Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
File: AS398395.roa (raw, json)
Hash identifier: 0KZWz/PhrX1UeejW6QTplZJ8KDNGwOec+o5tq3H1fKM=
Subject key identifier: CA:86:79:D6:4F:58:87:9E:DE:3A:1A:FE:BB:CB:16:37:A9:75:6C:23
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5AE842C763AA84307B0F34AC45102E1F2420C0B5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
Signing time: Tue 16 Jul 2024 02:42:22 +0000
ROA not before: Tue 16 Jul 2024 02:37:22 +0000
ROA not after: Tue 15 Jul 2025 02:42:22 +0000
asID: 398395
IP address blocks: 2a0f:9400:610c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e8:42:c7:63:aa:84:30:7b:0f:34:ac:45:10:2e:1f:24:20:c0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:22 2024 GMT
Not After : Jul 15 02:42:22 2025 GMT
Subject: CN=CA8679D64F58879EDE3A1AFEBBCB1637A9756C23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:38:88:58:ce:a6:16:a4:e3:48:61:61:35:
73:b1:f6:2b:be:b1:59:2a:69:ab:2c:fa:2c:c1:eb:
8a:7d:0b:1c:75:1a:38:2c:db:d1:70:5d:ec:1f:ad:
be:e3:b1:41:6f:20:6e:af:21:82:ba:ec:0c:4c:62:
2b:46:21:c5:29:26:aa:3b:a1:7e:11:3b:4b:3f:da:
fd:b9:08:63:2e:98:31:43:80:f7:04:7a:e4:25:c1:
f4:8a:22:2c:52:8f:81:22:f7:bb:29:da:37:88:c8:
ce:2b:51:2f:b9:70:56:84:c9:55:14:41:02:dc:13:
f3:fc:55:00:d6:fb:20:39:72:d3:1e:85:40:f2:6a:
3b:38:d5:04:46:f3:ca:5b:b0:e7:7e:7a:90:59:da:
8c:09:6c:9a:33:0f:6d:10:f5:a1:aa:8b:5f:c4:bc:
c3:c6:f6:90:76:36:db:dd:90:a6:e1:42:b9:7f:7d:
c4:f4:5e:2d:10:6e:93:63:c0:d2:99:ad:30:53:03:
35:c6:51:c1:db:4d:5f:c3:0f:c9:c8:2f:f0:0e:fb:
96:02:65:c0:ef:c7:4f:37:d0:33:a3:67:32:70:9e:
46:b1:2c:40:36:3a:17:0d:69:1e:36:8a:26:61:30:
39:5d:c6:75:d8:f2:06:ba:85:cf:be:7d:47:27:57:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:86:79:D6:4F:58:87:9E:DE:3A:1A:FE:BB:CB:16:37:A9:75:6C:23
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS398395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610c::/48
Signature Algorithm: sha256WithRSAEncryption
13:58:3c:e0:0b:52:a4:a6:c9:66:b2:d2:9e:96:e5:09:90:59:
ff:7e:c7:f2:e4:66:c4:3d:b3:5b:c1:58:6d:cc:85:03:0c:c8:
62:7a:0a:ef:33:33:e7:5a:9a:66:09:bc:7f:c2:39:b6:f7:be:
0e:ed:90:38:bc:ef:29:fc:a3:ad:e5:0e:5c:7e:67:2d:93:f1:
6a:0c:f2:cb:f9:69:dd:1d:2d:3f:bb:e2:67:7e:b8:d3:7c:b2:
9d:5b:00:03:4d:1e:f4:f0:52:37:7c:b0:34:ab:29:9b:38:ec:
0b:0d:e1:b8:1f:3a:d0:f7:53:de:b9:6d:5d:62:02:33:f7:74:
04:fb:f7:7a:c7:3c:d0:0c:ec:97:df:dc:90:ea:08:25:2a:66:
10:1c:44:df:8a:6d:ec:ce:e4:8a:95:69:2e:ea:78:3b:81:cf:
98:43:d5:3b:49:d7:e3:57:1c:d4:74:dd:63:d8:b6:dd:cd:76:
62:1a:5f:c6:ab:9f:db:5b:cb:b7:86:11:65:7c:4f:5e:ae:85:
9c:8c:09:ac:8d:c2:92:8c:d9:4e:11:d2:1a:94:d9:f9:0f:ea:
b2:4c:45:a4:f6:6a:06:78:6b:35:c9:da:23:98:26:5c:a3:23:
b8:88:63:7d:5f:59:d3:48:d0:1c:6e:e1:bc:ec:30:36:e6:ec:
d7:f7:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org