Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: /tmwMO31CHrxE7JAMmW9K8K2mdmi7MLoE5v42w8btIk=
Subject key identifier: 9B:4A:78:A7:93:DA:43:97:C5:2D:CD:F6:01:7E:E7:AE:A3:F9:9C:42
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 08570BF56EE35F11726BEB2779D160080290FA48
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
Signing time: Fri 04 Oct 2024 18:16:22 +0000
ROA not before: Fri 04 Oct 2024 18:11:22 +0000
ROA not after: Fri 03 Oct 2025 18:16:22 +0000
asID: 23470
IP address blocks: 2602:fed2:7081::/48 maxlen: 48
2602:fed2:7314::/48 maxlen: 48
2602:fed2:7318::/48 maxlen: 48
2602:fed2:7319::/48 maxlen: 48
2602:fed2:7708::/48 maxlen: 48
2602:fed2:7e04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:57:0b:f5:6e:e3:5f:11:72:6b:eb:27:79:d1:60:08:02:90:fa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Oct 4 18:11:22 2024 GMT
Not After : Oct 3 18:16:22 2025 GMT
Subject: CN=9B4A78A793DA4397C52DCDF6017EE7AEA3F99C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:78:70:77:a0:a3:92:00:82:15:41:a6:42:
38:0e:a4:9b:fb:9f:00:61:b6:47:78:a9:b5:28:b7:
d2:11:2b:b0:54:7a:f5:89:2d:e8:83:6e:1f:fb:e5:
a7:ad:8b:e7:5e:88:6c:fe:ba:e3:81:ba:79:af:58:
48:50:d9:d6:b9:cf:49:73:c6:7d:74:65:4c:98:09:
69:ad:54:c0:41:26:66:9c:4e:d4:d5:bd:f5:bb:da:
5b:a3:a3:47:a4:7e:b9:94:84:ab:18:fa:36:e4:1a:
c2:11:a5:12:24:a8:b9:35:5b:3b:5d:bc:76:79:ec:
47:4c:82:89:a4:ea:84:40:fd:87:55:14:eb:ac:8d:
ee:4d:ff:da:64:5e:b5:1c:48:3d:d2:a7:36:78:0a:
b5:63:90:d8:b4:64:dd:e7:a4:28:22:f4:94:7c:5e:
15:cd:4a:9c:78:5f:6b:e6:14:4e:b9:ea:7b:ed:9a:
3d:2f:9f:a4:c5:5f:80:1c:ba:80:47:eb:12:28:78:
cf:4f:c3:1b:d1:18:c8:89:4f:21:f6:7f:07:8d:a2:
70:ad:3b:46:1c:d2:91:4d:4e:d2:64:13:26:d1:62:
29:7a:32:cb:a1:49:e9:b9:c1:16:9c:08:bf:76:65:
0d:43:2f:20:3e:af:71:e9:8e:ed:b5:26:9c:99:0b:
6e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:78:A7:93:DA:43:97:C5:2D:CD:F6:01:7E:E7:AE:A3:F9:9C:42
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7081::/48
2602:fed2:7314::/48
2602:fed2:7318::/47
2602:fed2:7708::/48
2602:fed2:7e04::/48
Signature Algorithm: sha256WithRSAEncryption
0c:c4:10:71:5a:64:af:cd:f5:d9:37:b1:17:64:c3:05:4e:b4:
32:ec:a8:c4:17:a0:8a:c9:e8:ca:d7:23:f0:cc:bf:20:0a:d5:
f4:99:00:b3:5a:35:d9:58:88:93:ce:81:11:0d:78:9b:5b:4c:
2b:00:c2:0d:d8:22:1e:9b:6c:b2:0b:ae:b8:53:1e:a7:57:11:
2f:fc:cd:81:d2:3b:28:6b:c5:04:1c:4c:df:81:66:37:72:64:
b8:f4:6c:f8:bb:57:23:65:2e:3a:c3:31:cb:c5:eb:c3:ff:96:
54:20:35:d5:0e:f7:99:0b:34:a8:10:b7:ac:f2:e2:0a:07:9d:
c6:7b:51:99:ad:cd:01:ad:26:af:a9:ff:20:c0:40:d9:10:78:
18:43:dc:c6:05:2a:fd:ee:a0:ce:9f:0b:87:cb:50:45:4b:0f:
38:3f:55:25:d9:05:1e:2c:75:f7:b3:93:19:13:ca:d5:83:29:
b9:49:20:c9:36:a0:cc:cc:0d:47:6e:79:74:74:19:7e:95:a2:
6a:4c:bb:b6:ff:f8:20:a7:24:30:16:20:f3:3d:82:a3:49:af:
46:7a:55:98:19:92:a6:f7:2d:44:23:1b:47:09:94:56:63:39:
59:e6:0a:8e:5e:f1:77:cd:96:d3:bc:3a:b8:fb:56:ed:f4:42:
d2:cd:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:58 2025 by rpki-client