Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
File: AS398395.roa (raw, json)
Hash identifier: D7y7CW0mmQlppzijAgu9T2gg1pO9lkD4PcrtSdCAqWs=
Subject key identifier: 8A:7E:1B:75:8C:AA:B9:1A:09:CD:22:5D:E3:E5:1C:6A:CE:FB:2E:3C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3CD50C29E7820DD9CBFBFD48ABE03040E5353913
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
Signing time: Tue 15 Aug 2023 02:00:25 +0000
ROA not before: Tue 15 Aug 2023 01:55:25 +0000
ROA not after: Tue 13 Aug 2024 02:00:25 +0000
asID: 398395
IP address blocks: 2a0f:9400:610c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d5:0c:29:e7:82:0d:d9:cb:fb:fd:48:ab:e0:30:40:e5:35:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:25 2023 GMT
Not After : Aug 13 02:00:25 2024 GMT
Subject: CN=8A7E1B758CAAB91A09CD225DE3E51C6ACEFB2E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:ae:27:4d:a9:3e:5e:07:62:f8:1a:52:fc:
49:96:53:66:49:72:bf:aa:34:7e:08:3d:06:71:67:
9b:28:0a:43:53:59:98:b6:53:2a:d0:89:89:8d:6c:
28:6c:86:66:75:29:c7:71:b9:00:30:dd:8f:96:ad:
e4:4e:4e:7d:2e:6e:94:18:30:17:65:95:45:aa:c2:
1a:89:0d:a3:5f:0e:0a:5d:ef:cc:b3:37:f0:2c:cc:
13:6c:45:5a:f8:8e:cc:94:d9:07:7f:fe:39:bc:31:
4b:0b:6b:36:dc:f1:14:86:24:a4:37:8e:fc:ec:d7:
a5:a2:44:37:3f:a6:86:b1:0a:7d:77:72:50:3f:e9:
c6:f3:b1:4a:97:85:0e:25:e1:fc:93:07:95:02:f1:
0d:ef:1b:53:96:75:8f:ff:4b:d4:90:d4:13:7f:4f:
98:e0:f7:c2:d0:4a:72:82:62:b6:45:95:d2:b4:f2:
59:8c:95:cf:e2:1f:36:f9:8d:8c:59:2f:03:e0:8f:
75:a7:45:8b:10:b8:f9:f1:1c:1d:37:94:a9:2f:89:
a0:0a:17:9b:1e:ae:04:dc:0b:78:f4:7c:a0:6c:47:
f5:8f:36:16:d0:0b:cc:13:a5:66:19:e4:89:f9:c0:
b4:13:b2:20:fa:21:7d:cd:38:27:6b:34:c0:8c:e8:
5a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:1B:75:8C:AA:B9:1A:09:CD:22:5D:E3:E5:1C:6A:CE:FB:2E:3C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610c::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d8:e6:2c:5c:e3:8f:79:af:1e:7f:2b:5b:4d:76:ea:7b:71:
25:4b:3b:28:d8:c9:9c:5b:12:84:09:73:77:03:58:34:e9:f7:
c2:9f:dc:9d:cf:f3:54:b6:42:05:f9:55:ea:1b:50:fe:a2:e7:
3e:5e:20:27:53:08:fc:b1:4b:25:c8:25:48:29:34:ae:05:d9:
31:d0:cb:cb:40:81:85:01:94:b3:7e:18:24:71:88:95:e7:7a:
24:82:d8:ba:f1:bc:26:a1:31:ff:f2:aa:b2:47:dc:bf:b6:df:
68:78:f4:69:23:ab:6d:a5:3a:bd:b6:21:80:ec:31:ce:00:3d:
fb:f2:e1:c3:47:80:5c:29:2b:0f:f2:d4:8d:ca:ef:16:15:01:
57:0d:46:48:83:49:7c:56:db:62:91:0f:d3:94:66:b6:bd:4e:
6d:dc:15:1a:f1:9b:9c:a7:be:77:5e:0b:b9:ba:73:d0:62:ca:
7e:10:74:59:2d:f5:89:58:e6:c0:6b:ad:74:a7:d2:77:12:21:
80:29:f5:da:44:69:a1:08:bd:84:dd:cb:1a:29:9e:1d:bf:d3:
4c:3f:f1:16:9e:fb:4d:4e:46:f4:4e:1f:8b:eb:f1:09:0b:a4:
07:c7:e8:3f:fd:20:1a:06:57:60:04:7c:82:f8:f4:9b:d8:de:
93:5f:f6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 05:36:31 2024 by rpki-client on console-ams.rpki-client.org