Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61120.roa
File: AS61120.roa (raw, json)
Hash identifier: kq/WOFdHwT7Pcy24x16zjNTfwDdsfhUe3DA2Rwdd36M=
Subject key identifier: 36:82:2C:C8:9F:3C:45:15:FE:75:EF:BE:DE:A5:52:D2:A6:F6:E4:54
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 428630D14D59A5EE6779701A9BDBA5098DA4DF0B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61120.roa
Signing time: Tue 19 Mar 2024 07:13:47 +0000
ROA not before: Tue 19 Mar 2024 07:08:47 +0000
ROA not after: Tue 18 Mar 2025 07:13:47 +0000
asID: 61120
IP address blocks: 2a0f:9400:6102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:86:30:d1:4d:59:a5:ee:67:79:70:1a:9b:db:a5:09:8d:a4:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 19 07:08:47 2024 GMT
Not After : Mar 18 07:13:47 2025 GMT
Subject: CN=36822CC89F3C4515FE75EFBEDEA552D2A6F6E454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:e2:2d:53:64:17:1b:4d:a3:89:08:15:57:
3d:bf:57:b7:a5:17:18:76:37:fb:92:4c:4e:c4:ed:
9d:0a:b8:66:d5:a1:28:84:47:e7:2d:55:3a:b4:ef:
84:3c:18:4d:0b:23:62:4a:a5:20:bc:4e:c0:89:8f:
32:08:e3:9b:3e:be:82:70:12:ba:83:2f:05:90:6e:
72:28:a9:8c:00:86:0c:b2:ed:5c:96:ca:05:15:88:
8d:d2:4b:4d:9c:ce:43:c8:66:51:1e:69:20:87:0a:
71:dc:6a:ab:35:a3:d6:5c:6d:bb:39:67:e8:e2:54:
c4:66:d6:46:8f:fb:35:4d:17:24:76:21:89:5d:42:
32:f3:13:51:4b:c0:bb:9c:eb:f5:38:ab:09:1b:dc:
74:6a:07:27:c9:63:1b:8a:25:32:5d:3a:66:ca:d2:
b1:70:4f:86:58:a0:c8:7f:79:58:64:b0:46:81:e5:
5d:a1:27:fe:ee:6c:ac:9f:32:15:fb:10:16:f1:ad:
35:3b:c6:12:e2:fb:33:2d:72:d7:a6:ab:2d:ea:87:
e0:19:75:b6:24:2b:c2:58:cc:75:35:17:a4:91:9c:
55:f0:43:07:42:55:50:a1:06:df:c0:3f:37:97:74:
3b:ed:99:92:ae:11:a4:da:32:4a:50:1a:5a:58:34:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:2C:C8:9F:3C:45:15:FE:75:EF:BE:DE:A5:52:D2:A6:F6:E4:54
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6102::/48
Signature Algorithm: sha256WithRSAEncryption
aa:07:b7:2e:22:b0:e7:5b:90:6b:d7:bf:2b:3d:ba:b9:72:c1:
8c:6b:65:d4:66:44:43:b6:87:0b:32:d7:07:d9:46:08:5c:43:
bb:bf:2f:f7:ad:31:66:37:33:90:ab:e6:60:01:72:d2:ef:60:
37:26:ce:65:e4:c2:b8:12:d8:4f:16:e6:76:f0:98:78:64:aa:
ca:7b:29:13:06:dd:bd:2f:c6:ea:6c:af:29:c0:3d:22:d8:4f:
f4:8a:b5:47:6a:ca:47:83:18:fe:6e:cb:65:a1:23:e2:27:98:
b7:9c:0c:de:d7:ce:69:b3:87:a1:ab:22:33:44:d5:4a:2a:68:
99:65:e3:10:9d:52:9d:b4:0d:ef:cb:89:d7:0e:5d:d8:c4:c8:
84:c8:56:a3:f3:9e:0a:ae:9e:60:6f:99:f8:8f:fc:36:a3:57:
da:e1:e0:73:a6:04:f6:89:3d:fd:e6:71:7a:fd:bb:a1:8d:51:
ea:d2:45:d0:7c:ca:cd:7c:74:fc:ea:80:70:85:00:f1:2e:d7:
aa:f0:ba:7b:88:a3:bd:c0:b2:cb:58:6d:78:cf:e5:da:c6:ce:
35:85:04:98:11:62:3e:44:70:ce:0e:1a:9b:e6:2c:7e:f6:2a:
56:e6:83:71:1d:a5:dd:89:b0:b1:45:38:08:bb:66:9f:b9:b4:
3a:81:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org