Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
File: AS9833.roa (raw, json)
Hash identifier: G+HXANzDWqpxm9y5IzeSA/1VCMlhM5mm1HgoCm+40/4=
Subject key identifier: 10:7C:9D:EB:60:12:50:4F:CF:5C:0D:C2:3E:66:5C:D6:5D:AF:8D:0C
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0655D4A523D137B596D76BE8A8BE2F5D53B2E50A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
Signing time: Tue 15 Aug 2023 02:00:27 +0000
ROA not before: Tue 15 Aug 2023 01:55:27 +0000
ROA not after: Tue 13 Aug 2024 02:00:27 +0000
asID: 9833
IP address blocks: 2a0f:9400:7826::/47 maxlen: 47
2a0f:9400:7860::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:55:d4:a5:23:d1:37:b5:96:d7:6b:e8:a8:be:2f:5d:53:b2:e5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 15 01:55:27 2023 GMT
Not After : Aug 13 02:00:27 2024 GMT
Subject: CN=107C9DEB6012504FCF5C0DC23E665CD65DAF8D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:d0:29:67:80:c0:b6:e1:eb:d0:48:4f:47:
3d:fb:fa:4f:1d:75:29:62:df:24:5d:95:a5:f4:ec:
1d:76:2c:51:12:07:87:dc:6a:9d:15:ac:30:5e:b5:
16:f8:05:a6:66:b6:7e:19:7e:98:a5:8c:20:43:da:
24:d5:22:b9:22:e9:de:53:bc:c8:5d:3c:be:1a:e8:
10:d1:85:c3:6d:27:ba:4d:50:b9:be:51:f2:c3:fc:
b5:5b:87:f3:a4:d5:d2:95:d2:69:bc:f7:08:78:cd:
29:71:a2:44:9f:ef:96:16:de:7b:74:f4:b1:57:1a:
98:3a:2d:90:ae:e6:1d:7e:f3:79:21:46:71:40:ac:
a9:d8:39:ae:be:0d:6c:7d:e9:cf:c1:fb:26:3b:2d:
48:f1:8f:15:5a:42:94:aa:11:ca:5b:79:7c:6b:31:
c1:ba:cd:e9:4a:e0:fa:dc:66:c6:37:33:fa:54:f9:
fe:d5:68:56:56:d9:6f:f2:2f:06:c3:32:74:4c:ad:
ba:8f:c3:3f:22:96:20:4f:2a:0a:a1:8e:ac:dd:e9:
31:f2:7c:e5:7e:10:ef:8d:2c:62:a8:2e:0a:75:db:
e2:bb:bb:12:a8:86:53:42:c0:a4:05:a0:11:7a:b3:
0a:18:18:64:10:fe:8f:9b:b2:8a:7c:a8:f2:2a:fb:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7C:9D:EB:60:12:50:4F:CF:5C:0D:C2:3E:66:5C:D6:5D:AF:8D:0C
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7826::/47
2a0f:9400:7860::/47
Signature Algorithm: sha256WithRSAEncryption
cc:89:be:05:2e:38:b0:2a:24:9e:49:e6:0a:c4:19:c3:ec:92:
08:cd:85:13:25:f8:15:a5:a6:73:74:ab:d5:c1:ea:b5:69:a0:
4a:87:80:ce:2b:b0:18:89:e2:b8:06:06:6d:22:57:45:4c:3d:
db:44:89:75:79:ff:f2:82:8b:e4:f6:74:bc:68:7d:1c:d8:11:
22:47:97:0c:33:9a:dc:65:02:c0:7a:2e:c0:fd:7f:bf:cc:a9:
32:4b:42:2e:d7:6a:dd:77:0f:20:3a:38:a0:7c:84:5d:a0:2d:
24:f7:bd:dd:c2:c1:28:a3:62:d5:9b:4a:95:6e:b0:cb:8e:e8:
d6:fa:eb:72:cd:62:0a:29:60:32:57:b9:74:35:75:25:21:cd:
c4:ff:c9:89:99:9c:b3:d7:97:6f:f9:1c:02:e2:9d:ad:e0:b7:
45:94:f8:89:b4:4b:f1:02:8e:28:97:5f:b9:19:0f:b0:c7:36:
0b:5f:3f:35:e9:64:2c:e4:f3:ef:28:83:c8:36:26:ae:25:34:
54:95:6b:89:2a:2d:ad:e1:fb:20:ba:fc:a1:bc:c1:94:ac:a6:
8e:3b:10:12:6b:de:91:3a:ba:09:a0:d2:14:e9:22:40:3e:5b:
9f:b9:42:a9:42:7a:45:c1:a4:f6:ec:ec:aa:d9:0a:2e:c4:bf:
ec:f5:5b:cd
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUBlXUpSPRN7WW12voqL4vXVOy5QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yMzA4MTUwMTU1MjdaFw0yNDA4MTMwMjAwMjdaMDMxMTAvBgNV
BAMTKDEwN0M5REVCNjAxMjUwNEZDRjVDMERDMjNFNjY1Q0Q2NURBRjhEMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNM9ApZ4DAtuHr0EhPRz37+k8d
dSli3yRdlaX07B12LFESB4fcap0VrDBetRb4BaZmtn4ZfpiljCBD2iTVIrki6d5T
vMhdPL4a6BDRhcNtJ7pNULm+UfLD/LVbh/Ok1dKV0mm89wh4zSlxokSf75YW3nt0
9LFXGpg6LZCu5h1+83khRnFArKnYOa6+DWx96c/B+yY7LUjxjxVaQpSqEcpbeXxr
McG6zelK4PrcZsY3M/pU+f7VaFZW2W/yLwbDMnRMrbqPwz8iliBPKgqhjqzd6THy
fOV+EO+NLGKoLgp12+K7uxKohlNCwKQFoBF6swoYGGQQ/o+bsop8qPIq+4+DAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUEHyd62ASUE/PXA3CPmZc1l2vjQwwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuG
PnJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzk4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYB
BQUHAQcBAf8EHDAaMBgEAgACMBIDBwEqD5QAeCYDBwEqD5QAeGAwDQYJKoZIhvcN
AQELBQADggEBAMyJvgUuOLAqJJ5J5grEGcPskgjNhRMl+BWlpnN0q9XB6rVpoEqH
gM4rsBiJ4rgGBm0iV0VMPdtEiXV5//KCi+T2dLxofRzYESJHlwwzmtxlAsB6LsD9
f7/MqTJLQi7Xat13DyA6OKB8hF2gLST3vd3CwSijYtWbSpVusMuO6Nb663LNYgop
YDJXuXQ1dSUhzcT/yYmZnLPXl2/5HALina3gt0WU+Im0S/ECjiiXX7kZD7DHNgtf
PzXpZCzk8+8og8g2Jq4lNFSVa4kqLa3h+yC6/KG8wZSspo47EBJr3pE6ugmg0hTp
IkA+W5+5QqlCekXBpPbs7KrZCi7Ev+z1W80=
-----END CERTIFICATE-----
Generated at Sat May 4 11:05:09 2024 by rpki-client on console-ams.rpki-client.org