Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
File: AS396503.roa (raw, json)
Hash identifier: UueXyKvHkxlyM/iwhvLfETSBexALhuDpc2oNSQegrag=
Subject key identifier: EE:0C:0A:71:3B:FC:41:8F:DF:75:FB:E4:C1:3A:6A:D7:6D:30:A5:91
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 42B122126BC932F6A00CDE473C6E57938D79FCA4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
Signing time: Tue 15 Aug 2023 02:00:23 +0000
ROA not before: Tue 15 Aug 2023 01:55:23 +0000
ROA not after: Tue 13 Aug 2024 02:00:23 +0000
asID: 396503
IP address blocks: 2a0f:9400:30::/44 maxlen: 48
2a0f:9400:31::/48 maxlen: 48
2a0f:9400:32::/48 maxlen: 48
2a0f:9400:7b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b1:22:12:6b:c9:32:f6:a0:0c:de:47:3c:6e:57:93:8d:79:fc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:23 2023 GMT
Not After : Aug 13 02:00:23 2024 GMT
Subject: CN=EE0C0A713BFC418FDF75FBE4C13A6AD76D30A591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:22:56:45:03:3f:27:6b:c4:79:87:3b:c3:
10:59:51:4d:73:cd:b6:1b:da:b6:25:bb:0e:5d:d5:
5c:60:57:da:ab:1d:c3:7f:25:66:0c:cb:fb:20:12:
c7:e6:a0:97:28:7d:ff:70:f6:9e:e2:57:29:1f:23:
5e:35:c8:c2:6e:eb:3a:c0:c1:af:2b:b2:0e:56:40:
12:1c:2a:0a:68:4b:8b:5d:3d:0b:bf:0d:62:27:40:
21:e1:26:e0:e7:39:d2:26:56:36:ed:3d:02:0b:c8:
d7:b3:b9:0d:db:2b:e4:3f:a7:b9:52:1a:1c:2c:64:
ea:cb:21:56:c3:b0:73:ea:e7:38:58:10:99:f7:b7:
0a:6f:5d:4b:df:66:dd:d1:de:53:a5:5e:35:3e:4c:
87:78:96:7e:75:51:41:51:ba:1a:cd:76:8d:5b:14:
e9:c0:11:a4:62:ee:1d:58:e0:7a:af:3e:f7:05:de:
1a:da:82:b7:9b:e2:54:cf:b4:4b:93:26:ea:b6:15:
d8:e2:a3:44:98:be:5b:f6:35:18:4a:86:04:db:98:
a2:86:0b:2b:dc:d7:18:e2:fe:c6:10:27:0f:10:ba:
6c:d5:e3:9e:10:9c:43:f4:80:01:c6:cc:2f:77:f9:
1e:2a:9a:31:5d:69:5a:1b:49:f3:ad:43:70:18:81:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0C:0A:71:3B:FC:41:8F:DF:75:FB:E4:C1:3A:6A:D7:6D:30:A5:91
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:30::/44
2a0f:9400:7b00::/40
Signature Algorithm: sha256WithRSAEncryption
49:76:01:3c:c8:f8:3b:68:ae:f5:45:e9:e1:2b:27:54:2b:7a:
eb:24:71:1c:f1:56:98:ac:aa:bb:49:30:cc:1e:78:ae:90:61:
b0:c9:fd:6d:43:75:37:0b:a9:4a:16:4a:31:87:9c:4c:6c:83:
d8:d3:6c:4d:03:ea:7c:7b:4c:a5:64:40:e8:24:c7:5d:40:2a:
83:9e:c6:0c:b9:91:d1:cb:f5:74:1e:65:2f:b6:1b:e1:ee:9f:
3f:a9:6c:5e:5c:56:74:68:f9:b9:ad:d6:69:7b:9c:aa:c1:7e:
4b:40:78:24:99:bc:d1:6d:0f:da:97:75:46:5e:7c:14:e0:92:
9c:0d:d4:8d:18:18:77:ac:3f:21:4e:e7:94:f4:19:a8:59:03:
72:13:82:ee:1f:d3:4b:fb:e3:e1:4a:a6:06:0c:35:9c:50:dd:
2b:eb:6f:57:53:cc:39:69:dd:b3:23:ae:99:ce:3f:83:6b:90:
d4:26:27:a1:2c:4b:4b:65:3f:a3:4c:d4:d9:b7:e9:d8:64:20:
75:b9:f6:05:10:aa:ec:c6:24:ec:d7:6c:7b:97:0b:da:dc:65:
e5:95:16:3f:06:8c:9e:43:6d:b7:be:1b:1a:50:68:82:35:3e:
b8:b4:13:8f:35:2a:81:1d:0f:d2:e1:7f:1e:08:3c:15:6c:6a:
99:fd:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org