Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: gHnVSI1Vq7QeKzX5pN973BO2+ugM5HbNAf2CuXEVwNA=
Subject key identifier: 73:2A:88:ED:8B:7E:A4:79:73:1C:EC:24:1A:62:D5:11:0F:0C:33:18
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 32398B3A806ADFF338EC1F5A1F424254EA207FA7
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
Signing time: Thu 09 Jan 2025 00:52:53 +0000
ROA not before: Thu 09 Jan 2025 00:47:53 +0000
ROA not after: Thu 08 Jan 2026 00:52:53 +0000
asID: 20473
IP address blocks: 2a0f:9400:610e::/48 maxlen: 48
2a0f:9400:6118::/48 maxlen: 48
2a0f:9400:6165::/48 maxlen: 48
2a0f:9400:6167::/48 maxlen: 48
2a0f:9400:690a::/48 maxlen: 48
2a0f:9400:690b::/48 maxlen: 48
2a0f:9400:690e::/48 maxlen: 48
2a0f:9400:6930::/48 maxlen: 48
2a0f:9400:693e::/48 maxlen: 48
2a0f:9400:7386::/48 maxlen: 48
2a0f:9400:750a::/48 maxlen: 48
2a0f:9400:8020::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:39:8b:3a:80:6a:df:f3:38:ec:1f:5a:1f:42:42:54:ea:20:7f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jan 9 00:47:53 2025 GMT
Not After : Jan 8 00:52:53 2026 GMT
Subject: CN=732A88ED8B7EA479731CEC241A62D5110F0C3318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:f6:d4:52:94:d9:81:f2:75:43:a7:76:7d:
a9:34:ab:62:69:34:5c:7a:df:99:f8:e8:8c:68:7b:
8b:d3:39:5a:cb:10:6c:c1:85:8c:fb:ed:e8:51:2b:
d8:ab:b3:03:bb:e2:af:f3:b5:24:2f:94:73:cc:27:
47:e2:8e:34:fd:34:d5:59:b2:4d:92:57:9a:f9:6b:
c0:c6:49:49:e8:a2:75:33:6d:dc:78:c1:78:4f:4a:
8c:31:5c:12:7c:5d:30:30:2c:ed:84:d9:8a:eb:4b:
e7:c9:c6:60:b5:76:1c:1e:a8:af:9a:64:1d:ba:7f:
57:d4:57:fc:c2:4f:6e:44:fb:1e:17:09:50:f0:3f:
6a:36:5c:14:ce:24:ce:07:f3:ef:22:13:3c:8d:8f:
d9:0e:f4:63:e3:48:cd:33:29:cb:6c:89:fd:90:a9:
3e:9b:27:81:f2:7b:6f:c8:e6:1f:36:e9:1a:eb:59:
23:64:5a:b0:77:b1:31:ce:d2:06:bd:82:eb:fd:7c:
ed:25:63:78:1e:bd:a7:18:01:f8:6d:0f:72:67:37:
f3:f2:1b:8d:57:60:fd:d7:ab:40:57:d4:84:de:67:
70:c6:dc:22:71:fa:0a:4d:76:ef:21:ca:14:f5:9d:
89:5e:90:52:05:c6:2a:66:e3:29:cc:37:7d:55:a8:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2A:88:ED:8B:7E:A4:79:73:1C:EC:24:1A:62:D5:11:0F:0C:33:18
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610e::/48
2a0f:9400:6118::/48
2a0f:9400:6165::/48
2a0f:9400:6167::/48
2a0f:9400:690a::/47
2a0f:9400:690e::/48
2a0f:9400:6930::/48
2a0f:9400:693e::/48
2a0f:9400:7386::/48
2a0f:9400:750a::/48
2a0f:9400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
23:77:3a:95:2e:e9:4e:d2:34:6d:35:22:8c:a8:5c:15:a1:2e:
f7:1e:7d:c1:ed:7b:6b:e8:4f:a5:f8:dc:8f:11:d3:07:e1:28:
90:d5:80:74:62:d1:4d:84:95:0c:01:5c:a7:4c:9f:be:98:5c:
cd:d4:a6:40:32:f5:65:67:a3:29:90:26:60:df:02:43:bb:57:
e8:ec:91:a7:22:68:d2:51:f5:07:55:e3:5e:df:93:f4:e5:57:
67:c1:27:d4:b0:47:e6:e9:dc:1e:4d:74:7e:bd:0e:71:8c:d9:
dc:36:84:14:a1:28:06:55:e6:a4:ad:1f:fa:f1:60:8d:ce:1d:
4b:9b:dc:71:f3:11:e1:01:73:72:22:46:06:05:d6:1c:d7:5f:
e3:13:ec:4f:52:c9:89:84:bc:5b:7c:c2:d2:6b:9a:4c:13:1e:
6e:bb:b3:03:b8:82:01:4a:60:10:1c:17:9e:30:57:2c:7f:09:
7e:7d:54:ba:57:26:f5:9e:ae:95:79:e4:67:f2:91:39:e6:ce:
5f:78:16:a2:f9:43:ae:78:f1:94:34:60:2b:83:35:bf:ea:18:
ef:10:61:53:4b:91:36:4c:6e:b2:9b:62:c2:cf:c1:62:1d:a2:
74:1b:e3:71:c2:83:4d:68:43:4e:d4:c7:85:1e:ad:4b:68:db:
b3:e8:56:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:26 2025 by rpki-client