Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
File: AS48024.roa (raw, json)
Hash identifier: f56aXY+pfvr1rO16qp3mevkt9iQMKItdWgDw18k+ulE=
Subject key identifier: 92:E4:6E:E1:3C:B1:5D:C0:EF:49:CD:31:BE:6F:3E:0F:63:0B:87:25
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2CBDDC82C101D5B68C1896C560274BFF682BF5C3
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
Signing time: Tue 16 Jul 2024 02:42:25 +0000
ROA not before: Tue 16 Jul 2024 02:37:25 +0000
ROA not after: Tue 15 Jul 2025 02:42:25 +0000
asID: 48024
IP address blocks: 2a0f:9400:6225::/48 maxlen: 48
2a0f:9400:6228::/48 maxlen: 48
2a0f:9400:6230::/48 maxlen: 48
2a0f:9400:6231::/48 maxlen: 48
2a0f:9400:6250::/48 maxlen: 48
2a0f:9400:6255::/48 maxlen: 48
2a0f:9400:62fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:bd:dc:82:c1:01:d5:b6:8c:18:96:c5:60:27:4b:ff:68:2b:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:25 2024 GMT
Not After : Jul 15 02:42:25 2025 GMT
Subject: CN=92E46EE13CB15DC0EF49CD31BE6F3E0F630B8725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:7b:da:89:51:22:f9:f6:dd:2a:94:04:15:
58:93:3d:75:a1:86:36:45:2f:e0:f3:ec:2d:df:46:
4d:86:66:4e:fa:a1:03:b4:93:2f:48:fc:44:8d:81:
f9:d1:f3:b8:af:e8:c2:69:95:69:7a:68:b9:a9:d5:
8a:f1:65:31:03:79:37:79:12:91:52:69:24:e1:68:
84:22:8a:0d:4f:86:c2:23:8e:58:c5:b5:46:c0:b9:
cf:a9:87:0f:a5:38:0a:b3:c8:00:93:a9:c6:3d:a1:
fe:ac:b8:e4:9d:1c:4c:38:d9:d9:03:ef:54:a6:47:
58:c9:9b:5b:3e:3f:e1:14:f2:de:21:f9:0f:6e:d1:
59:56:b0:43:da:5c:e3:2d:ba:48:f4:70:02:d1:10:
70:eb:62:cb:3a:0a:eb:0a:2a:f9:e5:dc:4f:a0:d9:
49:0f:11:ea:41:6f:b8:29:c9:6d:23:64:ef:68:76:
0f:79:b1:06:ca:b4:77:d2:c3:66:bc:b5:cd:df:7e:
66:c9:42:a9:a0:e9:dd:8f:bb:be:21:40:d5:1f:01:
96:a3:1f:81:9e:7e:79:cf:71:6f:3c:24:fb:f9:1b:
97:b4:30:45:2b:a8:5e:92:c1:b3:fa:e8:1e:5d:e9:
50:08:3d:32:a6:f4:be:e9:94:26:09:4b:75:07:46:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:6E:E1:3C:B1:5D:C0:EF:49:CD:31:BE:6F:3E:0F:63:0B:87:25
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6225::/48
2a0f:9400:6228::/48
2a0f:9400:6230::/47
2a0f:9400:6250::/48
2a0f:9400:6255::/48
2a0f:9400:62fb::/48
Signature Algorithm: sha256WithRSAEncryption
d6:05:ca:4b:80:eb:b6:11:07:28:54:39:84:e8:26:92:76:c8:
a8:74:80:9b:60:54:ab:56:b1:f8:18:b8:62:8c:2c:c2:88:d3:
0e:ab:aa:4c:7e:eb:de:08:22:d7:37:5a:fe:a8:5c:77:9f:c8:
84:5b:04:da:e0:7e:57:77:92:54:4a:f5:7e:df:8e:ae:f4:06:
1d:22:f0:45:ff:f7:c3:bb:62:ab:62:4b:bf:14:46:0a:cf:72:
8f:d6:c4:53:02:1a:b5:07:f3:70:79:39:42:14:db:91:65:9c:
82:78:c6:fb:46:a9:68:99:83:5e:a2:25:be:4c:e9:2d:4a:46:
bd:18:05:31:13:09:7d:7e:49:5b:1e:26:32:cd:2a:5c:62:eb:
4c:5c:d2:41:9f:93:1d:9e:94:97:02:d6:ce:00:6f:86:ff:f4:
82:0c:f9:7f:cf:e2:5e:ec:3e:77:f5:85:2f:08:39:cc:dd:fc:
eb:83:b0:9d:3a:12:2b:b9:4c:e4:77:bc:e0:fa:cd:63:32:6e:
f4:57:37:e8:0d:6d:e4:e0:bf:fc:03:60:ef:5b:a9:b7:19:5d:
e1:d1:26:dc:ec:f1:84:86:3c:48:9c:3c:46:ad:7f:a9:91:10:
85:7b:fe:b7:c3:ce:b0:45:6c:84:54:07:a8:c3:90:65:ce:53:
65:73:b6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:40 2025 by rpki-client