Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
File: AS396503.roa (raw, json)
Hash identifier: N4gIHwcnNjek/XLLQW7OWnXhE9D0bQ5aDFjWWsk5pYU=
Subject key identifier: B0:90:B7:4B:F5:C3:01:1F:B9:47:95:E0:8F:1F:2B:17:41:F1:77:58
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 49D8AC1121212167BDF0BDED75A976FA56EB41C4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
Signing time: Tue 16 Jul 2024 02:42:22 +0000
ROA not before: Tue 16 Jul 2024 02:37:22 +0000
ROA not after: Tue 15 Jul 2025 02:42:22 +0000
asID: 396503
IP address blocks: 2a0f:9400:30::/44 maxlen: 48
2a0f:9400:31::/48 maxlen: 48
2a0f:9400:32::/48 maxlen: 48
2a0f:9400:7b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d8:ac:11:21:21:21:67:bd:f0:bd:ed:75:a9:76:fa:56:eb:41:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:22 2024 GMT
Not After : Jul 15 02:42:22 2025 GMT
Subject: CN=B090B74BF5C3011FB94795E08F1F2B1741F17758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:df:f0:0f:ff:ad:f2:c9:60:76:68:3a:46:
b7:b6:92:9f:d4:3b:9e:e0:d6:15:fe:f3:d1:f7:00:
1e:12:93:01:2c:5e:2d:ce:8f:71:dc:78:09:05:30:
29:b3:c1:f0:e3:ca:e5:49:4c:a0:19:08:f2:b8:cb:
bd:23:2b:3a:ef:03:a3:9e:54:67:6d:af:90:dc:fc:
76:d6:f2:97:76:aa:41:06:6a:1c:9b:1b:ca:8d:c2:
09:60:ac:f9:58:4f:c1:d0:6f:aa:72:17:40:32:3e:
f4:c4:15:0e:d7:58:0d:14:9a:f8:99:ef:e8:f1:cc:
e4:23:24:ba:2e:70:8b:cc:30:ac:70:03:06:a7:23:
ad:89:a9:16:60:fd:c9:a3:f7:47:79:c5:37:d3:91:
f8:2f:16:54:2c:8c:6d:9d:53:08:af:8e:f7:eb:b4:
44:43:40:dc:ad:58:a1:88:c5:bd:f0:5d:5a:2d:7a:
a1:93:09:bf:cb:56:3a:9d:bf:a9:ac:8f:a5:ce:5d:
1b:c2:7b:fc:b0:95:b4:ac:c1:95:58:79:c3:c1:7e:
84:21:07:64:50:bc:d9:89:b6:0e:5d:ee:a0:34:51:
28:82:74:d8:28:43:83:ab:1e:fe:49:a7:52:7e:9b:
80:b6:87:98:5d:7a:3a:ce:35:a5:d2:82:6a:4d:03:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:90:B7:4B:F5:C3:01:1F:B9:47:95:E0:8F:1F:2B:17:41:F1:77:58
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS396503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:30::/44
2a0f:9400:7b00::/40
Signature Algorithm: sha256WithRSAEncryption
d8:22:97:62:44:9e:fe:1d:97:6b:4e:bb:da:44:95:85:4d:bb:
10:c8:13:08:c1:42:22:85:5f:5d:16:38:0b:bf:73:13:95:82:
17:f4:23:63:c7:4a:b3:a4:7a:a1:43:f0:5f:f5:b1:c2:58:5e:
37:ab:21:70:01:ac:c6:3f:d7:71:0a:07:0b:93:fb:4a:c1:0a:
ff:c0:9f:d4:9d:95:56:01:ff:2b:3e:ce:ff:ce:62:a7:8a:4d:
68:8a:fa:c8:83:f2:5a:b9:50:b6:1c:2e:2d:77:2a:98:c5:04:
e3:c6:5e:9e:29:7c:30:74:93:0c:07:24:6c:45:52:af:c3:c5:
8d:26:c1:7d:6f:a8:0a:1f:4f:75:a6:ed:f4:ae:7e:83:8d:5b:
94:92:a8:9f:3a:5a:65:c1:42:e0:38:e0:fa:66:73:2b:ad:d8:
09:f4:32:ae:56:be:c5:6d:d4:df:61:7d:6c:32:db:ac:1f:3a:
fc:05:b1:69:97:22:f6:7b:b5:83:27:3d:95:3e:3c:ad:67:36:
71:70:9a:6e:eb:29:40:64:6d:00:67:75:78:06:5a:d5:f4:8a:
bf:83:e5:48:b5:cd:07:7c:7e:ce:df:fa:2d:8d:dc:15:d8:5b:
86:f2:93:fc:3b:63:25:29:0a:51:e5:13:9e:e5:3d:38:78:0e:
fd:4c:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org