Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: 0KsTapHa8mwRQC7dLMef2Jp2kCTW2CHa1lnTthAC0k4=
Subject key identifier: 60:9E:B4:A8:95:A4:19:2E:37:1F:7E:CF:86:AB:0E:58:2F:27:83:1C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 60381C112028248E30158C98B74E73006A914CA9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
Signing time: Fri 11 Oct 2024 03:08:03 +0000
ROA not before: Fri 11 Oct 2024 03:03:03 +0000
ROA not after: Fri 10 Oct 2025 03:08:03 +0000
asID: 31898
IP address blocks: 2a0f:9400:614d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:38:1c:11:20:28:24:8e:30:15:8c:98:b7:4e:73:00:6a:91:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 11 03:03:03 2024 GMT
Not After : Oct 10 03:08:03 2025 GMT
Subject: CN=609EB4A895A4192E371F7ECF86AB0E582F27831C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:44:f9:45:2e:82:8e:10:21:7e:08:7e:ee:
32:12:0a:d6:fe:c2:74:a9:a6:64:db:d4:8c:3e:22:
24:47:cc:e2:5c:48:f8:be:32:59:f4:51:e4:92:d0:
ed:91:06:a9:d0:61:ab:58:e1:f3:90:43:b8:ad:da:
0b:55:ee:89:f8:17:38:89:5b:00:fc:e0:5a:da:c2:
4c:a6:7e:0e:c1:68:07:17:61:5c:fe:30:64:a2:98:
89:f8:11:7d:d4:0b:d3:d3:8f:64:2b:b8:c8:1f:ff:
f5:3e:83:51:18:65:5d:aa:f4:05:a0:27:d5:81:d7:
38:f0:37:7d:09:82:a5:aa:62:48:e8:dc:73:47:c2:
24:8c:be:36:30:76:b2:4f:c4:78:a2:e3:f9:a4:ed:
a9:25:a5:3d:be:37:17:21:50:3a:95:07:c1:09:8f:
99:42:73:8f:1c:66:ea:55:d4:83:6a:e5:73:e7:eb:
5f:0d:ee:33:7c:22:be:4f:54:66:b5:a1:08:17:31:
48:11:fd:f6:64:14:23:6d:e7:e7:67:45:64:4f:42:
52:26:b8:16:a9:0b:4d:b1:65:20:98:ac:68:cc:e9:
77:22:dd:7a:25:d8:5e:d7:24:b7:ef:30:67:ed:03:
ab:b8:d5:22:40:db:bc:11:93:54:a5:af:d4:bf:84:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:B4:A8:95:A4:19:2E:37:1F:7E:CF:86:AB:0E:58:2F:27:83:1C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:614d::/48
Signature Algorithm: sha256WithRSAEncryption
55:d5:50:63:2c:fa:7b:05:c1:51:21:b9:ae:98:3e:52:1a:6c:
b1:11:83:83:6d:49:b7:1e:f4:45:50:4a:59:cf:ae:1c:09:c6:
cd:71:cb:1f:06:f8:22:3c:b6:04:54:e9:4b:2c:f1:18:da:66:
6c:50:17:1f:5a:71:59:aa:88:c7:4b:a5:4e:a2:65:12:57:da:
c0:33:70:15:47:65:d7:60:87:52:b2:3c:b2:c0:c2:e1:fc:f9:
bf:e6:9b:a3:ee:d1:86:e1:ed:cc:8e:68:c0:5e:07:47:be:64:
2a:e3:c1:0b:92:50:92:ca:dd:e6:16:0c:6e:27:f6:17:0b:db:
b3:2f:58:73:c9:f9:4f:28:b2:12:1b:d2:bb:87:6f:6e:10:10:
91:b0:09:90:8f:2a:af:db:2a:21:39:89:69:49:0b:8c:81:9d:
30:8d:a2:1d:e7:41:25:36:6d:6c:76:d0:b9:4d:d1:ec:9d:2d:
02:4d:75:d3:7d:1d:54:b5:2f:04:ac:de:cf:41:bb:a7:9b:f2:
83:4d:55:19:32:c6:3f:dd:d0:91:6e:99:a3:69:a6:3c:dd:3b:
ba:03:44:ea:dd:74:3c:f6:53:bc:78:31:52:ed:71:9f:1f:5e:
7a:1e:d9:75:91:cd:ab:5c:c4:86:69:18:9f:5b:ab:9b:92:50:
e5:0e:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:34:43 2024 by rpki-client on console-fra.rpki-client.org