Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
File: AS38173.roa (raw, json)
Hash identifier: 2krMJ/BYbj/gXbw5T4oRdt5mXbSVwkcXjELIR7Z5QTc=
Subject key identifier: BF:83:70:E3:25:8A:C0:07:54:64:09:97:62:45:A3:CE:11:E2:D6:C9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 33272B2BD7FD99F30C7FF79938B6F27BEFA894C7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
Signing time: Tue 16 Jul 2024 02:42:25 +0000
ROA not before: Tue 16 Jul 2024 02:37:25 +0000
ROA not after: Tue 15 Jul 2025 02:42:25 +0000
asID: 38173
IP address blocks: 2a0f:9400:8022::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:27:2b:2b:d7:fd:99:f3:0c:7f:f7:99:38:b6:f2:7b:ef:a8:94:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:25 2024 GMT
Not After : Jul 15 02:42:25 2025 GMT
Subject: CN=BF8370E3258AC007546409976245A3CE11E2D6C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:cb:1a:0f:9e:7b:e4:a2:b4:38:13:1f:4e:
3d:a1:b3:c1:26:ec:d5:26:6f:79:7a:e5:cb:c5:c4:
57:9a:de:9c:fb:e2:aa:76:07:f0:bf:2d:66:84:e3:
64:08:85:96:77:51:1c:43:60:6d:45:0b:73:f7:7f:
74:52:72:ec:1c:f3:ff:70:0c:8e:23:43:51:ad:7b:
27:7f:e6:85:0e:e0:45:f5:88:83:9b:32:99:83:1f:
b6:ef:21:12:20:5a:42:36:8a:bd:2f:1f:56:da:95:
cb:39:27:12:57:8f:e8:e7:b3:fc:6a:48:2d:9a:05:
43:66:10:67:62:06:a3:62:d4:99:ee:78:ab:37:5b:
88:c3:57:49:ee:22:38:50:3e:19:91:e9:ef:2c:c6:
b4:d6:d8:37:40:83:97:e0:5e:6e:94:ea:90:cc:c1:
9d:95:96:83:34:10:15:53:e1:de:55:51:c5:97:14:
de:37:ec:0f:ed:49:e0:67:be:c2:a4:a2:99:fa:36:
7e:1a:d3:32:ca:a4:81:ea:f5:2b:cb:38:90:f6:71:
d0:8b:19:e8:cd:82:79:c6:a2:71:b2:35:54:7b:ec:
e6:48:43:94:a4:81:f0:49:59:ed:f0:98:4b:72:43:
49:96:c6:8b:19:74:b4:8a:85:62:8a:68:ca:4a:b2:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:83:70:E3:25:8A:C0:07:54:64:09:97:62:45:A3:CE:11:E2:D6:C9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS38173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8022::/48
Signature Algorithm: sha256WithRSAEncryption
c5:e2:1f:ab:5a:88:91:aa:7b:21:a7:34:d9:af:66:b8:59:3e:
17:d1:62:33:19:af:e1:e1:3a:58:aa:4c:62:4e:7b:3f:10:8b:
16:b7:60:27:f8:7f:ee:75:fd:9e:0f:b9:32:78:07:e3:60:a2:
65:25:f8:c1:b8:57:d8:97:38:43:f3:db:bd:98:31:ed:24:f5:
a6:40:48:8d:98:4a:19:89:48:8e:ea:60:46:67:e1:77:b9:39:
50:9f:4d:94:9c:76:96:d5:72:e7:08:44:a9:cb:57:6b:05:99:
30:8c:73:7e:77:a4:a1:2f:04:10:21:e5:62:ff:6a:23:82:98:
91:d5:f7:b1:b3:1f:c7:80:df:1c:4e:cd:1a:8c:79:99:f0:97:
6a:19:61:fd:f9:88:0a:44:f6:94:51:84:9e:ad:59:7a:79:e5:
79:34:06:28:e9:a5:e6:ee:fd:3d:56:b3:91:d4:1f:53:17:3b:
c4:17:bc:47:41:7a:76:d2:df:0d:b9:c5:97:58:9a:b7:bc:de:
73:4a:8e:ff:dd:19:a0:02:69:71:cb:43:50:85:ca:a7:ba:61:
f4:7a:10:0c:22:08:97:c8:ca:bd:1c:e9:a3:71:9d:93:7e:e3:
0b:f3:64:80:25:77:16:2e:ac:32:f8:c9:14:72:66:39:a7:3c:
3f:1e:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:22 2024 by rpki-client on console-fra.rpki-client.org