Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398379.roa
File: AS398379.roa (raw, json)
Hash identifier: kjVb59RX1p2NAx/in7tLIIYxcvJYSDLLXv4k9ln5NMw=
Subject key identifier: 73:E7:D8:85:F3:3E:3A:D3:A8:4A:B6:33:88:55:1B:D4:DF:5C:91:53
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 58AACAE9C570CA5B9DAE661D1776FC1EC5C0B232
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398379.roa
Signing time: Mon 19 Aug 2024 04:29:37 +0000
ROA not before: Mon 19 Aug 2024 04:24:37 +0000
ROA not after: Mon 18 Aug 2025 04:29:37 +0000
asID: 398379
IP address blocks: 2a0f:9400:691f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:aa:ca:e9:c5:70:ca:5b:9d:ae:66:1d:17:76:fc:1e:c5:c0:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 19 04:24:37 2024 GMT
Not After : Aug 18 04:29:37 2025 GMT
Subject: CN=73E7D885F33E3AD3A84AB63388551BD4DF5C9153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:df:85:7e:f1:af:1e:22:2d:19:89:4b:cb:
0e:d8:fd:31:1a:2f:df:e1:6d:a8:6e:09:ba:de:cd:
b3:f4:7b:c5:18:2c:98:6b:48:fc:ee:68:1b:cb:26:
90:aa:7e:3d:c9:90:b4:b3:76:d8:d2:68:67:f3:ef:
61:56:84:56:83:e9:22:bf:3d:7c:72:01:82:39:9b:
16:75:8a:aa:d8:bb:67:7f:ae:b0:af:f0:44:8c:e4:
c9:fb:ac:e8:27:e5:6f:35:c9:91:ad:20:ba:b5:6b:
05:d1:9f:42:fc:92:57:14:07:b2:98:8c:8e:81:1a:
15:7a:e2:5c:b6:bd:fa:98:9b:eb:03:8c:95:74:72:
31:1e:b9:f6:89:16:21:31:8b:ee:c3:70:eb:76:0a:
4e:01:a3:43:b3:41:e5:e6:97:e4:ef:84:32:34:e1:
b6:ef:23:67:29:1a:32:64:74:4c:61:6b:b3:4a:27:
d9:2c:9f:88:e2:03:b7:24:dc:9e:6e:c2:df:72:3d:
1f:9f:b1:9a:fb:38:c7:86:4c:da:f3:b2:e5:ba:75:
cd:b1:99:7b:29:d1:75:4f:70:4c:fb:23:76:71:d4:
e6:b4:68:da:d2:5d:88:e0:ae:b0:a0:d6:7d:55:54:
b2:e5:69:38:c1:80:bd:38:a5:e5:db:45:ef:46:d6:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:D8:85:F3:3E:3A:D3:A8:4A:B6:33:88:55:1B:D4:DF:5C:91:53
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691f::/48
Signature Algorithm: sha256WithRSAEncryption
94:d8:39:61:0a:f0:3b:91:31:3f:01:9f:e5:8b:83:f1:f4:f9:
f1:53:fc:14:92:31:d8:fe:d3:35:41:fd:63:e8:a5:7c:51:b6:
7a:60:68:aa:57:73:6f:3f:36:6d:f2:f4:08:ea:57:88:2c:55:
93:ad:ec:31:24:02:53:98:26:99:f8:b6:e0:b1:8b:55:1a:be:
d4:dc:f0:14:df:66:59:27:d7:91:ab:f7:53:e0:cb:82:bf:b9:
2b:0b:80:22:1c:cf:7d:65:12:db:6f:89:1e:de:7a:0f:55:8f:
ae:5c:c2:dc:a9:7f:4a:58:f6:20:52:d0:6b:8d:c7:df:83:d0:
78:3c:5a:42:7e:ec:92:cf:73:10:3f:7d:0d:1c:40:84:7b:59:
41:f6:01:84:c7:76:6a:0a:70:c0:c9:f9:3d:89:02:5c:e1:95:
b0:68:ca:02:de:f3:94:47:bf:3f:f3:9b:33:30:98:ae:48:61:
66:4f:08:73:b7:75:96:69:8d:5f:86:63:9c:c5:c6:5f:06:ba:
b3:22:ae:99:0f:47:74:65:64:8c:63:1f:39:21:cb:b4:da:83:
54:a7:1e:d3:cb:2f:56:20:3e:65:ec:b4:97:f3:fc:d5:54:ab:
c6:e6:89:51:f0:df:56:51:0f:80:b8:25:6e:12:e5:fa:68:97:
a4:b8:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org