Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: FikLTBYRLe10GpMm8YvX5odJ96Nf/f67Hnq5ikqMWOc=
Subject key identifier: E1:85:14:6E:2D:9C:54:8B:0B:5B:9C:32:26:84:5F:2A:C6:B9:58:88
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 53AC0C997B54E8BF5D832F0971BC923EE0E3DBF4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8075.roa
Signing time: Wed 22 Nov 2023 18:28:21 +0000
ROA not before: Wed 22 Nov 2023 18:23:21 +0000
ROA not after: Wed 20 Nov 2024 18:28:21 +0000
asID: 8075
IP address blocks: 2a0f:9400:6a01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ac:0c:99:7b:54:e8:bf:5d:83:2f:09:71:bc:92:3e:e0:e3:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 22 18:23:21 2023 GMT
Not After : Nov 20 18:28:21 2024 GMT
Subject: CN=E185146E2D9C548B0B5B9C3226845F2AC6B95888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:74:cb:0f:9e:9d:c2:ee:9c:52:07:79:54:
12:1f:57:ea:b5:14:db:ba:7d:e7:15:bf:d3:8f:6b:
5b:97:bc:98:d4:f1:da:78:ef:94:fe:7a:0f:12:56:
5f:74:15:a1:93:45:33:c0:f8:83:87:a6:74:b8:cd:
8d:c1:49:48:41:b0:a6:2d:fc:7c:e6:74:39:2c:1b:
a4:ba:3b:85:f1:04:75:3e:8f:89:15:f5:8a:a2:05:
9e:75:6f:e6:9d:1a:34:20:67:49:6d:51:c4:56:51:
76:34:9a:57:86:29:13:41:c0:53:75:16:4b:bc:ad:
e1:03:08:d9:02:bb:1f:db:e7:e7:dd:9d:5b:ca:1a:
84:05:65:6f:ee:3a:dc:53:24:10:d5:bf:57:96:34:
5b:97:f3:4f:87:0e:42:b8:f1:83:d8:f3:04:d1:bc:
1e:af:b5:a4:f7:41:d0:92:b3:33:dd:9b:17:0d:11:
13:63:39:c7:d3:da:87:27:d4:01:31:e9:9f:2c:2f:
54:23:77:e8:e3:92:4b:82:cf:92:01:5a:00:26:33:
e6:6b:4b:ac:84:f3:4b:a0:73:7d:00:3c:8d:cf:d2:
0a:7b:3e:77:7c:8e:6b:03:16:9e:9a:27:ad:e4:89:
19:d2:3f:84:26:97:24:65:7d:e4:15:73:4b:bb:c6:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:85:14:6E:2D:9C:54:8B:0B:5B:9C:32:26:84:5F:2A:C6:B9:58:88
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6a01::/48
Signature Algorithm: sha256WithRSAEncryption
29:d1:ae:23:e7:91:02:4b:8f:a3:b7:60:f4:24:fa:ae:7e:74:
14:8e:9c:cd:c6:ae:87:f0:b0:b0:b7:e0:03:42:a8:0a:f3:e1:
19:71:c5:31:93:53:c1:1e:14:2a:2e:bb:a8:2d:f9:da:74:87:
bf:6c:db:b3:8f:da:74:10:a6:35:89:56:34:03:79:80:88:b1:
a9:eb:1a:83:93:42:ab:b9:7e:fe:9e:d6:2c:06:ff:e2:7c:2c:
34:c3:2c:92:83:b7:3c:80:0c:73:f9:c6:56:fb:dd:02:6e:af:
9e:ed:ee:fd:ad:45:fd:7f:c2:a4:63:12:8f:98:06:45:be:7e:
9d:b5:3a:2b:27:99:1f:bc:a7:f8:83:d1:b7:c7:89:15:c2:3f:
87:9a:0c:b3:ed:aa:98:99:a3:9d:a0:8d:4c:e3:17:3d:71:e6:
26:a3:fe:40:a3:5b:a8:d9:df:21:1a:94:a9:d9:6b:c6:61:4e:
e0:a3:d4:f7:39:77:59:e9:e8:3d:19:22:66:aa:0c:05:8c:63:
05:86:46:eb:39:8b:92:83:7c:c2:9c:e8:32:73:4f:20:e0:b3:
01:62:06:b4:f4:30:c5:83:fb:ce:b3:09:94:a9:21:6e:bc:2e:
c0:2a:19:cb:9d:05:55:d4:6e:1d:49:66:26:d1:ed:37:e5:97:
f1:09:c3:ba
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUU6wMmXtU6L9dgy8JcbySPuDj2/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzExMjIxODIzMjFaFw0yNDExMjAxODI4MjFaMDMxMTAvBgNV
BAMTKEUxODUxNDZFMkQ5QzU0OEIwQjVCOUMzMjI2ODQ1RjJBQzZCOTU4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbyHTLD56dwu6cUgd5VBIfV+q1
FNu6fecVv9OPa1uXvJjU8dp475T+eg8SVl90FaGTRTPA+IOHpnS4zY3BSUhBsKYt
/HzmdDksG6S6O4XxBHU+j4kV9YqiBZ51b+adGjQgZ0ltUcRWUXY0mleGKRNBwFN1
Fku8reEDCNkCux/b5+fdnVvKGoQFZW/uOtxTJBDVv1eWNFuX80+HDkK48YPY8wTR
vB6vtaT3QdCSszPdmxcNERNjOcfT2ocn1AEx6Z8sL1Qjd+jjkkuCz5IBWgAmM+Zr
S6yE80ugc30API3P0gp7Pnd8jmsDFp6aJ63kiRnSP4QmlyRlfeQVc0u7xl9BAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQU4YUUbi2cVIsLW5wyJoRfKsa5WIgwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuG
PnJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzgwNzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD5QAagEwDQYJKoZIhvcNAQELBQADggEB
ACnRriPnkQJLj6O3YPQk+q5+dBSOnM3GrofwsLC34ANCqArz4RlxxTGTU8EeFCou
u6gt+dp0h79s27OP2nQQpjWJVjQDeYCIsanrGoOTQqu5fv6e1iwG/+J8LDTDLJKD
tzyADHP5xlb73QJur57t7v2tRf1/wqRjEo+YBkW+fp21OisnmR+8p/iD0bfHiRXC
P4eaDLPtqpiZo52gjUzjFz1x5iaj/kCjW6jZ3yEalKnZa8ZhTuCj1Pc5d1np6D0Z
ImaqDAWMYwWGRus5i5KDfMKc6DJzTyDgswFiBrT0MMWD+86zCZSpIW68LsAqGcud
BVXUbh1JZibR7Tfll/EJw7o=
-----END CERTIFICATE-----
Generated at Sat May 4 03:48:11 2024 by rpki-client on console-ams.rpki-client.org