Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
File: AS138166.roa (raw, json)
Hash identifier: KDOftSlvb+Dl3hcZUK2degbIFw9gxpb2SU0FZm+WuiM=
Subject key identifier: 22:F5:71:E4:54:BA:4F:DC:18:85:36:3C:B5:97:A7:04:3C:AF:0F:A6
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 0625FAEEBFF5A0EFBF1800E18A4FE56477E419D1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
Signing time: Sun 23 Mar 2025 17:39:28 +0000
ROA not before: Sun 23 Mar 2025 17:34:28 +0000
ROA not after: Sun 22 Mar 2026 17:39:28 +0000
asID: 138166
IP address blocks: 2602:fed2:710f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:25:fa:ee:bf:f5:a0:ef:bf:18:00:e1:8a:4f:e5:64:77:e4:19:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Mar 23 17:34:28 2025 GMT
Not After : Mar 22 17:39:28 2026 GMT
Subject: CN=22F571E454BA4FDC1885363CB597A7043CAF0FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:7c:da:45:4b:89:1f:d2:d3:82:b9:ed:a2:
f0:c4:86:08:bb:77:90:5f:81:5b:f9:7e:df:90:8a:
a0:63:fc:92:9d:1b:17:19:12:67:43:7c:c2:ed:4c:
94:d6:5d:9f:d5:1d:f9:05:6a:4b:5a:d1:06:90:68:
f0:f1:ac:aa:55:ae:e6:ff:74:33:bc:e8:1e:87:6c:
1e:24:00:9f:5f:8c:89:15:3c:93:07:22:5e:1a:74:
f2:ea:d3:61:27:29:d9:40:94:fc:ca:74:e1:02:4b:
16:0b:32:3e:56:8b:b0:83:40:08:19:07:59:05:43:
c1:93:eb:55:18:7c:99:3a:7f:19:1a:1b:7f:9d:af:
1c:0d:08:26:97:62:3b:80:c9:e9:02:02:b1:1e:67:
63:3f:d7:b8:f3:6a:4a:ee:85:7a:4a:a5:6b:24:73:
d3:37:bd:42:82:21:07:9d:04:9e:8c:60:3f:0e:ed:
15:9f:91:b7:1b:51:86:2c:53:38:41:0b:2b:f9:bc:
0b:57:b3:4b:a6:d8:44:97:31:da:59:cc:ae:a0:a2:
83:25:05:46:82:c5:0d:28:1a:01:66:b2:76:ae:01:
d0:aa:10:c3:d3:3b:96:1d:de:0c:2a:1d:19:1c:05:
0a:dc:25:ff:0d:45:c1:e5:ef:a6:f5:af:42:8a:02:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:71:E4:54:BA:4F:DC:18:85:36:3C:B5:97:A7:04:3C:AF:0F:A6
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:710f::/48
Signature Algorithm: sha256WithRSAEncryption
17:f7:22:42:78:47:bf:ff:72:1e:c0:15:bc:8f:e9:a6:6b:31:
36:22:f2:64:f5:88:2c:eb:21:2c:97:0a:ec:77:f2:64:27:6b:
8d:74:f8:25:12:00:7f:77:9b:c3:59:7a:d5:9c:0f:f7:51:5f:
d5:0e:89:8c:11:8e:7f:5b:80:89:38:b6:4d:dc:e8:94:fc:57:
a6:95:75:25:97:53:67:6c:98:24:35:aa:41:46:5a:f7:c1:dd:
09:17:e5:4d:35:a9:c2:00:f7:20:7f:d7:99:9c:84:d5:ed:f8:
12:4b:ab:9d:50:7f:7c:0e:f0:de:56:46:eb:0f:26:af:40:36:
46:08:2b:a3:ce:11:c1:45:f6:fc:31:c4:f1:10:32:7e:7e:8a:
f9:17:bf:96:d9:ed:17:5d:65:92:0e:d1:2f:cd:53:91:3b:ff:
a0:af:15:a2:d9:71:1e:c6:54:16:08:9e:ee:17:66:5b:33:bc:
9c:7b:3f:b3:26:8d:38:84:fb:b3:2e:29:19:7f:15:3c:46:41:
56:0f:ff:3b:c2:ec:e4:32:aa:45:e4:61:61:00:5f:95:42:18:
f1:a5:ee:61:b8:2d:d1:7e:10:46:15:44:1c:14:9c:8b:c3:62:
67:8e:68:4e:40:9b:5d:27:56:00:3b:b5:52:58:7b:6b:3e:ae:
a3:c6:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:00 2025 by rpki-client