Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
File: AS48741.roa (raw, json)
Hash identifier: hTUCYGqbcR01joc2g1az8TvD7hhwuMap2B/28mhQoxU=
Subject key identifier: 0E:78:C4:49:6F:8C:6A:05:F7:33:0C:99:37:71:3A:A6:8B:98:54:EA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 183DBEA3743569E60F698BCA95A40E16F646D9E1
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
Signing time: Thu 28 Mar 2024 21:07:15 +0000
ROA not before: Thu 28 Mar 2024 21:02:15 +0000
ROA not after: Thu 27 Mar 2025 21:07:15 +0000
asID: 48741
IP address blocks: 2a0f:9400:6210::/48 maxlen: 48
2a0f:9400:6225::/48 maxlen: 48
2a0f:9400:6228::/48 maxlen: 48
2a0f:9400:6230::/47 maxlen: 48
2a0f:9400:6249::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:3d:be:a3:74:35:69:e6:0f:69:8b:ca:95:a4:0e:16:f6:46:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 28 21:02:15 2024 GMT
Not After : Mar 27 21:07:15 2025 GMT
Subject: CN=0E78C4496F8C6A05F7330C9937713AA68B9854EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:59:01:63:2c:b5:10:86:0c:40:28:ae:9e:
e1:27:89:ad:5c:36:c6:14:5a:dc:28:75:8b:ee:93:
0e:ff:5b:4f:32:80:78:b3:46:e8:e0:c1:76:11:74:
ef:e4:f5:0c:74:b6:50:f1:7b:43:40:3c:fc:02:b9:
d9:17:45:50:d8:0c:db:61:dd:8d:b4:03:55:d8:b6:
be:2e:eb:ba:3b:4e:2a:70:4f:2a:9b:c6:b6:c4:29:
ce:e5:d5:07:c1:8b:3d:0d:eb:ec:ff:a7:c5:08:6e:
2f:98:5b:bd:fb:da:68:9d:65:86:09:55:17:40:2b:
d5:1f:2a:96:ee:50:36:36:35:81:c3:df:2d:07:4d:
9a:88:19:53:05:fb:a6:18:ec:c4:0e:95:e1:0b:7e:
b5:b4:70:a3:4f:a2:e7:2c:ad:4f:eb:eb:f9:79:75:
b6:23:42:e5:c2:61:69:97:2c:36:9c:65:8a:9f:45:
09:e0:fb:9a:2e:77:fc:07:de:9a:38:73:4b:47:05:
03:85:a6:71:68:1b:18:00:1a:da:6f:3d:0d:47:29:
e3:b9:86:ff:f0:25:9b:df:48:6c:e1:63:5b:13:0d:
84:78:07:49:23:db:5d:d7:e0:cb:ac:18:29:fc:2d:
bc:13:cf:cc:91:d4:5e:ed:3b:ed:30:5e:3b:97:0a:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:C4:49:6F:8C:6A:05:F7:33:0C:99:37:71:3A:A6:8B:98:54:EA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6210::/48
2a0f:9400:6225::/48
2a0f:9400:6228::/48
2a0f:9400:6230::/47
2a0f:9400:6249::/48
Signature Algorithm: sha256WithRSAEncryption
6d:19:07:cd:35:66:27:75:4e:3c:21:66:8f:d7:ea:dd:8a:31:
38:db:7a:4e:d6:fd:53:73:c8:f9:d7:ef:39:c0:a4:94:77:2c:
2c:fd:03:dc:48:58:a8:fd:fd:1c:6f:32:b8:80:d2:67:8c:e2:
00:4d:4e:fe:cb:dd:48:87:26:d8:65:b9:4b:33:b6:0d:87:cc:
8e:bf:d2:81:00:44:bf:4c:1e:ed:1d:46:a7:b6:6e:ae:9d:11:
2c:f7:db:6e:c4:8c:25:27:52:fa:55:1d:d9:d5:f4:38:6f:18:
ed:d6:a7:8c:0f:9e:ed:29:e6:cc:df:64:57:f5:47:38:3a:cd:
54:d2:81:fc:ef:9f:99:31:94:88:32:5a:47:7d:e2:83:41:30:
63:5f:f4:de:96:45:93:c7:7d:5b:de:93:11:8c:53:be:3b:22:
2c:90:5f:fe:44:b9:96:a5:7f:b2:ab:30:1a:74:d5:4a:6a:35:
bc:f5:57:32:6d:6c:ba:a9:d4:f4:c4:30:aa:9d:b2:8c:d9:0a:
a3:d9:a7:48:43:a0:d5:66:be:cc:92:39:98:df:8f:19:2d:96:
5a:69:ad:92:51:eb:e4:2c:5d:72:ce:5b:7f:17:c7:e1:ae:67:
df:df:a1:a0:43:85:b8:0d:c6:a9:88:71:ed:6d:24:7c:fc:61:
c4:45:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:11 2024 by rpki-client on console-ams.rpki-client.org