
6c:46:06:ee:79:68:a6:59:e6:84:ab:0d:17:e1:0d:
55:0d:dd:20:b3:a7:58:2c:d0:e9:58:57:3a:47:b2:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:46:5D:B7:BD:EC:EF:BE:B0:DC:C5:64:69:48:C7:69:D8:C9:5F
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610f::/48
2a0f:9400:611f::/48
2a0f:9400:6905::/48
Signature Algorithm: sha256WithRSAEncryption
9d:a0:49:8f:0a:e7:2b:ee:ab:6d:30:64:b6:52:96:de:7e:e7:
c4:3a:3d:4e:08:ac:19:56:7f:82:53:d6:b7:f8:e8:9f:38:0f:
e0:bc:f8:07:68:ac:a9:27:74:9f:bb:c2:ae:45:60:d2:52:da:
24:51:8f:13:06:0f:ed:67:63:cb:5b:54:24:74:40:ae:44:58:
cd:52:c9:2b:67:e9:35:b8:14:49:c0:f8:59:64:86:b0:17:dc:
9a:e4:74:4b:b5:c9:65:45:55:15:75:5a:67:cf:43:96:b8:82:
f4:90:1d:df:7b:93:5b:f0:07:dc:d5:33:06:79:fe:42:90:35:
1d:70:0c:19:f0:db:d6:de:a5:33:d6:5f:af:80:b6:67:a8:69:
c6:11:71:ee:39:11:bf:ee:89:04:a9:f8:5a:40:50:e3:6c:65:
65:45:4b:c3:fc:9e:3e:63:fe:8d:d2:ca:28:b1:21:42:25:7e:
5f:cd:67:e8:8d:6a:bc:3e:04:12:ae:fb:7a:5a:03:89:2c:21:
0a:51:14:dd:63:ee:9c:4f:1e:cb:a9:f5:15:ba:f3:d4:66:5a:
6e:07:90:89:5c:86:dc:70:d8:1f:c1:94:9c:2b:82:84:54:14:
b3:7c:81:01:00:f7:c4:87:a9:15:3b:75:b0:3f:4a:4d:75:a9:
8d:da:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org