Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
File: AS48024.roa (raw, json)
Hash identifier: ihbx8GkC3ZBWlq5k922ruQPRHvgkMJ2LQn5eUqCVgNs=
Subject key identifier: 54:22:E1:F7:EF:11:B3:D8:FC:13:8F:A0:AE:70:E1:95:BA:80:9A:6A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4EE3D7AA283297C0B58B3E0DBB67D9A2B2F64CFF
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
Signing time: Tue 15 Aug 2023 02:00:26 +0000
ROA not before: Tue 15 Aug 2023 01:55:26 +0000
ROA not after: Tue 13 Aug 2024 02:00:26 +0000
asID: 48024
IP address blocks: 2a0f:9400:6225::/48 maxlen: 48
2a0f:9400:6228::/48 maxlen: 48
2a0f:9400:6230::/48 maxlen: 48
2a0f:9400:6231::/48 maxlen: 48
2a0f:9400:6250::/48 maxlen: 48
2a0f:9400:6255::/48 maxlen: 48
2a0f:9400:62fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e3:d7:aa:28:32:97:c0:b5:8b:3e:0d:bb:67:d9:a2:b2:f6:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:26 2023 GMT
Not After : Aug 13 02:00:26 2024 GMT
Subject: CN=5422E1F7EF11B3D8FC138FA0AE70E195BA809A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:a4:87:76:33:0d:fa:e4:88:1b:6f:aa:b2:
cb:6a:11:fd:6b:08:68:82:b5:62:58:69:80:5b:d2:
18:2c:bd:c8:c6:68:2a:c3:87:92:3a:40:bc:6d:07:
a8:25:c3:91:14:c6:3a:b5:1b:82:ce:e7:2a:87:7e:
90:47:97:a1:4f:1f:49:7c:e5:1c:b6:e1:7e:b2:79:
49:d2:37:93:4c:a7:83:ee:ef:2c:3c:f1:96:68:21:
ac:1e:ee:75:e5:90:d1:fa:b9:a4:cc:d7:da:d6:dd:
b4:af:b5:43:e6:90:df:84:0b:32:b8:f5:f1:91:a6:
ce:e0:ce:4a:28:b7:34:94:96:f5:55:d8:2e:42:e3:
b2:01:f7:78:bb:80:2b:79:f8:b2:60:c6:5f:f7:13:
04:e8:46:5b:89:66:85:dd:7b:37:f3:f4:da:b9:a5:
78:c8:c5:ee:84:93:1e:be:76:46:d3:fc:cf:bc:ac:
a4:d2:8e:03:98:a4:85:24:5e:0e:59:a9:85:20:b8:
6a:35:a5:bc:12:ab:39:0c:69:2a:70:bc:c5:44:06:
04:ba:15:f3:df:d9:d0:02:00:bf:65:66:36:6b:49:
8f:8b:5a:08:af:14:87:5c:93:f1:d8:50:46:d1:36:
7b:16:a5:5a:09:19:bd:a7:c6:11:3d:20:95:95:da:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:E1:F7:EF:11:B3:D8:FC:13:8F:A0:AE:70:E1:95:BA:80:9A:6A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6225::/48
2a0f:9400:6228::/48
2a0f:9400:6230::/47
2a0f:9400:6250::/48
2a0f:9400:6255::/48
2a0f:9400:62fb::/48
Signature Algorithm: sha256WithRSAEncryption
32:00:58:03:9b:4a:65:b6:7d:70:bb:fd:96:82:2d:12:b5:f7:
31:53:e2:12:4d:32:cf:b1:e3:37:76:77:cf:8c:36:5b:0c:c2:
66:fb:a9:f3:a0:ac:9b:cf:b0:e2:d2:e9:3f:5a:25:81:f3:96:
5a:7f:4c:0c:ef:68:31:9c:ab:ac:55:80:80:ab:fe:5c:71:af:
50:28:b7:1b:75:d9:a2:5e:d9:c2:29:50:bc:9a:a4:46:61:41:
db:0c:f9:2f:31:a8:41:cc:20:1a:d2:e2:3d:d4:b2:2e:57:a5:
e8:ba:e3:19:05:34:d0:78:e2:33:76:42:ac:a9:ed:e7:b7:e2:
a8:5f:db:cc:29:28:47:7f:21:2b:79:59:21:85:91:8c:d3:fc:
fa:f0:55:fd:f5:58:04:9c:49:a2:f0:79:15:27:a5:40:ca:89:
84:9e:e7:1b:1d:f2:ae:15:ba:ab:93:7d:b8:e6:6f:99:c3:0c:
99:d5:8c:f6:c5:af:9f:d6:b0:74:30:80:9b:1f:9b:6c:28:24:
97:88:35:fe:72:f8:3d:2f:2f:6e:62:fa:a2:6d:0c:01:6a:3d:
e1:a7:9e:c3:2c:49:dc:27:9f:bf:3b:b0:26:c1:df:cc:13:7e:
de:a9:b5:ef:16:5c:ac:57:72:17:ae:b8:a0:1a:3d:74:e6:c8:
47:8c:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org