Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
File: AS213550.roa (raw, json)
Hash identifier: FTEEEUr4CwAYt8vug5eUYy3b+Xr+ksBHygOVyF4O+rs=
Subject key identifier: 42:E0:23:F5:E6:FA:83:8E:FE:50:A0:22:F3:BB:00:24:A8:0D:87:C6
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 68AFF27CA22CB74090E5F56C61198E06F8390802
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
Signing time: Tue 21 Jan 2025 15:37:50 +0000
ROA not before: Tue 21 Jan 2025 15:32:50 +0000
ROA not after: Tue 20 Jan 2026 15:37:50 +0000
asID: 213550
IP address blocks: 2602:fed2:7000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:af:f2:7c:a2:2c:b7:40:90:e5:f5:6c:61:19:8e:06:f8:39:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jan 21 15:32:50 2025 GMT
Not After : Jan 20 15:37:50 2026 GMT
Subject: CN=42E023F5E6FA838EFE50A022F3BB0024A80D87C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:b9:0a:9c:d6:79:21:ea:8b:24:5d:98:ef:
6e:48:82:c2:48:8f:0d:26:1a:17:e3:bf:c0:3c:e7:
ae:70:44:4a:67:5b:24:69:ef:4d:f1:d4:85:f3:0c:
42:7d:e8:70:97:54:d1:02:1f:d4:b0:6f:61:14:0e:
6b:5f:c7:5a:1e:3a:41:ff:56:8d:25:13:1e:ea:f7:
c1:5f:8c:33:42:1e:7e:10:e6:69:53:90:88:30:b4:
54:01:a6:15:45:a4:73:76:0d:ad:15:47:f1:d0:ef:
6e:22:fa:3f:e2:8b:aa:76:b1:d7:f1:10:c2:5f:92:
47:92:40:28:46:3e:8b:b7:39:2c:65:3a:ba:02:15:
f2:f1:b8:1f:0c:c3:8b:62:8f:0c:d2:e4:db:af:b6:
49:dd:2a:40:f2:60:ca:41:d6:e0:9e:60:9b:a7:b3:
8e:38:14:53:54:3e:ae:68:7c:ab:bb:99:e3:ab:59:
a1:ce:f1:42:42:8a:8e:3f:db:ea:dc:99:31:f1:57:
66:35:39:57:64:5a:8d:fc:b8:f7:e9:70:ff:d1:84:
eb:bc:f6:25:3d:d1:3b:1b:b6:85:a3:73:ff:c5:39:
ae:81:bd:9d:22:1e:0e:01:b0:86:7b:46:c2:26:44:
76:ff:f0:80:e2:0e:3a:b7:5a:ae:c9:8f:31:d6:ea:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:23:F5:E6:FA:83:8E:FE:50:A0:22:F3:BB:00:24:A8:0D:87:C6
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS213550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7000::/44
Signature Algorithm: sha256WithRSAEncryption
55:32:eb:89:1d:e9:72:64:0e:69:ab:20:ce:c3:33:32:63:a5:
c6:df:93:c9:0d:61:7d:72:f9:e9:8b:b4:96:8c:e5:2c:f9:91:
28:e2:90:05:c8:11:52:0b:9a:ea:f0:d3:90:05:06:eb:59:b2:
a8:13:4f:07:21:16:ea:ae:30:01:6b:f4:bc:73:18:e8:2d:27:
1f:7e:3c:27:e9:6d:b0:fd:1e:15:e6:d3:61:99:52:0b:62:58:
77:78:db:eb:6e:5a:74:ed:45:40:5b:53:bf:d0:b6:d5:89:47:
0b:f4:1b:62:5a:89:32:96:9e:c1:57:4b:9c:af:bb:c8:a9:d5:
57:d1:6a:43:b7:91:47:e0:63:31:2c:39:b4:3f:3a:91:df:f7:
70:98:79:d1:d9:93:a9:49:93:65:31:1f:ca:6b:36:e7:b5:ff:
94:d1:ae:74:e0:05:bc:22:73:42:cf:79:99:58:f4:fa:31:92:
ad:fe:9c:3d:8e:34:d2:01:e5:f9:16:6f:3d:6b:c9:ac:9f:50:
ee:a5:12:0e:40:dd:20:eb:65:81:62:23:01:26:8e:bf:c9:44:
a8:27:58:96:90:25:77:4b:12:79:64:ab:98:5f:f7:d1:ed:e0:
90:c0:14:0d:c5:dd:c3:f6:ee:b4:a6:2c:e8:c9:fa:4b:8d:ec:
cc:9a:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:44:10 2025 by rpki-client