Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: JfJrBWS/1oBEuHwrUWr3SdAcHZHQSxqqmBUBIlmysdQ=
Subject key identifier: 06:E3:4C:BB:38:E7:1A:5E:21:E0:94:CD:8E:3B:10:A1:BB:6D:03:E3
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 28CF4AF81C2A8559B36516A4431C0B65CC7EAB9F
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
Signing time: Wed 29 Jan 2025 21:07:10 +0000
ROA not before: Wed 29 Jan 2025 21:02:10 +0000
ROA not after: Wed 28 Jan 2026 21:07:10 +0000
asID: 397423
IP address blocks: 2602:fed2:7116::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:cf:4a:f8:1c:2a:85:59:b3:65:16:a4:43:1c:0b:65:cc:7e:ab:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Jan 29 21:02:10 2025 GMT
Not After : Jan 28 21:07:10 2026 GMT
Subject: CN=06E34CBB38E71A5E21E094CD8E3B10A1BB6D03E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:cf:63:af:77:b0:d9:5f:11:16:82:e0:e1:
37:4a:64:7c:84:d9:2b:3c:b0:29:4f:d2:ab:ac:f7:
a6:65:6d:5c:86:ef:96:c4:95:14:33:8b:7d:c8:92:
81:92:73:43:ca:ff:ee:2b:b3:dc:39:36:4e:4a:58:
ee:cc:77:64:6c:83:89:0b:62:1c:94:ad:8f:6f:1e:
f5:53:8d:c1:66:5d:12:e6:14:38:2d:16:e0:43:74:
ef:cc:02:39:5c:01:76:62:31:5e:2d:8e:76:b2:0d:
0b:1b:59:98:2f:ef:57:5b:51:60:6c:ea:e0:2a:cc:
b7:4e:eb:6d:e5:b1:2a:61:4b:b9:f9:c5:39:69:f2:
3d:6e:1c:6b:1f:bf:e2:b6:41:3a:ff:cf:5e:ea:a3:
a8:e7:e6:6f:45:3c:25:cf:bb:db:f2:f0:b4:e7:f1:
db:95:b7:25:07:57:50:40:20:fd:05:3d:e5:9f:13:
ea:2c:71:26:d8:ee:81:e2:eb:8e:4b:f8:3b:ca:45:
61:02:88:4c:50:35:25:4c:5e:10:08:07:52:a4:1c:
68:97:e0:51:73:ba:73:8c:e0:43:8f:00:66:31:85:
23:a4:63:4c:8c:60:fb:ad:69:be:f7:31:c8:78:76:
4c:2a:14:27:12:5e:a8:e5:b5:d7:41:18:94:4e:36:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:4C:BB:38:E7:1A:5E:21:E0:94:CD:8E:3B:10:A1:BB:6D:03:E3
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7116::/48
Signature Algorithm: sha256WithRSAEncryption
3c:11:c9:70:9b:e8:37:57:54:e0:6a:17:bd:b7:09:d5:35:af:
b0:94:63:48:2d:a4:86:c7:d2:55:8a:b6:88:16:9b:0b:e1:74:
dd:06:1f:1e:b3:88:3c:0f:b6:31:5a:14:f7:7f:31:f7:72:a9:
94:d3:5a:53:01:84:ed:2a:e3:61:b0:d7:a7:51:1a:8c:52:bc:
bf:fd:ce:5f:4e:67:65:2b:4e:8d:08:cd:1c:3d:f4:c6:82:8f:
76:9f:36:45:e2:66:e5:cd:ca:44:22:42:3e:9d:da:23:c7:d0:
4e:3e:7a:5b:db:ed:25:21:6a:2b:e7:21:2a:e9:ac:e8:ea:6d:
bf:ca:92:ce:c0:5e:95:61:77:68:f3:c2:8b:bc:ca:47:8f:31:
87:ba:5a:6f:32:10:63:8d:36:e5:85:0a:38:85:d5:8d:7b:c7:
a4:86:ba:ea:0a:ec:5a:8c:49:25:93:f3:55:19:d5:c1:77:b6:
cf:8e:fc:b4:14:9d:13:26:88:74:e2:84:b3:d2:01:87:8b:89:
3b:27:d6:35:0b:de:00:03:39:31:83:54:63:3f:fb:f0:7f:7e:
f6:02:73:d2:06:1a:11:7a:f4:ef:6e:79:6b:a1:bc:0c:bd:99:
73:fe:fe:ca:51:a2:1b:d2:8b:83:b6:01:db:02:df:52:30:4f:
e2:84:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:49 2025 by rpki-client