Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS34927.roa
File: AS34927.roa (raw, json)
Hash identifier: tv3OL8gVEiIndWfU+behTPlIbrjsB59LnnzJ2u/d62U=
Subject key identifier: 2C:9D:13:26:8D:88:52:91:96:B9:97:A6:DF:2F:0E:94:FA:C5:B0:96
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 233531FF8C190D1393BB1EFFD28DCA0DAD450D10
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS34927.roa
Signing time: Sat 16 Dec 2023 07:49:11 +0000
ROA not before: Sat 16 Dec 2023 07:44:11 +0000
ROA not after: Sat 14 Dec 2024 07:49:11 +0000
asID: 34927
IP address blocks: 2a0f:9400:693a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:35:31:ff:8c:19:0d:13:93:bb:1e:ff:d2:8d:ca:0d:ad:45:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 07:44:11 2023 GMT
Not After : Dec 14 07:49:11 2024 GMT
Subject: CN=2C9D13268D88529196B997A6DF2F0E94FAC5B096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:65:81:53:22:a5:60:3d:1b:bf:04:d1:ac:
77:a4:cd:66:b3:cf:d0:da:58:e2:06:be:ef:37:af:
f6:54:56:9f:a9:71:ac:97:61:a6:09:38:ec:73:35:
f4:b9:aa:72:e3:17:8b:d5:47:07:40:19:92:1f:91:
63:e2:9b:cf:b2:a2:68:79:55:f0:ce:e5:c4:0d:34:
80:1c:58:98:ed:e6:34:73:28:88:f8:ed:87:c8:e3:
2d:3b:a5:ac:1d:e7:eb:8f:b5:43:0e:05:0a:aa:23:
19:80:6c:b1:54:f3:ab:7c:b9:d8:6d:22:c7:ec:67:
dd:c4:c7:70:0f:84:b7:87:95:6e:27:c5:e5:08:a4:
6d:36:93:72:ae:1b:cc:41:34:04:98:ba:19:bf:96:
47:8f:aa:f3:ac:80:5f:25:81:d6:05:5d:9c:2c:27:
4a:ab:bd:f7:f0:48:cf:67:84:b3:3a:ad:94:73:3a:
bb:50:4f:49:43:6b:00:17:dd:b5:bd:aa:3e:31:e1:
bc:7b:d6:bd:a8:6f:db:7b:80:2e:32:5a:66:d5:14:
72:1d:18:7e:13:d9:60:82:5f:c7:50:d2:c4:64:7c:
0a:99:da:39:2c:58:47:89:85:d4:86:9f:40:21:99:
60:92:02:81:63:ec:e1:01:ae:4e:25:ba:7e:9d:6c:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:13:26:8D:88:52:91:96:B9:97:A6:DF:2F:0E:94:FA:C5:B0:96
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS34927.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693a::/48
Signature Algorithm: sha256WithRSAEncryption
b6:5a:d4:5f:ec:b5:29:ee:09:e9:ef:f4:d6:cd:52:e7:0f:2c:
86:91:43:e2:b1:84:c0:fb:9d:45:70:68:bb:2d:37:a6:99:4d:
ca:7b:39:44:47:78:ef:ef:04:7c:fe:99:a0:22:a2:ed:12:7f:
fa:35:33:1e:16:60:a4:50:aa:51:cc:fa:a7:56:75:2b:4e:bf:
24:78:31:73:a6:bd:7b:e7:4d:af:a8:8d:9e:92:1c:08:80:26:
fd:23:69:e9:3f:f5:e8:28:71:b1:43:e7:08:d2:1c:f0:7d:4b:
89:28:52:6c:7e:65:e8:63:33:20:bc:ea:87:c0:7c:24:1b:1e:
18:cb:31:99:4e:09:66:a7:4d:e9:99:80:a5:b8:ba:e9:d5:12:
a1:75:3c:13:06:d9:97:ed:57:85:95:48:44:84:61:ec:18:43:
a3:dc:c5:82:8a:ae:9e:ea:b4:ca:16:a8:77:65:a5:48:f6:9e:
0b:f5:48:7d:be:bc:82:4e:cf:25:fc:26:32:fd:e5:59:70:7e:
85:cd:01:7e:54:b3:24:ad:f8:d3:70:a7:09:ac:4b:7b:b3:7d:
a4:15:f8:ab:2d:dc:25:2e:38:00:d8:42:ea:7f:fe:4c:7e:5d:
43:55:15:27:bd:97:16:42:ea:72:1d:ec:82:3e:a8:89:6f:69:
4a:50:7d:7c
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUIzUx/4wZDROTux7/0o3KDa1FDRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzEyMTYwNzQ0MTFaFw0yNDEyMTQwNzQ5MTFaMDMxMTAvBgNV
BAMTKDJDOUQxMzI2OEQ4ODUyOTE5NkI5OTdBNkRGMkYwRTk0RkFDNUIwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN2WBUyKlYD0bvwTRrHekzWaz
z9DaWOIGvu83r/ZUVp+pcayXYaYJOOxzNfS5qnLjF4vVRwdAGZIfkWPim8+yomh5
VfDO5cQNNIAcWJjt5jRzKIj47YfI4y07pawd5+uPtUMOBQqqIxmAbLFU86t8udht
IsfsZ93Ex3APhLeHlW4nxeUIpG02k3KuG8xBNASYuhm/lkePqvOsgF8lgdYFXZws
J0qrvffwSM9nhLM6rZRzOrtQT0lDawAX3bW9qj4x4bx71r2ob9t7gC4yWmbVFHId
GH4T2WCCX8dQ0sRkfAqZ2jksWEeJhdSGn0AhmWCSAoFj7OEBrk4lun6dbJXLAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQULJ0TJo2IUpGWuZem3y8OlPrFsJYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzM0OTI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAGk6MA0GCSqGSIb3DQEBCwUAA4IB
AQC2WtRf7LUp7gnp7/TWzVLnDyyGkUPisYTA+51FcGi7LTemmU3KezlER3jv7wR8
/pmgIqLtEn/6NTMeFmCkUKpRzPqnVnUrTr8keDFzpr17502vqI2ekhwIgCb9I2np
P/XoKHGxQ+cI0hzwfUuJKFJsfmXoYzMgvOqHwHwkGx4YyzGZTglmp03pmYCluLrp
1RKhdTwTBtmX7VeFlUhEhGHsGEOj3MWCiq6e6rTKFqh3ZaVI9p4L9Uh9vryCTs8l
/CYy/eVZcH6FzQF+VLMkrfjTcKcJrEt7s32kFfirLdwlLjgA2ELqf/5Mfl1DVRUn
vZcWQupyHeyCPqiJb2lKUH18
-----END CERTIFICATE-----
Generated at Sat May 4 11:07:18 2024 by rpki-client on console-fra.rpki-client.org