Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
File: AS54133.roa (raw, json)
Hash identifier: 8HoO3f31rhO9JRYwrAbz75N0HBU4zOZsz2JshJAUucI=
Subject key identifier: 33:ED:B0:FA:A2:AC:B4:80:35:51:B1:43:06:09:1F:DE:C7:98:29:86
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 25AD7D3FA804D8A07873427DBCCBBA9A60737F5A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
Signing time: Wed 05 Jun 2024 01:11:28 +0000
ROA not before: Wed 05 Jun 2024 01:06:28 +0000
ROA not after: Wed 04 Jun 2025 01:11:28 +0000
asID: 54133
IP address blocks: 2a0f:9400:6104::/48 maxlen: 48
2a0f:9407::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ad:7d:3f:a8:04:d8:a0:78:73:42:7d:bc:cb:ba:9a:60:73:7f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 5 01:06:28 2024 GMT
Not After : Jun 4 01:11:28 2025 GMT
Subject: CN=33EDB0FAA2ACB4803551B14306091FDEC7982986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:2b:92:f4:ee:52:c3:62:64:37:66:0f:f9:
a9:dd:20:59:4d:90:d7:ba:64:3f:24:d1:e8:b3:19:
67:cd:43:63:6a:66:c9:23:7d:d4:40:e2:fd:01:57:
bf:5d:4d:5c:52:66:b5:41:a1:c2:60:fa:fe:36:c8:
5a:27:26:31:ee:e7:88:6e:53:ce:3e:96:85:eb:a8:
93:80:64:bc:25:ff:e5:67:9f:50:2f:c6:ed:50:65:
f3:7b:bd:aa:40:d6:99:3a:d9:58:ff:cd:42:b3:0b:
25:d7:14:8a:4d:d8:3d:94:e6:e2:65:30:3d:b4:17:
b9:95:0e:48:b9:cb:d6:45:c7:80:f7:cb:84:fe:80:
7b:3b:f7:80:ff:96:33:e9:4a:00:fd:24:c1:67:56:
0a:3f:ef:d7:3a:ce:6b:44:14:48:41:0e:94:f6:83:
87:fe:81:62:a1:16:d0:3e:fb:1c:1c:19:3d:20:7c:
b1:14:b2:c7:47:20:41:b2:10:a1:df:24:10:b7:41:
d1:6b:3c:c0:15:90:9c:c5:49:e2:28:9a:22:11:60:
58:2e:c7:9e:69:42:c5:31:0a:f9:f0:a3:cb:6a:85:
9e:16:74:f5:f7:93:b8:e7:f7:4c:57:32:d3:5a:09:
90:92:c6:e3:26:d1:1e:64:05:ff:4d:d3:c5:b8:fa:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:B0:FA:A2:AC:B4:80:35:51:B1:43:06:09:1F:DE:C7:98:29:86
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6104::/48
2a0f:9407::/32
Signature Algorithm: sha256WithRSAEncryption
75:6c:22:61:87:72:61:69:37:36:51:bb:8a:60:9a:ef:4a:9d:
88:d0:7e:cf:ed:b2:9a:f7:c2:03:d2:7d:3c:30:f4:49:04:53:
74:2d:32:62:72:cc:ff:08:64:13:1a:46:2f:6a:62:04:12:b0:
4e:98:54:0c:25:91:15:e5:8d:2d:0b:a3:f2:6c:60:cb:34:4f:
6b:03:ca:13:05:c5:f8:b6:77:65:9e:54:7f:93:ce:21:96:8c:
41:dd:16:d4:38:13:16:fd:ad:58:c7:fb:17:dd:59:84:8c:77:
49:1d:3a:e1:94:78:62:bc:3b:44:81:71:43:4d:02:59:24:4e:
0c:e5:79:b6:15:5d:9b:40:ac:9e:e5:4d:bb:9d:70:fb:e9:f8:
bb:20:13:94:bb:8f:1d:43:2b:14:a6:fd:32:f0:38:87:86:fc:
98:de:52:b3:d7:42:30:bf:d3:a5:2e:dd:b1:b4:ff:0c:b7:ed:
75:b9:7a:b7:af:0d:9f:5a:34:31:6a:92:42:9f:8f:71:93:75:
1c:72:51:65:8f:75:40:5c:0a:59:3d:2e:a1:95:8a:6b:0c:f4:
0d:d7:e8:21:9b:e9:05:24:50:cd:2a:0f:70:2b:85:e1:b5:9f:
97:12:7f:36:1d:b4:4d:6c:44:b0:5b:11:35:78:e5:f0:1a:10:
96:1e:41:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org