Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9050.roa
File: AS9050.roa (raw, json)
Hash identifier: UnesThgIqSf1nBY4QMvrzl7JvZemudhY7c3HXPh+gdk=
Subject key identifier: 86:55:DA:7C:8F:D0:3C:7C:5B:AF:EF:D6:5E:B0:AF:F1:0C:88:9A:00
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 077F86D6CD3D2B8A33D796112F309E3E814ECF9B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9050.roa
Signing time: Tue 25 Jul 2023 12:24:00 +0000
ROA not before: Tue 25 Jul 2023 12:19:00 +0000
ROA not after: Tue 23 Jul 2024 12:24:00 +0000
asID: 9050
IP address blocks: 2a0f:9400:7e11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7f:86:d6:cd:3d:2b:8a:33:d7:96:11:2f:30:9e:3e:81:4e:cf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 25 12:19:00 2023 GMT
Not After : Jul 23 12:24:00 2024 GMT
Subject: CN=8655DA7C8FD03C7C5BAFEFD65EB0AFF10C889A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:91:77:49:5f:a3:1a:e0:e6:94:83:73:3a:
08:92:a4:2e:42:36:fc:26:6c:35:98:2d:32:f1:5d:
82:ab:81:08:36:82:57:c5:22:16:bb:f9:eb:45:44:
be:98:73:29:e8:82:15:e5:45:e6:50:64:33:87:12:
2d:95:a0:dd:2e:9c:15:3c:47:2a:98:94:a6:a1:93:
e3:52:04:e3:46:c4:b0:53:1f:b5:e5:c7:dc:d0:30:
c5:5d:57:97:ba:32:c3:68:55:52:4e:28:d8:68:2e:
b5:8f:cd:2a:99:e3:62:4f:1f:30:26:9e:5f:62:85:
bc:7f:8c:02:03:63:6f:eb:39:9c:82:11:31:7b:86:
7a:2f:21:45:5d:1e:33:80:6f:10:d5:bf:2f:b2:7d:
7c:56:3e:67:59:ca:ad:b6:c5:00:ee:0c:b2:90:61:
73:3d:7f:ff:2c:8c:ed:3b:31:f1:19:15:c1:01:0b:
42:e6:8e:a8:2e:39:81:76:f6:e3:7a:19:9a:d1:d2:
fb:ca:89:72:13:68:e0:56:2e:0d:76:cc:a4:88:c9:
8c:17:1b:e7:e4:b6:ad:cc:c3:30:94:f2:c8:54:22:
6f:1a:3f:3d:f2:e0:25:e2:c4:55:23:5e:92:4f:0d:
33:9d:81:9d:62:ae:1a:d8:14:c3:fa:5a:ba:d0:09:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:DA:7C:8F:D0:3C:7C:5B:AF:EF:D6:5E:B0:AF:F1:0C:88:9A:00
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9050.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e11::/48
Signature Algorithm: sha256WithRSAEncryption
64:39:d9:32:93:9d:e2:68:1e:e1:29:e6:84:bc:05:74:99:a1:
b0:12:9f:b5:d8:e0:e4:9f:c6:7e:78:f2:50:98:a9:00:fc:79:
4d:da:14:a4:dd:c8:f6:d3:c1:ec:bf:53:2c:7b:3b:ba:82:b9:
80:ad:65:8c:89:67:75:2f:34:bd:bb:d3:79:d1:e8:10:01:87:
4a:2d:94:da:36:94:b7:f0:ea:69:d2:73:2c:67:8f:3a:45:c6:
d0:58:4f:68:84:58:d5:68:90:08:48:80:fc:d8:5f:f7:36:76:
7d:af:4a:ec:6d:3e:d3:e9:59:f8:2e:e7:5f:62:4c:7d:d5:48:
d9:79:e9:0e:a3:36:d9:4f:a9:48:20:fd:30:e6:fc:ad:56:63:
5f:ca:5b:33:9c:b2:82:d3:5d:ed:53:71:f6:18:3b:24:60:81:
89:d7:aa:97:e9:ad:49:ee:fb:68:b5:1f:24:ad:ef:af:2d:19:
d1:5b:d1:bd:bc:55:57:da:ab:94:6b:d4:de:a1:21:5c:88:47:
9b:5c:4a:33:cc:ba:6c:6d:d4:e3:e2:9f:d1:65:41:0b:75:93:
99:ce:ac:25:46:24:97:a5:22:c8:63:f2:23:ad:a2:c6:da:7b:
93:4b:b9:49:e5:40:55:ef:86:01:93:ea:f2:32:ac:b5:8f:84:
6e:82:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org