Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400960.roa
File: AS400960.roa (raw, json)
Hash identifier: DT7NRh6bZWj2q0xp15C+Tkbe2tAmY90lV9DkiReySbo=
Subject key identifier: BD:1A:61:F9:B1:B7:24:48:74:6A:31:E3:18:0A:A0:5E:16:7D:9F:11
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 04AD97C56B60375D0DA4A7D5BEE9CA8A8F0EB156
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400960.roa
Signing time: Fri 12 Apr 2024 01:36:12 +0000
ROA not before: Fri 12 Apr 2024 01:31:12 +0000
ROA not after: Fri 11 Apr 2025 01:36:12 +0000
asID: 400960
IP address blocks: 2602:fed2:708f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ad:97:c5:6b:60:37:5d:0d:a4:a7:d5:be:e9:ca:8a:8f:0e:b1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Apr 12 01:31:12 2024 GMT
Not After : Apr 11 01:36:12 2025 GMT
Subject: CN=BD1A61F9B1B72448746A31E3180AA05E167D9F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:42:a4:11:e0:a2:8c:80:e3:8a:cc:15:1d:
1a:06:78:84:8d:af:06:7a:cf:6e:99:4e:69:c0:24:
6b:a2:23:b9:8a:e2:06:b1:db:b3:d9:c5:4e:27:d9:
c0:77:73:ab:34:94:4a:b8:6f:f1:b4:cd:e5:dc:fd:
8e:81:71:5f:99:d9:6e:65:12:98:75:18:2a:af:50:
26:7d:d2:d4:eb:98:23:a4:95:89:5f:0e:c3:52:dc:
4d:05:ec:b1:63:ed:b6:ca:00:f5:0f:c4:f0:d1:74:
14:ad:33:9a:62:6e:41:10:d8:e2:03:00:a8:75:d8:
88:e2:06:91:f7:f0:34:1a:c1:19:38:9b:60:10:7f:
09:01:63:cc:4c:5f:81:eb:e1:75:73:15:af:bb:0f:
0d:92:2f:cd:56:e2:ba:86:f6:b5:33:26:48:ec:59:
b1:a6:9b:d1:8f:ac:7e:f4:37:f8:85:b5:97:ef:ee:
1f:26:87:0c:b1:8f:4c:0d:05:27:e3:c2:09:00:0c:
58:04:82:6a:79:07:f1:a7:57:77:4f:a9:a6:b3:37:
5c:a4:ef:bf:4b:36:a0:2d:bd:97:03:0b:62:5b:59:
f4:56:c4:77:26:f2:52:ef:6a:71:9b:3b:4b:28:35:
65:20:ab:6e:74:08:5f:03:45:52:9f:ee:e9:e8:4b:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:61:F9:B1:B7:24:48:74:6A:31:E3:18:0A:A0:5E:16:7D:9F:11
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:708f::/48
Signature Algorithm: sha256WithRSAEncryption
9a:98:fe:2a:40:41:24:a6:2a:85:42:6b:b5:11:db:22:d9:c9:
ca:19:d4:6b:e3:3b:10:a1:19:2b:4d:e0:fb:5e:7f:2e:38:92:
20:b5:1b:a4:88:3f:72:b0:97:fe:de:8c:66:23:21:2c:a0:0b:
48:9b:90:39:86:b2:24:27:67:a2:2d:4b:34:66:80:27:36:74:
2b:af:a9:07:9a:2c:76:c9:00:23:c1:68:ad:86:53:bf:c7:b8:
b6:c7:6a:5d:f4:dd:1a:ec:00:59:ba:c1:60:6f:d8:2d:e1:0c:
c2:e5:b8:79:98:e6:1e:74:15:e8:35:14:11:7a:e4:69:f7:7c:
6b:d5:0c:d7:fd:7f:09:ea:2d:f4:1e:ac:87:ef:53:2c:88:57:
c5:85:ad:c2:3a:b0:a2:6c:e7:f9:67:a0:79:85:e7:86:a6:45:
88:5d:5d:73:7e:2d:6b:f2:af:ce:11:68:cf:8c:05:6f:da:54:
c6:cf:b9:c9:b9:70:23:7b:47:81:c7:5a:3f:3f:b6:58:cd:2e:
9c:53:50:4d:bb:9f:6b:5b:85:14:0e:20:07:48:c3:39:4c:a9:
81:e2:98:cc:01:2e:96:11:19:3f:49:ab:5b:a4:fb:82:95:21:
55:61:fe:41:d3:2e:9c:24:72:eb:ee:6d:37:86:49:78:8a:fe:
23:7f:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:01:53 2025 by rpki-client