Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
File: AS44992.roa (raw, json)
Hash identifier: rvOToWcpWidk5b0ElmrfIRT3BTrRpRezowUX2A1CaEk=
Subject key identifier: 76:43:3F:9C:D2:5F:EA:A5:39:FA:C1:32:27:98:3E:40:08:FE:E5:A6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 50E3E43DDDD695F324BCEFBB56510E02B1C5C06B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
Signing time: Tue 15 Aug 2023 02:00:25 +0000
ROA not before: Tue 15 Aug 2023 01:55:25 +0000
ROA not after: Tue 13 Aug 2024 02:00:25 +0000
asID: 44992
IP address blocks: 2a0f:9400:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:e3:e4:3d:dd:d6:95:f3:24:bc:ef:bb:56:51:0e:02:b1:c5:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:25 2023 GMT
Not After : Aug 13 02:00:25 2024 GMT
Subject: CN=76433F9CD25FEAA539FAC13227983E4008FEE5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:8e:67:9f:87:f0:df:fc:e8:ae:56:3f:6e:
26:55:31:2a:f3:a4:f5:4b:c3:b0:1d:11:56:ee:db:
ca:50:ba:47:5a:73:59:a4:1c:be:ac:c6:6b:b9:ae:
90:d7:68:fb:49:87:ab:2a:e9:75:b0:6e:a2:ab:dc:
8e:e7:4a:88:33:de:67:c1:21:48:f1:e9:31:bf:bb:
31:c9:5c:b7:c7:49:d5:6f:19:40:2f:70:39:07:8e:
2e:23:eb:59:cd:0e:de:ad:ca:42:8c:f6:aa:57:3a:
69:f7:e8:6a:bf:29:28:ea:20:a3:70:f1:20:5a:2b:
0d:2c:3c:d0:2e:85:60:3c:51:57:ec:71:f2:0a:ed:
72:24:c6:46:77:f0:4f:f5:08:e4:a8:6b:3e:16:ac:
5a:a2:00:dc:a3:ed:6f:74:3b:93:f4:8a:37:1a:62:
11:57:16:a7:27:65:07:b0:70:1a:f7:3b:a8:8c:8c:
0e:8c:d5:2d:2b:72:d0:45:90:63:13:df:94:0f:31:
a3:40:07:db:fc:78:10:a7:8a:e0:0c:72:ba:4c:48:
d5:ec:25:28:7b:99:30:b3:b9:bd:2c:72:79:f3:e1:
40:1b:ea:34:c1:61:c4:95:7e:2d:0c:c2:7e:a8:04:
60:ee:26:09:f4:e2:37:ea:17:9f:14:70:22:87:ae:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:43:3F:9C:D2:5F:EA:A5:39:FA:C1:32:27:98:3E:40:08:FE:E5:A6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8005::/48
Signature Algorithm: sha256WithRSAEncryption
3d:86:ab:0e:f2:58:31:34:97:39:db:76:ea:48:f5:fa:36:8e:
25:c0:f6:e8:c6:4b:4d:c0:05:f0:bd:17:cb:6c:b8:d4:53:61:
5e:3d:c3:0c:fb:0c:9d:e7:7c:93:73:34:15:66:d1:cd:3a:0e:
13:e9:8e:00:98:d9:33:9f:ea:d6:34:ec:09:ff:cf:f1:96:54:
7a:25:d1:ef:68:6a:ac:c4:74:ee:e4:71:9b:0f:ed:97:2c:75:
08:a3:05:48:0e:e7:6e:b0:74:34:87:b6:bd:ea:28:f6:8a:da:
23:c2:68:7f:2b:07:af:a4:d1:e6:c6:5f:9b:c7:f7:4b:9b:85:
94:56:5f:4c:21:7e:20:f5:cd:e0:e9:d3:85:ca:7f:b7:e4:e8:
42:cf:fb:f0:00:79:34:f4:e0:7a:19:4e:17:c8:55:14:cd:df:
ca:6a:28:eb:20:3a:15:78:36:ce:47:b3:20:9c:56:fe:ee:9b:
c5:ca:d4:78:01:b3:86:57:1e:0e:11:59:3b:ef:7b:03:eb:0a:
63:3c:46:18:f4:1a:eb:cf:f3:45:74:17:ec:ef:63:7a:a8:08:
06:26:fb:01:a0:ec:5a:1c:0f:0f:ab:97:cc:c8:32:57:a8:5b:
99:2c:64:6d:92:05:06:4d:e7:6a:a7:77:12:45:9b:e1:18:d5:
57:4c:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org