Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49581.roa
File: AS49581.roa (raw, json)
Hash identifier: jF08Hp1hUMLHjssAOOE2dy06wXu4Iw6eVhORsummnJo=
Subject key identifier: 5E:4D:8E:05:F0:E9:33:59:10:7A:1B:76:C8:B9:88:47:B0:25:6E:01
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 38A3CB6BC150BA9B69BBB489E676EB08BDB70A96
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49581.roa
Signing time: Mon 04 Sep 2023 18:18:52 +0000
ROA not before: Mon 04 Sep 2023 18:13:52 +0000
ROA not after: Mon 02 Sep 2024 18:18:52 +0000
asID: 49581
IP address blocks: 2a0f:9400:7389::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a3:cb:6b:c1:50:ba:9b:69:bb:b4:89:e6:76:eb:08:bd:b7:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 4 18:13:52 2023 GMT
Not After : Sep 2 18:18:52 2024 GMT
Subject: CN=5E4D8E05F0E93359107A1B76C8B98847B0256E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:52:ea:0e:23:a8:0d:8c:43:d4:70:c2:cc:
a8:d0:fe:af:97:72:11:ad:b0:da:74:ed:15:6a:69:
c1:78:6d:92:ae:d1:28:0c:c3:a7:76:28:e8:23:56:
6b:cf:4e:db:8c:14:25:92:17:7f:a7:29:38:73:2f:
b4:89:63:8e:ce:1c:cb:c7:39:70:84:5c:4d:84:c0:
23:4b:0c:a0:e7:7a:e3:b7:a2:b7:ad:2b:5b:cd:32:
95:77:d6:f0:96:f6:da:5e:48:b8:07:8e:d3:53:2f:
2d:c3:91:2d:47:c2:12:10:fc:08:c1:44:0a:3e:5d:
e8:61:48:29:d9:f8:c0:50:56:59:b9:8c:5d:8e:fe:
c3:cf:e4:14:9c:cf:92:ca:16:42:d6:cf:cf:78:27:
41:19:2d:68:25:b3:c0:07:31:0e:71:18:6a:40:9c:
20:db:5a:ab:c0:46:bb:0b:5e:7b:10:0a:70:7f:e1:
e2:b5:e9:40:ad:0d:fb:bb:9d:e4:7b:41:b5:b7:77:
2d:3e:b5:9a:e9:2e:27:1d:a4:88:6b:d5:b8:36:d7:
e6:e1:72:ee:82:c5:19:a9:17:d2:ce:9a:48:6c:da:
95:74:14:40:d3:3c:57:5b:c6:65:e3:70:1a:29:9a:
3c:c0:62:c7:09:c4:cf:e7:ac:26:93:a2:e9:fd:ce:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4D:8E:05:F0:E9:33:59:10:7A:1B:76:C8:B9:88:47:B0:25:6E:01
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS49581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7389::/48
Signature Algorithm: sha256WithRSAEncryption
51:c6:5b:69:ca:02:18:95:d9:3a:42:32:54:51:dc:63:51:00:
b0:05:30:6b:48:a0:44:09:4c:7b:39:58:26:bb:15:3f:b6:52:
dd:59:e5:35:1a:f6:23:67:cd:13:e3:30:5d:00:e4:9b:e8:20:
f1:e5:3e:65:0d:fa:f4:0f:86:e7:f8:ea:ee:b4:6e:82:1a:fd:
14:38:15:de:08:2c:3c:e6:c1:b6:53:37:99:79:cc:7f:c4:c2:
4f:7a:3c:8b:c6:de:20:0d:ac:15:19:72:ca:05:18:94:97:36:
58:b1:45:5b:dc:a7:f8:b2:43:e5:17:20:15:34:e8:7a:8c:3b:
d3:19:38:38:7c:41:a2:f9:9b:36:6c:f3:71:68:b8:7a:9d:c0:
14:a3:30:eb:2d:ae:07:b4:c9:34:ab:4b:f4:2e:09:44:fb:28:
43:05:64:cf:c0:87:7f:4d:78:df:12:e3:72:0d:ef:d6:9b:3c:
3b:4a:f9:5d:cb:7c:07:a8:cc:d0:5e:f6:0e:d8:b7:b7:93:e7:
32:3b:d7:11:72:20:14:81:7e:2e:5b:5b:07:3a:ce:62:4c:ee:
0b:34:f4:32:44:e7:be:dd:43:7e:0d:aa:17:d0:c7:c2:2b:18:
35:d8:18:cc:a6:c0:cc:6a:cb:f7:8a:21:03:56:52:b3:19:72:
93:92:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:11 2024 by rpki-client on console-ams.rpki-client.org