Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
File:                     AS214995.roa (raw, json)
Hash identifier:          pGO2ikJLFhrJQVHk1wcCmkOVJP+k9JKxD5udd966/4s=
Subject key identifier:   BA:F7:E7:81:C8:C2:A3:05:08:A1:9C:4B:9D:E4:D0:A3:BB:B9:D1:2A
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       4CBB0A51B903CFA6C7D03FAD28B315387D04A72E
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa
Signing time:             Sat 04 May 2024 02:41:16 +0000
ROA not before:           Sat 04 May 2024 02:36:16 +0000
ROA not after:            Sat 03 May 2025 02:41:16 +0000
asID:                     214995
IP address blocks:        2602:fed2:7300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 00:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bb:0a:51:b9:03:cf:a6:c7:d0:3f:ad:28:b3:15:38:7d:04:a7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: May  4 02:36:16 2024 GMT
            Not After : May  3 02:41:16 2025 GMT
        Subject: CN=BAF7E781C8C2A30508A19C4B9DE4D0A3BBB9D12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:21:a7:37:be:de:ac:b5:eb:28:50:d6:38:
                    6e:0d:76:ee:c9:a1:f7:c7:13:cd:b6:a3:86:74:60:
                    99:42:dd:a0:16:c8:3f:af:ed:68:8d:ab:dd:b5:14:
                    cc:93:ae:0c:8e:92:11:69:4b:71:bb:79:fb:9b:ce:
                    d5:25:87:f4:bf:26:2f:35:d7:88:4f:83:b3:2b:35:
                    e9:58:ef:29:e0:2d:c7:20:b1:fe:e4:4b:d2:b1:d8:
                    18:b4:50:2e:6e:67:80:3c:ca:dc:a6:6e:54:4c:cd:
                    20:2b:67:9e:9b:c5:56:f7:5b:d7:1d:b3:8a:a3:9c:
                    d1:2e:48:5d:ac:2a:7b:80:2c:ef:a7:4f:3f:7c:f6:
                    2b:e9:f4:25:7f:73:f8:34:ae:37:35:09:8e:76:18:
                    eb:7e:0a:a4:95:c2:70:85:ab:c5:50:e9:7e:19:5b:
                    3b:40:5e:88:2e:8c:80:0e:ab:53:48:aa:c6:72:3e:
                    be:c8:65:96:5e:2f:4f:aa:fa:66:87:26:0b:ad:82:
                    7a:76:7a:6e:0d:ff:25:28:cb:bd:e6:3b:31:77:11:
                    31:45:84:b2:0a:2a:ed:63:56:f8:2b:63:b1:c7:56:
                    8c:7d:08:02:11:9b:92:81:23:cd:6e:8a:47:03:c6:
                    df:fe:2f:fd:a6:53:da:ea:f4:58:3b:07:23:67:ff:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:E7:81:C8:C2:A3:05:08:A1:9C:4B:9D:E4:D0:A3:BB:B9:D1:2A
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS214995.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7300::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:88:1a:0c:49:9c:27:4e:f8:12:93:ef:9a:61:93:5d:26:
         e1:fb:5c:62:e0:88:87:1f:8c:40:a0:ec:8f:db:2f:74:0c:88:
         12:02:4e:ba:83:e0:1d:24:a4:10:6b:15:38:6b:65:44:53:17:
         69:f2:f8:5b:22:f0:96:7f:33:d6:b8:1f:0c:1b:88:8a:2c:6f:
         84:df:85:48:aa:ca:7a:a3:f2:a2:82:2f:c8:46:53:1e:f8:c0:
         35:f5:61:14:9c:8e:cd:a0:47:39:c0:39:8f:87:d8:2c:a1:4f:
         fc:e8:8e:93:c1:d7:39:a6:fa:5e:38:8b:b9:1a:63:bf:f6:f9:
         f3:b3:06:38:38:5d:fc:42:ae:63:88:81:de:ef:d5:51:80:78:
         85:d9:4a:e2:d4:6b:8c:0a:50:d1:ff:a2:7e:2a:74:04:a1:b1:
         4b:83:8a:91:44:16:66:a3:ab:a1:c9:9f:ad:c6:32:64:72:85:
         30:bf:44:fb:e2:c4:c4:42:cb:99:7c:3a:b0:2c:0f:cc:39:23:
         f4:cd:11:23:c0:14:4f:3a:12:ec:cc:d2:da:42:0e:d8:06:61:
         af:45:54:53:13:82:40:f7:93:21:5b:be:e0:34:9c:b0:a9:82:
         1b:93:77:ae:fa:78:56:dd:79:40:1f:05:b2:29:dd:d8:e2:eb:
         ba:4d:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:13:07 2024 by rpki-client on console-ams.rpki-client.org