Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
File: AS59893.roa (raw, json)
Hash identifier: G4HJ96+Hx9UEuEt0LyZz4jWKEbPaM9nZKiEzu8yJfF8=
Subject key identifier: F3:1C:9A:0E:AE:6E:C2:88:D1:48:93:04:1C:DF:68:B7:86:84:CD:F2
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4FF31B499748CA3C43FF8943DED49DFDB2A4B8B7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 59893
IP address blocks: 2a0f:9400:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f3:1b:49:97:48:ca:3c:43:ff:89:43:de:d4:9d:fd:b2:a4:b8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=F31C9A0EAE6EC288D14893041CDF68B78684CDF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:dd:80:eb:86:8f:61:0f:a6:9e:a3:08:36:
86:ae:aa:95:8d:20:f3:e2:6d:50:27:38:53:42:0d:
ee:f3:63:c2:c4:9f:ed:9e:57:29:7c:f0:06:7e:57:
1d:e6:ed:9d:81:a5:fb:d4:5b:10:c5:49:18:f1:63:
f5:d7:bd:7e:f0:40:c6:4a:9a:fc:6f:1e:bb:61:64:
68:c5:87:78:40:ff:d6:77:ce:63:9f:4d:40:18:6c:
40:23:92:52:04:3d:1e:33:8d:a8:4e:15:6a:2a:2a:
b0:42:6f:9b:79:08:8a:e0:78:4d:3d:ca:15:33:53:
f4:d2:0d:f8:19:01:dd:f3:48:89:fd:a9:ac:b8:94:
02:31:6a:26:61:b0:9b:e1:91:3d:af:d5:47:f5:76:
b7:0b:6a:e9:49:b9:e5:0d:0e:e7:31:54:ca:a7:fc:
68:68:00:ea:89:45:f4:2c:07:20:de:80:04:70:88:
68:d3:2e:b2:6c:30:55:0b:e5:03:81:72:77:aa:23:
ed:42:1f:14:0d:00:55:89:45:c1:b3:ba:03:ae:ba:
e1:15:50:4e:bf:ec:86:41:ff:42:fc:36:f6:30:1a:
b7:aa:1c:19:ba:ed:81:bb:59:91:9e:aa:6c:bc:fd:
2a:7b:70:02:a5:8f:9a:6c:85:bf:f1:08:dc:7a:6c:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1C:9A:0E:AE:6E:C2:88:D1:48:93:04:1C:DF:68:B7:86:84:CD:F2
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:100::/44
Signature Algorithm: sha256WithRSAEncryption
d9:ea:48:93:b9:6d:c9:d5:36:95:66:20:8d:d0:9a:d2:54:3c:
c3:62:5b:ff:76:8f:4d:04:77:ba:89:de:a8:75:f9:0c:e9:60:
96:53:9e:e5:35:cb:9c:e9:98:08:d5:ff:e0:4a:44:fe:a3:97:
e8:e3:b7:78:12:9a:bc:0e:96:a7:85:38:1a:26:c2:57:aa:a9:
d5:77:ab:10:58:49:10:2d:34:45:2f:b8:7d:4f:e7:f7:1b:5b:
23:a3:a3:c7:2a:1e:52:89:f0:b1:9e:a4:a7:27:a2:3b:8f:76:
ea:d9:40:11:32:15:90:de:5f:af:68:cf:7d:d6:6e:68:49:12:
56:76:9a:42:08:15:ad:5b:cc:69:24:4a:c9:88:e6:e1:40:26:
16:52:ec:db:34:4b:0a:92:1d:67:40:e7:52:88:57:a6:d9:68:
4f:b3:05:88:cb:1f:75:a6:ec:3a:02:a1:9a:e7:06:49:41:97:
0b:bc:64:5f:9e:eb:b7:40:53:0f:1a:a0:d0:90:b3:d9:17:50:
01:27:25:6f:d0:85:27:0f:db:92:cd:60:53:d2:85:c1:b2:58:
7e:17:e8:a6:e3:33:9a:0b:c0:d2:f2:93:7d:02:08:d0:99:fa:
0f:37:c6:82:1e:ac:ac:d1:97:a7:30:14:f7:4c:38:3c:2d:84:
6a:52:28:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:48:11 2024 by rpki-client on console-ams.rpki-client.org