Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS34927.roa
File: AS34927.roa (raw, json)
Hash identifier: yD/el5YipflUPhYzOajO9o5z4RDcqppjLwFbsWNAgA4=
Subject key identifier: 5B:CD:2D:85:28:29:BC:97:E7:C4:01:54:FF:51:BF:DA:FD:07:6F:7E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4F53B17E56F3BF2D4209FB3D07500DDF77FDD7F5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS34927.roa
Signing time: Sat 16 Nov 2024 08:34:49 +0000
ROA not before: Sat 16 Nov 2024 08:29:49 +0000
ROA not after: Sat 15 Nov 2025 08:34:49 +0000
asID: 34927
IP address blocks: 2a0f:9400:693a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:53:b1:7e:56:f3:bf:2d:42:09:fb:3d:07:50:0d:df:77:fd:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 16 08:29:49 2024 GMT
Not After : Nov 15 08:34:49 2025 GMT
Subject: CN=5BCD2D852829BC97E7C40154FF51BFDAFD076F7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:08:87:b3:ff:f3:82:1d:f5:36:f1:68:b3:
9c:bb:e8:4a:b3:d4:41:cc:fe:fd:d3:ee:8d:cc:6b:
9d:30:d7:7c:ef:9f:87:bf:af:49:b2:8d:17:42:94:
c7:7f:1e:f1:71:c7:3f:fc:52:69:a1:5e:ac:6b:cb:
f4:38:3a:02:c7:d1:2b:1c:e7:5d:08:16:30:8b:34:
b1:6e:c2:43:a9:52:b1:eb:b2:45:a9:be:54:a9:f8:
eb:d5:39:4e:07:78:c4:53:4d:30:85:79:e3:09:33:
f3:16:c9:a2:70:9c:3d:28:03:28:60:0b:34:92:a7:
62:dd:f5:5c:e3:e5:0b:d8:c8:23:01:47:68:5b:33:
6d:bd:f9:75:62:09:9d:be:2f:0f:05:a1:f0:90:0d:
dc:99:08:a5:00:43:30:27:07:8a:54:9c:d9:6b:c4:
3a:25:a6:90:4d:83:57:64:ce:81:4c:95:da:c2:f5:
40:73:8f:88:fb:9d:3f:79:36:fe:39:97:4c:5a:8d:
94:b6:9b:5a:5c:39:e6:48:70:86:12:67:2f:47:56:
f8:64:02:35:43:c2:59:cb:c1:4b:74:b4:c7:9c:cf:
e4:1a:cc:82:3d:de:b6:f8:e9:52:f9:92:2c:80:73:
5a:45:27:27:f0:44:82:56:25:c6:ba:49:43:7c:b3:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CD:2D:85:28:29:BC:97:E7:C4:01:54:FF:51:BF:DA:FD:07:6F:7E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS34927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693a::/48
Signature Algorithm: sha256WithRSAEncryption
3d:53:4f:39:ac:e4:5d:73:f6:4b:59:31:dd:cb:90:57:42:58:
33:72:73:30:b1:65:c4:18:6c:bd:b4:4f:c3:65:55:8c:cd:bc:
3c:ac:e1:fa:53:6a:a5:ac:03:0f:a7:01:42:1b:f2:b0:b7:47:
19:8e:c3:e0:4c:53:41:26:e6:25:35:d1:0e:55:c6:4b:76:ef:
0a:96:5c:97:8d:71:32:03:6f:25:9a:3f:26:b7:68:7a:75:d5:
43:2e:fc:51:69:7a:36:9b:65:47:e3:4e:b7:34:00:cc:1f:e5:
4f:31:53:e7:f9:82:66:c3:1d:cf:5a:3f:da:5d:c2:57:27:d8:
ac:1a:88:71:aa:93:ce:07:d2:ae:8a:03:84:f8:db:71:58:ee:
d9:c4:4b:29:19:ce:52:49:20:23:f6:7e:e1:8b:73:24:66:73:
de:2b:6d:30:30:b5:3e:57:8b:92:5e:a0:1d:9e:e6:a0:e0:3f:
e0:c2:f2:f1:33:9d:5d:cf:1f:f7:51:a9:db:df:6b:6d:f3:42:
f0:fc:e7:31:0b:f9:3f:df:d7:18:1d:dc:b3:e6:35:59:a1:bb:
21:c7:29:42:ca:68:8d:fe:3a:01:8e:db:fd:1c:7f:79:92:7a:
1c:0b:12:72:a5:c6:92:00:c2:c6:b2:65:b4:71:2c:8a:0a:21:
0c:d5:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org