Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
File: AS210576.roa (raw, json)
Hash identifier: cJss/J0t3kxQs8aynpCKZnog28rhnXFLrRcztTDjJmk=
Subject key identifier: 4C:81:CB:A7:20:D1:21:91:86:9A:F4:8D:5D:BC:A1:B7:15:F4:E3:21
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7321E7CADE725148B5667B6D23FAE1FB363C3E1F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
Signing time: Mon 21 Oct 2024 04:09:51 +0000
ROA not before: Mon 21 Oct 2024 04:04:51 +0000
ROA not after: Mon 20 Oct 2025 04:09:51 +0000
asID: 210576
IP address blocks: 2a0f:9400:7501::/48 maxlen: 48
2a0f:9400:7506::/48 maxlen: 48
2a0f:9400:7507::/48 maxlen: 48
2a0f:9400:770b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:21:e7:ca:de:72:51:48:b5:66:7b:6d:23:fa:e1:fb:36:3c:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 21 04:04:51 2024 GMT
Not After : Oct 20 04:09:51 2025 GMT
Subject: CN=4C81CBA720D12191869AF48D5DBCA1B715F4E321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:ac:27:f4:a4:c0:44:f4:33:f1:39:24:4c:
fd:97:2d:37:84:b9:48:92:30:65:cd:66:0d:d4:cf:
6a:c9:03:cf:96:aa:d3:4f:85:d8:61:02:a0:69:eb:
9f:00:3b:cb:1c:7b:0d:b1:28:1f:bd:f4:a4:80:c6:
da:35:6a:85:0c:d4:e4:3a:5b:63:cb:09:b0:49:6b:
2f:4d:b9:11:68:30:dd:02:6d:6f:b7:bf:f7:1c:c4:
31:69:2d:42:df:27:6d:fb:d6:ed:26:1f:0d:cf:f5:
aa:aa:a7:3e:e0:b0:4a:0b:e5:b2:aa:d6:d0:7b:95:
bd:e5:27:02:89:3e:3b:69:a7:71:89:7a:4a:03:06:
15:8f:7a:b5:07:d4:87:72:ef:95:c2:d6:d1:30:96:
06:10:c8:1b:79:12:f9:53:8c:79:3a:2e:64:7e:04:
a3:e3:bf:a7:06:57:4b:43:16:ac:ef:11:86:61:10:
b7:3b:b7:8f:24:ee:85:ee:00:8c:3a:48:b0:cc:4f:
4a:ac:1a:58:c4:be:f4:2f:da:57:4a:01:ce:d4:7e:
7d:c4:6e:39:87:e2:da:60:81:58:78:96:76:21:c0:
45:d9:d2:32:05:90:db:ca:ac:7a:fa:d5:5b:05:af:
6e:61:64:83:8a:42:8d:67:98:ba:16:96:30:ee:2d:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:CB:A7:20:D1:21:91:86:9A:F4:8D:5D:BC:A1:B7:15:F4:E3:21
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210576.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7501::/48
2a0f:9400:7506::/47
2a0f:9400:770b::/48
Signature Algorithm: sha256WithRSAEncryption
a9:2c:d2:f1:3c:a6:5f:28:06:95:da:55:a1:df:ee:a5:6e:29:
82:10:03:fe:cd:fb:dd:b1:88:9d:40:f3:67:98:06:4f:0f:cc:
b8:77:bd:b6:01:62:77:5a:89:5a:dd:16:8c:89:b1:88:1d:e9:
0e:35:c8:91:87:ad:5f:5c:2a:43:0b:88:b7:f3:7f:16:76:13:
ba:73:9c:62:d6:5b:64:6d:ed:4a:f5:54:0a:0a:93:59:53:1b:
ef:1e:ea:05:75:5b:4b:e4:19:9d:47:fa:82:24:57:8b:c7:79:
a6:d1:00:7f:32:bf:6a:1d:3b:3f:5d:a4:e6:e5:20:f0:f6:eb:
9b:d9:4e:b6:f0:0d:ac:26:b7:65:22:d8:a4:d2:63:75:39:af:
71:26:e7:b2:74:c3:34:c0:e7:cc:eb:ec:35:bd:0e:c3:3d:8b:
d8:37:1c:58:85:de:08:99:a5:c3:cc:e9:79:21:70:2b:1d:7b:
20:1d:72:dc:a8:86:f1:20:0d:f5:1c:68:d7:7f:29:58:1a:5c:
f5:29:c4:c5:f2:f1:84:9c:d6:30:61:ef:8a:04:57:3e:6c:c8:
7f:7d:5c:49:c8:bb:60:c3:82:f0:55:da:75:85:a5:18:cc:f5:
e1:c0:dd:6f:a7:46:a1:7a:cb:50:bf:b3:a1:e1:eb:1b:8f:8d:
15:16:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:12 2025 by rpki-client