Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
File: AS9833.roa (raw, json)
Hash identifier: qWbHAY4Anw1xaj0c2ABp/NB8byMfqQvPvXuleGYuV3s=
Subject key identifier: A0:A7:C9:B8:9E:1A:A2:A2:D1:23:3A:35:39:B5:71:EA:4D:B9:B8:62
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 56913FCF14818CC58E0AE88A0F51B2EC8F882D94
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
Signing time: Tue 16 Jul 2024 02:42:25 +0000
ROA not before: Tue 16 Jul 2024 02:37:25 +0000
ROA not after: Tue 15 Jul 2025 02:42:25 +0000
asID: 9833
IP address blocks: 2a0f:9400:7826::/47 maxlen: 47
2a0f:9400:7860::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:91:3f:cf:14:81:8c:c5:8e:0a:e8:8a:0f:51:b2:ec:8f:88:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 16 02:37:25 2024 GMT
Not After : Jul 15 02:42:25 2025 GMT
Subject: CN=A0A7C9B89E1AA2A2D1233A3539B571EA4DB9B862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:6c:4a:b5:84:52:ed:eb:55:5c:96:b6:07:
c6:6e:35:b4:46:b2:f4:f0:17:b2:ec:0f:be:41:59:
63:61:66:08:47:d0:52:f1:62:1f:74:67:a0:e8:7a:
9f:fd:44:57:7f:d4:f3:10:b0:6a:70:41:a2:33:8f:
01:ec:8c:cc:0d:ae:42:08:3d:58:e9:2b:de:25:ea:
62:d1:31:9c:23:b9:c8:a0:e4:09:80:2e:17:a2:af:
d0:a6:a5:6c:08:6b:8d:9c:12:c8:13:b8:a0:5e:45:
24:c8:65:33:60:cc:a3:5f:44:07:fc:60:80:d1:61:
e9:51:0f:1d:a4:90:0b:f3:00:5c:c7:fe:31:3c:27:
81:b1:d5:3a:3c:80:db:bb:2a:86:80:c9:ba:54:0b:
99:99:79:76:eb:cf:34:21:67:c8:bb:e6:1a:a3:93:
a8:ca:21:44:4d:58:fa:ea:89:82:7f:b3:d3:b5:cf:
95:6e:58:42:d6:5a:27:e7:c7:4d:cd:14:da:57:6e:
bd:d1:c3:0a:39:0f:29:7f:41:aa:2f:01:a7:71:dc:
dc:e6:71:97:48:f6:b6:10:d2:2c:19:16:aa:6c:c9:
ad:a0:9f:56:b8:43:6d:9c:61:a1:ce:77:85:d7:d6:
a5:31:73:8b:77:a1:5d:97:4a:34:44:70:7a:55:1e:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A7:C9:B8:9E:1A:A2:A2:D1:23:3A:35:39:B5:71:EA:4D:B9:B8:62
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS9833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7826::/47
2a0f:9400:7860::/47
Signature Algorithm: sha256WithRSAEncryption
d7:8f:ad:50:e6:3d:52:f9:26:39:b3:ee:06:84:f7:ca:dc:19:
98:3d:5e:e9:62:cd:60:dc:41:6c:94:f7:ed:c6:71:a6:bb:39:
62:8e:5f:43:d7:73:45:13:af:4f:e6:13:4c:bd:39:6a:b4:a9:
3b:6e:37:5a:3a:9b:07:99:0a:6b:37:3a:9f:2d:2d:e3:17:ca:
92:67:ab:43:e6:56:e5:f8:cd:c8:12:74:cc:fd:8e:aa:59:e1:
3f:e7:66:d1:b8:41:4c:35:e3:c2:ba:06:57:d2:d3:48:f0:4d:
04:1c:76:98:16:67:aa:91:a0:f3:0d:70:6f:63:5b:cd:73:76:
4d:be:a9:bc:d3:84:ec:43:91:fb:a4:a3:70:b8:0e:d8:3c:ea:
2a:ce:3c:2b:13:a0:95:1f:c0:7e:76:99:20:15:81:e3:c7:fc:
81:fe:71:42:f3:f7:0d:9f:77:39:6b:e6:dd:58:e1:cf:78:99:
75:0b:bf:d6:2a:34:31:91:7e:6b:30:fd:05:0d:bf:ff:b2:e9:
8f:65:aa:00:0f:eb:c8:80:9d:32:b3:3a:2d:07:a8:30:65:5d:
6c:24:41:39:58:89:62:17:5e:74:45:36:49:09:d1:90:f1:2a:
85:70:1f:08:62:f7:16:ab:70:d4:c5:93:6a:84:62:0d:b9:3f:
2f:65:2c:4f
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUVpE/zxSBjMWOCuiKD1Gy7I+ILZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNDA3MTYwMjM3MjVaFw0yNTA3MTUwMjQyMjVaMDMxMTAvBgNV
BAMTKEEwQTdDOUI4OUUxQUEyQTJEMTIzM0EzNTM5QjU3MUVBNERCOUI4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLGxKtYRS7etVXJa2B8ZuNbRG
svTwF7LsD75BWWNhZghH0FLxYh90Z6Doep/9RFd/1PMQsGpwQaIzjwHsjMwNrkII
PVjpK94l6mLRMZwjucig5AmALheir9CmpWwIa42cEsgTuKBeRSTIZTNgzKNfRAf8
YIDRYelRDx2kkAvzAFzH/jE8J4Gx1To8gNu7KoaAybpUC5mZeXbrzzQhZ8i75hqj
k6jKIURNWPrqiYJ/s9O1z5VuWELWWifnx03NFNpXbr3Rwwo5Dyl/QaovAadx3Nzm
cZdI9rYQ0iwZFqpsya2gn1a4Q22cYaHOd4XX1qUxc4t3oV2XSjREcHpVHvlHAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUoKfJuJ4aoqLRIzo1ObVx6k25uGIwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBaBggrBgEFBQcBCwROMEwwSgYIKwYBBQUHMAuG
PnJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzk4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYB
BQUHAQcBAf8EHDAaMBgEAgACMBIDBwEqD5QAeCYDBwEqD5QAeGAwDQYJKoZIhvcN
AQELBQADggEBANePrVDmPVL5Jjmz7gaE98rcGZg9XulizWDcQWyU9+3Gcaa7OWKO
X0PXc0UTr0/mE0y9OWq0qTtuN1o6mweZCms3Op8tLeMXypJnq0PmVuX4zcgSdMz9
jqpZ4T/nZtG4QUw148K6BlfS00jwTQQcdpgWZ6qRoPMNcG9jW81zdk2+qbzThOxD
kfuko3C4Dtg86irOPCsToJUfwH52mSAVgePH/IH+cULz9w2fdzlr5t1Y4c94mXUL
v9YqNDGRfmsw/QUNv/+y6Y9lqgAP68iAnTKzOi0HqDBlXWwkQTlYiWIXXnRFNkkJ
0ZDxKoVwHwhi9xarcNTFk2qEYg25Py9lLE8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:42 2024 by rpki-client on console-ams.rpki-client.org