Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
File: AS41255.roa (raw, json)
Hash identifier: ru8FdP5zkmJe3dLER9nmnh4/aDJI2E/r7Xirv6Bh+3g=
Subject key identifier: 5D:51:6C:59:96:ED:33:DE:69:ED:6F:44:BD:CC:9F:E1:43:36:31:E5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0989E927CA50BFFEBA581833F051B72352E766A2
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
Signing time: Tue 16 Jul 2024 02:42:24 +0000
ROA not before: Tue 16 Jul 2024 02:37:24 +0000
ROA not after: Tue 15 Jul 2025 02:42:24 +0000
asID: 41255
IP address blocks: 2a0f:9400:8016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:89:e9:27:ca:50:bf:fe:ba:58:18:33:f0:51:b7:23:52:e7:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:24 2024 GMT
Not After : Jul 15 02:42:24 2025 GMT
Subject: CN=5D516C5996ED33DE69ED6F44BDCC9FE1433631E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:05:f3:6c:d8:67:e7:48:82:9e:21:87:da:
28:5b:a9:0d:9d:ab:dc:d9:69:1f:0d:26:9c:cc:37:
10:18:02:80:8a:64:0d:53:45:7f:32:96:4d:d4:bc:
c7:d9:ab:cf:67:d4:3e:64:0f:53:5c:61:54:c6:1e:
3f:d4:03:4e:b6:e2:9a:d2:9b:b1:68:af:d2:29:95:
5c:f0:83:c5:22:3a:a7:3b:50:13:f4:cd:72:d5:6b:
46:e7:fa:2a:f6:2d:51:c6:7e:e3:3e:23:15:ef:51:
77:f2:47:ef:37:50:34:a5:ef:cf:f7:b5:29:e2:3b:
47:97:13:af:91:9a:ce:e6:64:ba:b0:fa:4a:fe:70:
3c:73:c3:48:61:d0:f7:35:9a:f0:03:f4:75:9b:6d:
c6:f4:b7:f2:5e:48:f0:e2:59:1c:88:d3:3c:3c:c1:
30:92:42:38:ae:c4:0b:f7:53:1e:ea:46:42:e3:38:
bb:06:98:f6:20:56:87:7d:df:a0:77:3d:c7:cc:90:
b5:07:45:75:f6:ac:c9:82:3d:3b:fe:09:f9:60:74:
32:ee:8a:bf:c6:32:12:80:8d:7f:82:34:4b:c8:32:
60:68:20:ab:1e:36:3d:2d:67:27:74:00:9f:18:b0:
1f:c6:8d:d0:b3:51:cd:b5:57:0f:90:2e:af:5e:19:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:51:6C:59:96:ED:33:DE:69:ED:6F:44:BD:CC:9F:E1:43:36:31:E5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8016::/48
Signature Algorithm: sha256WithRSAEncryption
27:54:0d:81:98:79:5a:44:f4:59:d7:f7:60:4c:9f:eb:fd:a9:
be:34:fb:ae:dc:d2:b5:3c:e0:ac:66:b5:28:40:c7:b3:d5:44:
7f:79:a5:6d:ca:d9:b1:52:b3:1e:d9:a4:b5:3f:43:7c:50:8e:
42:ad:6c:a0:c0:62:ad:b0:4a:ff:58:08:1a:a9:05:41:57:de:
8f:94:a3:9d:21:d5:16:c4:01:92:5c:4c:4c:0b:3d:59:25:b2:
bd:d4:07:58:f2:ab:47:9a:5f:df:e4:10:d2:89:ab:e8:6f:9b:
42:58:04:06:96:13:89:1f:82:b6:4e:0b:a8:ee:97:34:64:54:
a0:8b:ab:23:32:ac:6d:b1:27:24:0a:43:ac:60:4d:fa:2a:7f:
4c:cc:d2:8d:0c:60:77:06:0e:5b:ab:6e:9b:78:dc:e2:11:ee:
0e:e4:7e:e0:76:c6:65:9f:76:04:08:ce:51:f8:d7:40:d1:32:
6c:e4:d8:bf:53:f9:a4:ae:d2:0d:d8:f9:24:82:e1:ca:aa:0b:
b7:00:bd:58:d5:a1:79:7f:77:15:1d:b1:9c:c6:a2:95:f4:78:
f0:01:90:a7:b8:98:38:bc:5d:49:49:8e:97:65:98:0b:61:fd:
b3:c1:fa:11:c3:50:6e:ac:e3:f2:6d:29:7b:44:fb:75:b9:5b:
10:43:65:bd
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUCYnpJ8pQv/66WBgz8FG3I1LnZqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA3MTYwMjM3MjRaFw0yNTA3MTUwMjQyMjRaMDMxMTAvBgNV
BAMTKDVENTE2QzU5OTZFRDMzREU2OUVENkY0NEJEQ0M5RkUxNDMzNjMxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOgXzbNhn50iCniGH2ihbqQ2d
q9zZaR8NJpzMNxAYAoCKZA1TRX8ylk3UvMfZq89n1D5kD1NcYVTGHj/UA0624prS
m7For9IplVzwg8UiOqc7UBP0zXLVa0bn+ir2LVHGfuM+IxXvUXfyR+83UDSl78/3
tSniO0eXE6+Rms7mZLqw+kr+cDxzw0hh0Pc1mvAD9HWbbcb0t/JeSPDiWRyI0zw8
wTCSQjiuxAv3Ux7qRkLjOLsGmPYgVod936B3PcfMkLUHRXX2rMmCPTv+CflgdDLu
ir/GMhKAjX+CNEvIMmBoIKseNj0tZyd0AJ8YsB/GjdCzUc21Vw+QLq9eGagnAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUXVFsWZbtM95p7W9Evcyf4UM2MeUwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQxMjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAIAWMA0GCSqGSIb3DQEBCwUAA4IB
AQAnVA2BmHlaRPRZ1/dgTJ/r/am+NPuu3NK1POCsZrUoQMez1UR/eaVtytmxUrMe
2aS1P0N8UI5CrWygwGKtsEr/WAgaqQVBV96PlKOdIdUWxAGSXExMCz1ZJbK91AdY
8qtHml/f5BDSiavob5tCWAQGlhOJH4K2Tguo7pc0ZFSgi6sjMqxtsSckCkOsYE36
Kn9MzNKNDGB3Bg5bq26beNziEe4O5H7gdsZln3YECM5R+NdA0TJs5Ni/U/mkrtIN
2PkkguHKqgu3AL1Y1aF5f3cVHbGcxqKV9HjwAZCnuJg4vF1JSY6XZZgLYf2zwfoR
w1BurOPybSl7RPt1uVsQQ2W9
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:22 2024 by rpki-client on console-fra.rpki-client.org