Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
File: AS210718.roa (raw, json)
Hash identifier: XFNdB2oS3FFKzsSqqg1uQBQ0WTYc++V7xCEyuzGOFvo=
Subject key identifier: 12:17:C9:19:A4:7F:A9:91:E6:08:32:36:D7:D7:DC:96:10:8E:0D:88
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7B2E57912BC71AE2E513EE95DFB7D896488E2165
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
Signing time: Thu 28 Nov 2024 23:54:33 +0000
ROA not before: Thu 28 Nov 2024 23:49:33 +0000
ROA not after: Thu 27 Nov 2025 23:54:33 +0000
asID: 210718
IP address blocks: 2a0f:9400:7e01::/48 maxlen: 48
2a0f:9400:7e02::/48 maxlen: 48
2a0f:9400:7e06::/48 maxlen: 48
2a0f:9400:7e07::/48 maxlen: 48
2a0f:9400:7e08::/48 maxlen: 48
2a0f:9400:7e17::/48 maxlen: 48
2a0f:9400:7e18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2e:57:91:2b:c7:1a:e2:e5:13:ee:95:df:b7:d8:96:48:8e:21:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 28 23:49:33 2024 GMT
Not After : Nov 27 23:54:33 2025 GMT
Subject: CN=1217C919A47FA991E6083236D7D7DC96108E0D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:c2:d1:66:77:b9:5a:99:ee:95:4f:d3:71:
83:0f:12:92:c7:e3:8f:4d:37:65:ef:bb:86:62:c4:
6e:94:ce:72:a3:2f:08:15:8e:2b:08:c5:8d:74:d8:
c2:d2:7b:82:15:ea:db:f3:64:a6:6b:03:6e:59:e1:
ba:97:e3:99:f2:55:d1:da:fd:05:ef:c0:78:6d:81:
f6:9b:a7:54:be:e4:53:79:fb:48:fb:f3:76:5c:c3:
b5:a0:cd:c5:a7:2e:bd:2a:c3:bf:ee:0f:fd:21:61:
8e:2d:ec:7a:da:3f:93:67:35:a5:43:8c:e1:de:85:
14:07:21:bd:19:fb:cf:2b:44:1d:af:f2:44:7a:f3:
60:bf:d2:b4:65:ab:ed:71:90:3c:05:d3:44:c0:ca:
71:9c:a2:b6:cb:16:e8:a8:40:2a:42:05:eb:6e:3c:
88:9f:63:d7:75:4f:3c:f1:c2:2e:2f:ad:44:ee:da:
bf:45:38:a9:b9:a9:bb:ff:36:dd:ae:c5:e4:91:88:
aa:3e:7e:11:19:78:93:fb:34:91:14:08:2e:dc:14:
95:e0:bb:f3:4e:49:ca:24:ef:31:8f:e4:35:84:5b:
86:cc:1f:5c:8b:85:f2:ad:3b:5e:a8:ef:11:3a:5b:
a2:ea:1b:8e:17:98:c2:c8:38:0f:aa:e2:aa:79:8b:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:17:C9:19:A4:7F:A9:91:E6:08:32:36:D7:D7:DC:96:10:8E:0D:88
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e01::-2a0f:9400:7e02:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e06::-2a0f:9400:7e08:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e17::-2a0f:9400:7e18:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:21:df:90:6e:78:dd:dc:0b:57:89:2d:4b:28:c4:ca:8e:6c:
5b:3c:fc:12:01:49:72:a4:08:4e:15:5b:a7:59:8a:09:bc:3d:
e4:69:31:7a:92:0f:de:14:28:0d:bb:75:78:24:e8:0e:a4:af:
17:84:32:33:b2:ca:80:78:93:1e:35:c1:6f:fe:24:5b:cb:10:
79:8f:cd:fc:53:cc:bb:e1:5b:97:43:ca:56:0a:9d:d0:bb:7e:
bb:cb:9b:83:7f:0c:e9:20:ab:69:72:09:de:1e:d2:28:a4:44:
0b:59:30:83:4c:23:85:32:2f:8c:43:41:3a:e0:35:51:67:14:
ab:73:a9:e5:8c:65:9b:9c:5b:86:98:af:75:97:38:5b:60:28:
ac:e7:f4:0d:cf:4b:7d:67:3b:32:67:49:2e:6a:aa:cd:bc:7b:
3e:cb:cf:df:7b:fa:27:0e:25:35:95:33:09:ab:ea:6e:12:10:
c3:ff:21:a6:10:90:ea:3f:c8:7c:d1:f7:35:8f:d0:4b:cf:64:
0e:b0:55:db:04:8d:c3:87:86:c3:3d:41:75:22:be:5f:67:0b:
9a:8c:dc:de:09:fc:10:7a:22:1d:64:a5:f0:be:1e:63:94:88:
8e:4d:b0:7e:28:d1:e5:a1:1c:fb:de:71:f9:5b:2a:f1:44:85:
90:06:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:43:38 2025 by rpki-client