Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: L0XjrSVdmBQYQza+OtvFVpGG63LcoKyuhEFYnAiosBM=
Subject key identifier: F1:F1:2E:B4:E1:75:0F:25:B1:6B:F9:7F:8C:B4:91:43:FD:AB:EB:D9
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1BBB6B5EFC60B0B626437AF1572CC7EC0835250E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 61138
IP address blocks: 2a0f:9400:7350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 16:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bb:6b:5e:fc:60:b0:b6:26:43:7a:f1:57:2c:c7:ec:08:35:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=F1F12EB4E1750F25B16BF97F8CB49143FDABEBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:da:d1:e5:8b:01:f2:6f:87:f4:ed:8c:87:69:
69:ee:8e:8d:83:38:66:a9:ad:6f:19:13:93:4a:8f:
b2:bb:ef:ec:5d:99:c3:ab:39:82:60:8b:a9:45:56:
57:31:d9:45:49:26:f5:5b:f6:bf:34:dd:0b:e3:fa:
19:6f:16:e3:e4:13:4c:18:dc:bd:4b:6b:8c:76:d3:
99:bb:c6:55:46:ff:fa:2a:0d:87:4d:5a:6b:6e:0b:
f1:b6:02:4a:6c:66:68:2d:5b:ca:2b:44:f5:68:fb:
57:16:fc:6e:40:02:53:7a:7f:39:82:f9:16:24:a7:
73:94:16:73:cf:ac:2c:85:92:eb:6a:eb:f6:f6:9e:
4a:82:ad:51:11:61:93:80:4f:54:a1:e2:10:5f:02:
88:3d:b7:bc:bf:28:e1:c2:29:ff:88:db:42:ea:00:
0b:34:3c:05:ad:9a:9a:54:f6:03:6b:c0:6e:5f:eb:
02:2f:29:8c:89:b1:87:45:c4:ef:b6:f6:f3:d4:69:
36:ae:1a:d8:a3:27:95:87:6b:75:78:98:3e:92:96:
a3:31:b5:96:17:3f:b0:2b:f4:6a:a6:98:a0:48:cb:
66:af:9a:90:cf:46:21:eb:ec:a1:e5:a4:bb:17:76:
ac:bb:af:bb:5b:1b:be:3d:e0:be:32:39:3f:5e:25:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F1:2E:B4:E1:75:0F:25:B1:6B:F9:7F:8C:B4:91:43:FD:AB:EB:D9
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7350::/44
Signature Algorithm: sha256WithRSAEncryption
be:49:3e:33:10:3b:9d:f6:59:95:c2:f0:88:f8:95:c6:b0:d4:
c0:a5:92:d2:f8:10:81:58:9d:6e:ee:8d:c5:10:75:a3:72:bd:
d0:e2:3e:19:8b:8c:73:fc:23:26:02:55:3d:c4:ca:b1:ce:1b:
8f:5c:86:f4:50:5d:94:69:45:97:a8:65:20:ed:c6:df:26:29:
8e:75:9f:f8:e4:f0:e4:fd:eb:d9:4c:fb:23:88:c2:f2:0c:56:
43:d0:2a:16:a5:f5:4d:68:6c:3e:2b:1f:e1:7a:c1:a8:91:39:
ec:36:99:b6:b2:55:39:0d:d9:59:2b:bc:19:8c:1d:f6:65:ad:
1e:04:b3:74:f9:35:a5:df:2f:19:b5:86:48:f6:cc:0b:d9:3a:
34:3b:d8:9f:97:4c:6f:b2:13:71:08:78:b5:21:82:a8:89:9f:
52:e2:2e:d6:0c:e3:61:ef:a4:c0:89:b3:a2:fe:71:b7:e6:21:
2f:8e:c0:28:7e:30:01:30:0b:aa:98:52:10:47:6a:5f:0b:4a:
24:3f:14:bb:bd:cd:ae:7d:1e:f6:6e:39:2b:a0:7a:e5:38:56:
b7:93:c8:10:f7:3c:fe:d4:d8:94:00:3e:8f:79:88:37:c7:8a:
02:2d:9c:23:d7:49:7f:78:26:de:36:2c:1f:1f:19:2c:79:97:
c6:57:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:31 2024 by rpki-client on console-fra.rpki-client.org