Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
File: AS59893.roa (raw, json)
Hash identifier: UnnB1CHHZn17TbtQzdluIUQGRD2IHy0FGa6hV/bwGM4=
Subject key identifier: 2B:0C:C0:51:22:AF:F4:02:FC:6C:40:3E:24:85:3B:60:25:1C:25:AD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 38BD870D7E92A7986B0C2010861CC6697C7A9154
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
Signing time: Tue 16 Jul 2024 02:42:24 +0000
ROA not before: Tue 16 Jul 2024 02:37:24 +0000
ROA not after: Tue 15 Jul 2025 02:42:24 +0000
asID: 59893
IP address blocks: 2a0f:9400:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:bd:87:0d:7e:92:a7:98:6b:0c:20:10:86:1c:c6:69:7c:7a:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:24 2024 GMT
Not After : Jul 15 02:42:24 2025 GMT
Subject: CN=2B0CC05122AFF402FC6C403E24853B60251C25AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:d4:d5:f1:06:7e:7d:9d:b3:b4:bc:65:5a:
2b:4b:47:a9:92:29:a4:2e:77:7e:b0:6b:87:e5:85:
a8:8c:bb:47:00:02:98:a2:3a:89:d1:b5:e5:1c:7d:
10:e8:7f:16:35:e1:5d:48:5c:28:23:58:06:bb:9f:
0f:62:14:18:65:a9:db:30:e7:aa:55:3d:2e:22:97:
0e:9c:be:c7:e2:4e:16:ed:79:19:ff:fa:6e:d5:e7:
8a:2d:34:72:88:b6:fb:8f:fd:f0:2f:5e:16:5a:d2:
4e:84:f1:95:ac:68:0c:e7:b7:9e:9c:02:de:65:e4:
34:7e:6d:f7:49:03:9c:d6:f5:41:22:4e:e0:a9:64:
51:79:98:7a:d1:60:8c:d0:53:6c:61:f0:0a:01:54:
5a:38:ca:b4:9b:4e:3d:8c:01:b1:03:09:0c:ab:99:
dd:63:24:9d:84:e2:8c:51:2d:8d:42:08:27:16:d9:
ab:c6:63:1f:34:01:df:af:0f:c6:53:b0:45:f5:b2:
b3:8a:65:9a:2d:5e:f2:06:37:78:c1:10:eb:85:50:
e5:5a:02:f2:cd:82:f2:46:6a:59:e7:cc:f8:fe:b0:
f2:50:eb:66:99:fc:f6:9c:1b:d1:e5:25:53:7e:ed:
be:9f:de:0b:bd:8a:a0:bd:3d:cc:62:1d:9f:05:9a:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:C0:51:22:AF:F4:02:FC:6C:40:3E:24:85:3B:60:25:1C:25:AD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS59893.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:100::/44
Signature Algorithm: sha256WithRSAEncryption
94:5f:2b:95:6a:0e:9b:a1:a9:2f:de:c0:42:ff:3f:35:32:42:
f5:99:e9:be:5d:a1:4c:ba:9c:b8:ea:ca:ff:74:0f:ed:ab:01:
1a:ea:7a:4b:a6:31:9d:0b:eb:54:97:59:02:53:ae:4d:e1:71:
8d:9e:3c:33:f5:42:5c:fa:16:c3:f5:f2:0f:f3:9e:12:d6:2d:
84:e4:15:6e:83:89:f3:c4:53:0a:02:9d:a0:49:17:5e:0a:78:
0f:8b:e8:dc:58:d0:b9:6c:ba:b1:10:34:5d:6a:72:5c:63:e1:
1e:c8:4f:d3:46:26:a3:f5:fd:56:25:5f:f2:c2:23:88:f2:8e:
a9:4b:e8:05:e6:49:4c:85:f3:1a:ac:da:2a:45:10:ad:d8:85:
bc:fa:ce:f2:97:55:8f:c7:af:4d:3e:ad:70:fc:21:5d:aa:7f:
bb:cf:9f:43:38:aa:d1:eb:51:27:28:b2:b4:ab:e1:2a:f3:e3:
20:50:7d:27:4a:d4:3b:22:43:e2:e8:59:e5:10:5f:ca:b4:e8:
40:53:d8:24:25:5e:a6:d4:a5:13:bb:f3:df:1c:fb:a8:cc:e0:
01:d8:d5:ca:50:fb:1e:12:d4:6c:75:39:e0:8e:ba:ca:00:92:
20:35:6d:80:0a:4d:e2:9e:77:95:0d:b7:84:68:db:c6:8f:fb:
77:34:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org