Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215780.roa
File: AS215780.roa (raw, json)
Hash identifier: 5tNvMfnjTF1xPOisgwCd51ZgH6f3aGqWuWc7RYspSfE=
Subject key identifier: 2B:EA:06:87:40:64:85:3B:20:F9:E1:DA:D2:E6:46:C9:CA:31:77:A6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 53157F17BF300DFD1DDF9155B0D559F1ABA23B0B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215780.roa
Signing time: Sat 14 Dec 2024 19:46:43 +0000
ROA not before: Sat 14 Dec 2024 19:41:43 +0000
ROA not after: Sat 13 Dec 2025 19:46:43 +0000
asID: 215780
IP address blocks: 2a0f:9400:6777::/48 maxlen: 48
2a0f:9400:6780::/42 maxlen: 42
2a0f:9400:6788::/48 maxlen: 48
2a0f:9400:6799::/48 maxlen: 48
2a0f:9400:6901::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:15:7f:17:bf:30:0d:fd:1d:df:91:55:b0:d5:59:f1:ab:a2:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 14 19:41:43 2024 GMT
Not After : Dec 13 19:46:43 2025 GMT
Subject: CN=2BEA06874064853B20F9E1DAD2E646C9CA3177A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:b3:2a:f3:a9:00:77:16:49:b6:66:54:7b:
06:d8:8c:5a:e0:b7:0e:75:0f:49:87:f9:d3:f0:1d:
b6:5f:7b:b0:21:38:dd:da:2a:75:a3:18:ae:ce:4c:
c3:64:8c:f8:fa:36:37:33:8a:db:f5:4e:af:ce:01:
6f:6a:cf:7f:bf:e2:75:ff:9b:e9:33:08:c5:66:ca:
17:55:43:92:17:73:99:89:57:bd:09:51:21:5f:f8:
48:fc:d4:d2:fc:ca:30:14:16:9f:d0:8d:49:b3:e2:
a0:77:20:25:6a:49:95:ce:d8:da:23:4f:94:5f:aa:
0e:51:e3:8e:cc:47:21:82:40:76:00:a6:a7:7f:47:
6a:13:50:b8:2a:d5:e6:99:82:8c:c0:ee:95:e6:a9:
32:e3:f8:6c:ef:fe:36:5b:e5:04:f5:c2:65:b1:88:
64:8b:1b:51:07:63:ea:11:5e:dd:a1:7e:ea:24:52:
e1:93:25:9f:87:b4:93:3c:83:d7:f9:3e:88:92:46:
56:48:90:0e:14:f5:a7:e2:f9:07:df:47:dd:77:7a:
4a:cd:a3:89:15:ca:77:7d:7e:ed:aa:51:c8:aa:00:
35:e3:d9:fb:a9:00:be:9a:24:68:28:4d:98:a3:e2:
81:74:11:88:1d:a4:be:73:88:17:ca:4b:c8:cd:88:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EA:06:87:40:64:85:3B:20:F9:E1:DA:D2:E6:46:C9:CA:31:77:A6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215780.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6777::/48
2a0f:9400:6780::/42
2a0f:9400:6901::/48
Signature Algorithm: sha256WithRSAEncryption
89:ef:42:f0:63:0e:b8:2b:93:fd:f2:02:1f:92:61:4d:34:51:
03:55:f2:4b:f6:9a:07:e4:eb:e7:50:aa:a9:58:86:c3:e9:c3:
37:28:bb:a5:fb:e0:fb:d0:c9:2e:a2:a1:46:48:38:18:91:de:
4d:ca:28:8b:14:ba:3f:5c:78:ec:cc:1b:60:03:7f:7d:ea:a8:
85:7f:fe:75:3d:08:c7:80:14:87:90:8d:04:33:f7:17:a3:c8:
5e:e2:31:47:fe:ba:70:4d:f4:1a:1f:7c:25:ad:2e:1d:0a:15:
f3:af:a1:50:84:71:0c:2c:32:a9:43:b4:d3:e4:01:61:dd:db:
b5:6e:d0:12:0e:e6:7b:56:14:46:f5:18:1b:94:23:d1:9d:03:
f0:aa:61:96:c6:c8:60:ca:26:5f:93:2d:7b:e1:3b:3d:03:d8:
fd:13:b3:c2:da:9d:aa:cd:cb:03:f6:13:0d:a4:93:4a:b8:de:
10:cf:ee:82:47:20:86:1e:a8:0a:db:ca:2a:cd:bf:df:21:fa:
c6:56:43:ed:a0:1f:5e:d2:f0:b8:e1:39:31:6f:60:07:67:41:
c3:b5:01:cc:05:33:de:87:b8:2f:25:38:dc:2f:e2:f2:8e:d7:
2b:b9:18:d5:41:19:e0:75:02:a0:76:9a:51:d2:0b:a6:de:d6:
48:71:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:21:09 2025 by rpki-client