Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: HrAt3Xoudw+wbh9M4OiPfg4TV2KxfI2ld+cMGYwIRgc=
Subject key identifier: 6D:D2:89:68:92:8E:AC:71:AA:2A:F0:9B:E1:DE:9E:84:8B:85:7D:DC
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 5FDAD32F69F1AC27B9390725D319934F748E1C05
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time: Sat 25 Jan 2025 00:35:07 +0000
ROA not before: Sat 25 Jan 2025 00:30:07 +0000
ROA not after: Sat 24 Jan 2026 00:35:07 +0000
asID: 20473
IP address blocks: 2602:fed2:710e::/48 maxlen: 48
2602:fed2:710f::/48 maxlen: 48
2602:fed2:7110::/48 maxlen: 48
2602:fed2:719a::/48 maxlen: 48
2602:fed2:719e::/48 maxlen: 48
2602:fed2:730d::/48 maxlen: 48
2602:fed2:7316::/48 maxlen: 48
2602:fed2:731c::/48 maxlen: 48
2602:fed2:7e08::/48 maxlen: 48
2602:fed2:7e81::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:da:d3:2f:69:f1:ac:27:b9:39:07:25:d3:19:93:4f:74:8e:1c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jan 25 00:30:07 2025 GMT
Not After : Jan 24 00:35:07 2026 GMT
Subject: CN=6DD28968928EAC71AA2AF09BE1DE9E848B857DDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:9f:5c:de:54:01:d7:96:73:d9:3f:3d:05:
d7:31:d0:7e:70:89:d9:2e:13:b0:0b:ba:3a:c7:43:
91:8a:80:42:79:28:78:bd:83:17:ee:c3:93:c1:74:
f6:83:8c:81:15:2a:be:53:5d:0c:6d:bc:12:5e:77:
10:6a:76:10:91:da:41:12:c6:14:ca:f7:e4:d6:8b:
50:49:f6:74:f0:6c:c8:8b:c6:ac:83:1d:e5:ae:38:
fc:95:7f:ee:14:5d:41:ad:61:55:23:a0:35:a8:6c:
3e:cd:b5:85:80:16:3f:6e:a4:d2:30:e1:17:7e:c9:
8d:59:60:9a:aa:bb:79:71:ab:ef:a1:8a:d4:71:0c:
91:63:a8:4f:88:98:8c:98:8f:21:71:90:97:58:65:
38:82:bf:42:aa:8f:6d:5c:ad:32:28:e5:0f:f4:a4:
22:4e:1b:5c:1b:f6:f8:ed:28:14:a8:26:41:5d:09:
41:2e:00:e2:47:52:18:e2:58:b7:49:0a:ac:da:53:
4a:cf:00:5e:e6:3b:bd:c5:11:ea:60:86:a3:98:1f:
17:70:2e:99:95:c4:12:96:98:3d:b5:bd:04:46:02:
4b:9f:6e:7d:92:5f:a7:c7:6a:a6:db:b0:57:26:a3:
f5:33:a1:89:9a:42:3c:d2:5c:15:94:28:02:be:92:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D2:89:68:92:8E:AC:71:AA:2A:F0:9B:E1:DE:9E:84:8B:85:7D:DC
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:710e::-2602:fed2:7110:ffff:ffff:ffff:ffff:ffff
2602:fed2:719a::/48
2602:fed2:719e::/48
2602:fed2:730d::/48
2602:fed2:7316::/48
2602:fed2:731c::/48
2602:fed2:7e08::/48
2602:fed2:7e81::/48
Signature Algorithm: sha256WithRSAEncryption
40:37:05:f8:3d:13:08:59:62:5f:6f:46:69:b5:02:55:e1:0e:
2c:15:ed:c2:2d:e3:c6:53:df:cf:b5:f1:63:a2:6b:c4:e4:99:
a7:0a:43:ad:7e:e9:ce:9e:4a:5b:15:d9:46:b4:38:cf:c7:02:
a2:2b:2f:b4:b5:5f:76:c7:28:6a:59:c0:c9:6e:cb:f9:f5:30:
bd:20:e3:fd:e9:66:a8:11:a0:71:4f:08:0b:44:ae:8e:c5:20:
98:b1:a3:76:5b:bc:84:53:57:41:c7:64:24:6c:31:5c:98:7f:
05:ba:91:91:47:5d:2f:0d:45:f3:c8:e2:50:bc:0d:04:1b:6a:
ee:ff:13:1e:4a:91:fa:99:a5:68:a1:c1:73:1b:5e:55:66:d4:
7b:ae:aa:80:6b:8b:b0:0d:72:a2:66:ca:5a:9f:af:c8:08:18:
60:6b:9c:32:cd:a0:68:ad:29:7c:a9:57:ab:69:5a:0e:c7:d6:
c5:b0:7c:ca:d1:8f:bb:1b:e7:51:a5:5c:b3:a6:93:11:96:20:
55:77:e5:ed:25:0e:ba:c5:03:ee:f0:a3:60:35:82:8f:92:76:
4b:b4:4f:93:1e:86:19:64:85:ee:5d:ea:10:1a:b0:75:a7:e3:
71:7f:c0:3b:36:2a:4a:9d:a8:9c:07:b6:17:39:43:50:07:69:
b1:c1:b6:8b
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIUX9rTL2nxrCe5OQcl0xmTT3SOHAUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmQ3N2Y1NWVmZTNhOTNjNTNjYTNkYzhhNmY4Mzc0ZmU3
MGZlYzU1NjdkZDFlOGM4NTUwHhcNMjUwMTI1MDAzMDA3WhcNMjYwMTI0MDAzNTA3
WjAzMTEwLwYDVQQDEyg2REQyODk2ODkyOEVBQzcxQUEyQUYwOUJFMURFOUU4NDhC
ODU3RERDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wWfXN5UAdeW
c9k/PQXXMdB+cInZLhOwC7o6x0ORioBCeSh4vYMX7sOTwXT2g4yBFSq+U10MbbwS
XncQanYQkdpBEsYUyvfk1otQSfZ08GzIi8asgx3lrjj8lX/uFF1BrWFVI6A1qGw+
zbWFgBY/bqTSMOEXfsmNWWCaqrt5cavvoYrUcQyRY6hPiJiMmI8hcZCXWGU4gr9C
qo9tXK0yKOUP9KQiThtcG/b47SgUqCZBXQlBLgDiR1IY4li3SQqs2lNKzwBe5ju9
xRHqYIajmB8XcC6ZlcQSlpg9tb0ERgJLn259kl+nx2qm27BXJqP1M6GJmkI80lwV
lCgCvpKVUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFG3SiWiSjqxxqirwm+HenoSL
hX3cMB8GA1UdIwQYMBaAFMiTX9ylAoroIJ/sgq2K6M+3xud2MA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzAvQzg5MzVGRENBNTAyOEFFODIwOUZF
QzgyQUQ4QUU4Q0ZCN0M2RTc3Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYw
YzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZlNWQ5NjExLWZkMzMt
NDg4Yy05YWVjLWY0ZGYyYTI1MzUxZS9mZDc3ZjU1ZWZlM2E5M2M1M2NhM2RjOGE2
ZjgzNzRmZTcwZmVjNTU2N2RkMWU4Yzg1NS5jZXIwWwYIKwYBBQUHAQsETzBNMEsG
CCsGAQUFBzALhj9yc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29t
L3JlcG8vRlJDLUNBLzAvQVMyMDQ3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjBsBggrBgEFBQcBBwEB/wRdMFswWQQCAAIwUzASAwcBJgL+0nEOAwcAJgL+
0nEQAwcAJgL+0nGaAwcAJgL+0nGeAwcAJgL+0nMNAwcAJgL+0nMWAwcAJgL+0nMc
AwcAJgL+0n4IAwcAJgL+0n6BMA0GCSqGSIb3DQEBCwUAA4IBAQBANwX4PRMIWWJf
b0ZptQJV4Q4sFe3CLePGU9/PtfFjomvE5JmnCkOtfunOnkpbFdlGtDjPxwKiKy+0
tV92xyhqWcDJbsv59TC9IOP96WaoEaBxTwgLRK6OxSCYsaN2W7yEU1dBx2QkbDFc
mH8FupGRR10vDUXzyOJQvA0EG2ru/xMeSpH6maVoocFzG15VZtR7rqqAa4uwDXKi
Zspan6/ICBhga5wyzaBorSl8qVeraVoOx9bFsHzK0Y+7G+dRpVyzppMRliBVd+Xt
JQ66xQPu8KNgNYKPknZLtE+THoYZZIXuXeoQGrB1p+Nxf8A7NipKnaicB7YXOUNQ
B2mxwbaL
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:39 2025 by rpki-client