Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
File: AS214995.roa (raw, json)
Hash identifier: pGO2ikJLFhrJQVHk1wcCmkOVJP+k9JKxD5udd966/4s=
Subject key identifier: BA:F7:E7:81:C8:C2:A3:05:08:A1:9C:4B:9D:E4:D0:A3:BB:B9:D1:2A
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 4CBB0A51B903CFA6C7D03FAD28B315387D04A72E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
Signing time: Sat 04 May 2024 02:41:16 +0000
ROA not before: Sat 04 May 2024 02:36:16 +0000
ROA not after: Sat 03 May 2025 02:41:16 +0000
asID: 214995
IP address blocks: 2602:fed2:7300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:bb:0a:51:b9:03:cf:a6:c7:d0:3f:ad:28:b3:15:38:7d:04:a7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: May 4 02:36:16 2024 GMT
Not After : May 3 02:41:16 2025 GMT
Subject: CN=BAF7E781C8C2A30508A19C4B9DE4D0A3BBB9D12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:21:a7:37:be:de:ac:b5:eb:28:50:d6:38:
6e:0d:76:ee:c9:a1:f7:c7:13:cd:b6:a3:86:74:60:
99:42:dd:a0:16:c8:3f:af:ed:68:8d:ab:dd:b5:14:
cc:93:ae:0c:8e:92:11:69:4b:71:bb:79:fb:9b:ce:
d5:25:87:f4:bf:26:2f:35:d7:88:4f:83:b3:2b:35:
e9:58:ef:29:e0:2d:c7:20:b1:fe:e4:4b:d2:b1:d8:
18:b4:50:2e:6e:67:80:3c:ca:dc:a6:6e:54:4c:cd:
20:2b:67:9e:9b:c5:56:f7:5b:d7:1d:b3:8a:a3:9c:
d1:2e:48:5d:ac:2a:7b:80:2c:ef:a7:4f:3f:7c:f6:
2b:e9:f4:25:7f:73:f8:34:ae:37:35:09:8e:76:18:
eb:7e:0a:a4:95:c2:70:85:ab:c5:50:e9:7e:19:5b:
3b:40:5e:88:2e:8c:80:0e:ab:53:48:aa:c6:72:3e:
be:c8:65:96:5e:2f:4f:aa:fa:66:87:26:0b:ad:82:
7a:76:7a:6e:0d:ff:25:28:cb:bd:e6:3b:31:77:11:
31:45:84:b2:0a:2a:ed:63:56:f8:2b:63:b1:c7:56:
8c:7d:08:02:11:9b:92:81:23:cd:6e:8a:47:03:c6:
df:fe:2f:fd:a6:53:da:ea:f4:58:3b:07:23:67:ff:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:E7:81:C8:C2:A3:05:08:A1:9C:4B:9D:E4:D0:A3:BB:B9:D1:2A
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7300::/48
Signature Algorithm: sha256WithRSAEncryption
77:bf:88:1a:0c:49:9c:27:4e:f8:12:93:ef:9a:61:93:5d:26:
e1:fb:5c:62:e0:88:87:1f:8c:40:a0:ec:8f:db:2f:74:0c:88:
12:02:4e:ba:83:e0:1d:24:a4:10:6b:15:38:6b:65:44:53:17:
69:f2:f8:5b:22:f0:96:7f:33:d6:b8:1f:0c:1b:88:8a:2c:6f:
84:df:85:48:aa:ca:7a:a3:f2:a2:82:2f:c8:46:53:1e:f8:c0:
35:f5:61:14:9c:8e:cd:a0:47:39:c0:39:8f:87:d8:2c:a1:4f:
fc:e8:8e:93:c1:d7:39:a6:fa:5e:38:8b:b9:1a:63:bf:f6:f9:
f3:b3:06:38:38:5d:fc:42:ae:63:88:81:de:ef:d5:51:80:78:
85:d9:4a:e2:d4:6b:8c:0a:50:d1:ff:a2:7e:2a:74:04:a1:b1:
4b:83:8a:91:44:16:66:a3:ab:a1:c9:9f:ad:c6:32:64:72:85:
30:bf:44:fb:e2:c4:c4:42:cb:99:7c:3a:b0:2c:0f:cc:39:23:
f4:cd:11:23:c0:14:4f:3a:12:ec:cc:d2:da:42:0e:d8:06:61:
af:45:54:53:13:82:40:f7:93:21:5b:be:e0:34:9c:b0:a9:82:
1b:93:77:ae:fa:78:56:dd:79:40:1f:05:b2:29:dd:d8:e2:eb:
ba:4d:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:56:02 2025 by rpki-client