Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: kD0y0eCEyz76ftsmHRs/UnfKokF+RzCN5svq1NYHAHw=
Subject key identifier: AF:99:47:93:8D:6B:74:FC:25:8D:D9:68:62:61:44:79:4E:54:19:6E
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0F6A63EF8B0B61E6238E952E80668CCC6D4DF4D8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
Signing time: Tue 16 Jul 2024 02:42:24 +0000
ROA not before: Tue 16 Jul 2024 02:37:24 +0000
ROA not after: Tue 15 Jul 2025 02:42:24 +0000
asID: 61138
IP address blocks: 2a0f:9400:7350::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6a:63:ef:8b:0b:61:e6:23:8e:95:2e:80:66:8c:cc:6d:4d:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:24 2024 GMT
Not After : Jul 15 02:42:24 2025 GMT
Subject: CN=AF9947938D6B74FC258DD968626144794E54196E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:db:8d:36:9d:fb:67:1e:81:8d:d9:60:ce:
79:cc:96:88:7a:a0:88:f2:0a:56:5b:65:b6:66:a0:
83:2d:eb:61:89:95:e0:19:22:df:9c:af:19:eb:cf:
50:6c:72:74:2b:ac:74:ff:a2:fb:e8:f4:f8:9c:9f:
0d:63:24:64:a4:fd:94:4c:1f:dc:04:97:04:6e:6b:
44:1b:46:25:5e:3c:b6:b5:d7:6f:b5:40:ed:8c:03:
1d:ab:f1:b5:2d:19:4f:70:f2:69:70:b3:7f:37:a5:
49:68:98:15:eb:03:6d:07:0a:ee:b4:50:4d:5b:77:
ad:4c:ba:a0:b2:bb:cf:d8:bd:9a:84:79:d7:6b:fa:
0b:e5:64:8c:9c:45:9c:59:b2:8e:65:fc:6e:a6:46:
52:26:70:4f:73:86:3d:73:46:6c:3d:ac:71:69:9c:
a0:3e:0c:25:63:79:eb:55:e2:ec:b4:81:2f:2f:49:
cb:f9:20:74:e5:fd:17:ee:16:e1:63:e4:83:b2:ec:
9d:93:c3:72:ec:6b:1c:7e:29:1e:83:3d:09:97:13:
38:3b:d8:62:fa:96:42:a7:a0:2f:a0:08:a1:15:b4:
b9:f3:c3:e3:0b:05:ac:63:a1:95:07:c5:c8:6a:44:
f8:4d:52:12:37:5e:2d:1c:2c:96:3a:ae:34:73:41:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:47:93:8D:6B:74:FC:25:8D:D9:68:62:61:44:79:4E:54:19:6E
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7350::/44
Signature Algorithm: sha256WithRSAEncryption
94:4e:7b:a1:30:88:d0:ca:28:09:fc:1a:cd:54:8c:14:74:93:
4e:ec:76:7b:ae:79:6e:8d:49:d0:54:a1:45:6e:30:f0:a4:4f:
0c:ba:27:a4:ab:41:61:41:09:27:85:23:e7:84:9a:db:22:66:
d9:cf:a1:4f:0f:1a:49:56:96:61:a7:6e:f0:dc:bb:f8:a9:1e:
01:bc:27:a4:7c:0a:1b:11:31:9e:bb:95:dc:3c:76:92:8c:61:
72:97:eb:e6:9c:8d:4f:56:c3:5a:06:7f:b9:40:31:7b:70:2c:
34:49:28:be:b2:f8:d8:9a:7f:76:c4:b4:dc:14:d0:a6:5c:16:
57:1c:a3:bd:65:3c:e4:ab:e8:07:37:02:3a:90:2b:2e:ce:64:
ba:35:bf:ac:92:ed:5b:78:7d:2f:5b:4d:9e:4e:ad:bc:d9:c2:
30:8b:52:77:bf:bb:8f:70:c2:ff:41:97:a3:fb:b7:c0:17:1b:
7e:bd:6b:c2:8a:db:5a:83:8b:8c:a8:52:c7:24:04:b2:83:17:
e4:58:b3:4d:d5:4c:b2:bc:d6:fa:d7:5f:1f:89:7a:84:a4:7e:
f4:73:ba:1b:f4:0b:14:ca:96:8b:95:53:54:c6:dd:20:56:1e:
19:11:d7:f1:39:b1:09:1a:23:dc:59:05:41:f9:9e:f7:53:b9:
29:80:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:05 2024 by rpki-client on console-ams.rpki-client.org