Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
File: AS41255.roa (raw, json)
Hash identifier: DpIxHpHb3sWHcyUaDfpZgOF11+iqG6SiXINI02RVymc=
Subject key identifier: 79:A4:86:53:16:1B:8B:9C:E5:7B:54:91:55:8F:F9:F6:B1:64:02:DA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 119C13B3C87542BD0A61BC55F07B9993730B4ECC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 41255
IP address blocks: 2a0f:9400:8016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9c:13:b3:c8:75:42:bd:0a:61:bc:55:f0:7b:99:93:73:0b:4e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=79A48653161B8B9CE57B5491558FF9F6B16402DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:17:99:a9:ae:7f:95:82:33:04:ef:ad:7e:
10:34:be:76:a4:6d:e2:b6:22:d1:40:78:59:2d:c4:
d6:14:52:dc:bc:f9:ae:42:43:18:46:9f:d4:d8:90:
62:de:f2:b3:6f:5f:52:77:40:3c:71:74:95:27:0d:
5e:10:a9:99:a7:88:65:60:cf:17:6a:85:1d:b7:40:
e2:bc:90:2a:17:e4:3b:1c:e7:75:0b:0e:9c:6e:73:
48:c0:60:d4:a6:1c:51:fb:76:12:09:44:2f:4e:ff:
70:1b:28:83:39:84:7c:87:a9:62:33:6f:71:9a:1f:
a4:ec:d0:fb:1b:a2:fc:2a:38:ef:36:e2:d8:62:b6:
93:13:0d:53:6f:ee:aa:10:61:2e:62:51:3b:9d:0a:
6c:e9:89:23:78:98:83:e7:3f:d5:9a:5f:d6:79:e7:
0a:be:fb:b4:40:55:b4:82:43:6c:b4:5f:43:ea:7c:
e0:85:38:43:71:34:89:1f:1f:8b:e3:66:fe:e4:a6:
27:24:5b:04:c0:de:ae:57:ca:92:22:6b:58:7f:7c:
d8:ac:1c:45:fe:01:b9:75:29:e5:ef:02:ba:d7:1d:
86:52:12:e7:7f:c9:2e:25:53:23:93:e4:57:f0:ff:
f5:f4:5c:82:57:86:42:b4:15:cf:83:17:b8:98:5e:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:86:53:16:1B:8B:9C:E5:7B:54:91:55:8F:F9:F6:B1:64:02:DA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS41255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8016::/48
Signature Algorithm: sha256WithRSAEncryption
29:b6:a8:dd:42:ef:6d:e5:fc:32:af:f6:3a:f0:d3:a8:e4:7e:
1b:c6:38:5c:a1:29:c4:5f:24:37:79:12:9b:13:f7:f0:ef:02:
16:72:14:45:68:e3:e5:89:d1:ac:34:fd:d2:99:8c:db:79:80:
c1:83:9d:97:be:bf:a1:57:51:c9:c2:97:6a:be:3b:5e:7a:03:
b7:53:6d:61:35:8d:8b:93:95:c5:27:69:e9:85:1b:a4:d1:8a:
c1:cc:8b:9c:07:aa:77:fc:94:c2:48:ac:9a:57:7b:e4:81:15:
58:c2:04:de:25:01:78:50:cf:84:ef:bb:68:07:fc:b0:bc:2f:
45:b7:4a:5c:9b:fd:77:5c:7b:41:e5:ae:1d:ea:5f:51:8c:e1:
1e:94:e0:d1:ac:24:2d:e6:af:6b:c8:95:39:e4:f9:6f:f9:f2:
50:0a:b4:23:5e:69:8d:b4:67:88:9c:e0:da:0b:9a:a1:a7:2c:
2c:3e:9e:ec:12:3c:aa:28:8d:8a:f7:83:b4:f4:81:af:6c:cb:
8e:0b:53:2d:59:35:e6:6a:e9:11:37:6a:a9:fa:7e:72:0c:95:
fc:04:c4:26:b9:8d:d1:ed:94:d2:0b:ae:64:3a:d5:3d:2d:a2:
b0:96:ae:b6:b1:83:2e:0d:b8:ef:62:ea:23:78:b6:30:e4:7d:
e5:5b:7d:5f
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUEZwTs8h1Qr0KYbxV8HuZk3MLTswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MTUwMTU1MjdaFw0yNDA4MTMwMjAwMjdaMDMxMTAvBgNV
BAMTKDc5QTQ4NjUzMTYxQjhCOUNFNTdCNTQ5MTU1OEZGOUY2QjE2NDAyREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjBeZqa5/lYIzBO+tfhA0vnak
beK2ItFAeFktxNYUUty8+a5CQxhGn9TYkGLe8rNvX1J3QDxxdJUnDV4QqZmniGVg
zxdqhR23QOK8kCoX5Dsc53ULDpxuc0jAYNSmHFH7dhIJRC9O/3AbKIM5hHyHqWIz
b3GaH6Ts0PsbovwqOO824thitpMTDVNv7qoQYS5iUTudCmzpiSN4mIPnP9WaX9Z5
5wq++7RAVbSCQ2y0X0PqfOCFOENxNIkfH4vjZv7kpickWwTA3q5XypIia1h/fNis
HEX+Abl1KeXvArrXHYZSEud/yS4lUyOT5Ffw//X0XIJXhkK0Fc+DF7iYXkQZAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUeaSGUxYbi5zle1SRVY/59rFkAtowHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQxMjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAIAWMA0GCSqGSIb3DQEBCwUAA4IB
AQAptqjdQu9t5fwyr/Y68NOo5H4bxjhcoSnEXyQ3eRKbE/fw7wIWchRFaOPlidGs
NP3SmYzbeYDBg52Xvr+hV1HJwpdqvjteegO3U21hNY2Lk5XFJ2nphRuk0YrBzIuc
B6p3/JTCSKyaV3vkgRVYwgTeJQF4UM+E77toB/ywvC9Ft0pcm/13XHtB5a4d6l9R
jOEelODRrCQt5q9ryJU55Plv+fJQCrQjXmmNtGeInODaC5qhpywsPp7sEjyqKI2K
94O09IGvbMuOC1MtWTXmaukRN2qp+n5yDJX8BMQmuY3R7ZTSC65kOtU9LaKwlq62
sYMuDbjvYuojeLYw5H3lW31f
-----END CERTIFICATE-----
Generated at Sat May 4 03:48:10 2024 by rpki-client on console-ams.rpki-client.org