Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
File: AS54133.roa (raw, json)
Hash identifier: wVZn4SLLokhbvdiBQTWdm66An7ApR5960Bi+iwuiDCg=
Subject key identifier: F9:E2:16:74:73:10:64:66:A2:23:1F:3B:18:F4:33:C1:49:1B:4B:73
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0D0C4DDA73C5B460F7F9E66B0940C88741608B0A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
Signing time: Sat 27 Apr 2024 16:07:54 +0000
ROA not before: Sat 27 Apr 2024 16:02:54 +0000
ROA not after: Sat 26 Apr 2025 16:07:54 +0000
asID: 54133
IP address blocks: 2a0f:9407::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0c:4d:da:73:c5:b4:60:f7:f9:e6:6b:09:40:c8:87:41:60:8b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 27 16:02:54 2024 GMT
Not After : Apr 26 16:07:54 2025 GMT
Subject: CN=F9E2167473106466A2231F3B18F433C1491B4B73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:89:45:0e:ae:22:6b:3d:8a:ed:9a:3c:9b:
04:c3:dc:65:23:72:75:30:07:2c:78:33:85:8c:3f:
a5:e8:d5:2e:97:49:67:c6:0b:67:67:db:e6:b9:26:
d7:a2:8b:2d:89:72:9a:8e:e8:a8:62:b8:48:fa:fa:
81:67:ee:72:2c:f2:d9:e4:e6:a4:a8:d3:34:f9:9e:
95:b6:a1:8a:3b:ca:38:f3:05:c6:c2:35:9d:4c:00:
29:8d:8b:d9:6e:81:dd:c6:3a:3b:6c:ef:9c:3e:8f:
77:70:32:29:3a:ad:39:12:02:c6:0d:34:ac:e1:a6:
ee:bb:9c:77:ed:72:af:c4:6d:88:88:d9:1b:02:12:
af:0b:74:7f:21:44:f0:62:e7:13:56:f3:c8:f5:41:
df:f7:b8:25:b6:cb:37:76:7a:90:5d:20:14:ca:d3:
39:63:89:9d:34:72:76:0d:02:73:a5:bd:0f:35:6a:
1a:ed:fa:47:19:36:39:82:81:cf:ca:ca:07:4e:2f:
94:3f:44:c5:20:08:dd:98:90:de:21:14:66:d4:8b:
ed:6e:1a:29:2f:bb:04:8e:09:d0:d2:96:04:d1:0d:
4c:4c:99:0c:8f:7f:dd:9b:06:9e:c9:86:85:a3:1c:
d7:d3:2c:5d:88:a9:5a:a8:e2:2a:36:c1:37:89:a8:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:16:74:73:10:64:66:A2:23:1F:3B:18:F4:33:C1:49:1B:4B:73
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9407::/32
Signature Algorithm: sha256WithRSAEncryption
3b:ca:1c:c8:e7:41:b8:3a:e8:aa:18:0a:60:84:4e:29:b3:ec:
b6:75:8e:f4:42:34:62:4b:5d:d1:37:04:0c:f8:b0:88:57:e2:
61:30:91:6a:58:f0:22:18:20:7a:34:79:e6:01:c8:52:66:18:
f5:0e:2d:24:e3:7f:5d:90:d5:d3:cb:89:e0:75:20:d4:95:3b:
f0:67:8c:10:8a:5d:81:41:6d:3d:f8:09:fb:5f:da:d5:cc:26:
1a:9b:cf:38:dd:ca:bf:0a:e2:6a:ce:79:b7:b3:8a:5f:9d:c4:
1f:cc:d7:cf:3c:b6:03:14:2f:7c:8f:b6:f2:98:8d:52:e0:2d:
1f:ea:75:c4:76:14:c4:80:60:41:83:c6:1a:04:de:71:7a:c2:
0d:6a:28:89:33:de:71:6f:a3:22:43:3d:ee:1e:7b:1d:6e:39:
5a:e4:c2:e5:c5:64:9e:c7:ac:af:72:9d:cf:6b:89:5d:cf:15:
ba:7e:a7:12:3e:3f:e3:af:63:f3:d7:65:25:6f:18:15:1b:04:
2a:27:45:66:4e:05:23:33:c2:2c:0a:27:f3:fe:d3:ac:ff:64:
9c:57:36:f2:9b:ed:77:ac:56:fc:6a:35:f2:5c:ff:16:90:7b:
c9:ad:b6:a9:a8:b9:42:c3:9f:5f:02:c6:a8:8d:40:e4:ec:2d:
06:cc:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:28:14 2024 by rpki-client on console-ams.rpki-client.org