Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e2037343839.roa
File: 32332e3136392e3232352e302f32342d3234203d3e2037343839.roa (raw, json)
Hash identifier: bUSGJqG6en/jQ8vmS6YwG4TZ1QdAw1mb/FxKP1MJgD8=
Subject key identifier: A5:76:5E:4B:97:4F:64:E4:F8:DD:3D:8D:98:4C:26:4E:EE:F1:2F:6D
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 20C4CF0676F35630759133D318601D8468798E46
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e2037343839.roa
Signing time: Thu 02 Jan 2025 14:42:03 +0000
ROA not before: Thu 02 Jan 2025 14:37:03 +0000
ROA not after: Thu 01 Jan 2026 14:42:03 +0000
asID: 7489
IP address blocks: 23.169.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c4:cf:06:76:f3:56:30:75:91:33:d3:18:60:1d:84:68:79:8e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Jan 2 14:37:03 2025 GMT
Not After : Jan 1 14:42:03 2026 GMT
Subject: CN=A5765E4B974F64E4F8DD3D8D984C264EEEF12F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:df:27:72:ee:e0:37:d3:cc:7b:bb:30:ba:
47:d6:e5:37:af:2e:b4:61:f5:e1:c0:f4:a0:ee:4b:
e4:cd:61:fa:55:01:ae:ce:12:ef:9c:62:a8:2b:e3:
b7:d6:4a:52:04:a6:0b:4e:66:50:13:d2:23:3f:6d:
68:c2:03:bf:4d:58:bd:5a:bf:b4:ae:28:a2:75:cf:
17:65:13:cb:b0:7c:d6:54:c9:31:6b:f7:d2:c7:2b:
d9:7e:4b:58:94:71:e8:13:27:47:80:ea:4c:ec:69:
1f:51:d1:d8:67:9c:b9:b2:ed:24:c0:66:92:5f:f6:
14:1c:fb:eb:86:a9:d0:c5:4b:5c:af:79:74:bc:de:
a0:99:11:45:aa:3c:20:af:df:b1:67:6d:3e:c2:fb:
1f:53:01:a1:b9:8a:a0:02:86:0b:6e:dc:fe:d2:32:
b3:d3:a8:cc:09:8a:71:de:9b:b2:27:0f:c9:5b:a0:
6d:8d:ea:5f:18:c2:66:98:02:35:be:3c:52:94:f8:
1f:e8:fa:cf:d7:5e:86:30:08:7b:f0:87:ce:f5:a3:
58:d8:a3:ad:3d:4d:1b:fa:93:44:3b:11:de:57:59:
c1:35:ce:e1:63:ee:ea:50:14:ca:a7:7f:c9:52:d2:
59:4a:c0:27:4e:3c:95:e6:b1:d9:26:7e:7e:d4:d2:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:76:5E:4B:97:4F:64:E4:F8:DD:3D:8D:98:4C:26:4E:EE:F1:2F:6D
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e2037343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.169.225.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2c:1f:a5:c4:7a:56:de:61:1c:0f:8c:4e:8b:4b:69:ea:57:
e2:10:6d:ac:92:9b:29:76:c5:50:2a:43:c1:f6:73:51:4d:5f:
ea:46:32:60:91:f6:49:d9:9c:04:2f:a0:d2:ed:fe:3c:1c:0d:
5e:90:7a:72:1a:e1:b7:c9:91:45:ab:81:dd:34:81:07:a3:d0:
19:0a:52:78:90:f7:a7:43:28:71:32:98:5e:65:b3:84:9d:46:
c2:f1:ce:6a:74:b5:6b:35:c5:8a:26:63:1c:12:9f:a6:df:05:
1c:12:67:c8:e8:14:d5:9e:ab:e1:2b:2f:61:49:ca:4d:ba:d0:
bd:9f:84:74:89:85:f6:70:a6:ee:70:7b:77:d0:cb:b8:bd:cf:
a0:82:07:c6:24:57:3c:af:32:fc:9e:55:67:22:84:f8:fe:8c:
dd:f9:72:93:bd:6b:95:0b:1f:19:3d:18:5c:cf:a7:71:83:55:
bb:c7:b9:b2:71:41:95:cb:3c:af:34:b2:f3:4d:98:c8:2d:47:
d4:5b:1e:cc:96:1b:97:33:20:d4:af:e9:ed:99:2f:0a:dd:5c:
99:13:c4:e2:26:e9:86:d2:18:df:8a:6a:30:c9:0f:71:74:a2:
e5:4b:74:ab:61:c1:42:f6:ca:3a:b3:2f:74:a8:74:5d:25:c5:
29:ab:3d:bf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUIMTPBnbzVjB1kTPTGGAdhGh5jkYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjUwMTAyMTQzNzAzWhcNMjYwMTAxMTQ0MjAz
WjAzMTEwLwYDVQQDEyhBNTc2NUU0Qjk3NEY2NEU0RjhERDNEOEQ5ODRDMjY0RUVF
RjEyRjZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRbfJ3Lu4DfT
zHu7MLpH1uU3ry60YfXhwPSg7kvkzWH6VQGuzhLvnGKoK+O31kpSBKYLTmZQE9Ij
P21owgO/TVi9Wr+0riiidc8XZRPLsHzWVMkxa/fSxyvZfktYlHHoEydHgOpM7Gkf
UdHYZ5y5su0kwGaSX/YUHPvrhqnQxUtcr3l0vN6gmRFFqjwgr9+xZ20+wvsfUwGh
uYqgAoYLbtz+0jKz06jMCYpx3puyJw/JW6BtjepfGMJmmAI1vjxSlPgf6PrP116G
MAh78IfO9aNY2KOtPU0b+pNEOxHeV1nBNc7hY+7qUBTKp3/JUtJZSsAnTjyV5rHZ
Jn5+1NII6QIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFKV2XkuXT2Tk+N09jZhMJk7u
8S9tMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgYgGCCsGAQUFBwELBHwwejB4
BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3VkLmNv
bS9yZXBvL0ZSQy1DQS8zLzMyMzMyZTMxMzYzOTJlMzIzMjM1MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzczNDM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAXqeEwDQYJKoZIhvcNAQEL
BQADggEBAJIsH6XEelbeYRwPjE6LS2nqV+IQbaySmyl2xVAqQ8H2c1FNX+pGMmCR
9knZnAQvoNLt/jwcDV6QenIa4bfJkUWrgd00gQej0BkKUniQ96dDKHEymF5ls4Sd
RsLxzmp0tWs1xYomYxwSn6bfBRwSZ8joFNWeq+ErL2FJyk260L2fhHSJhfZwpu5w
e3fQy7i9z6CCB8YkVzyvMvyeVWcihPj+jN35cpO9a5ULHxk9GFzPp3GDVbvHubJx
QZXLPK80svNNmMgtR9RbHsyWG5czINSv6e2ZLwrdXJkTxOIm6YbSGN+KajDJD3F0
ouVLdKthwUL2yjqzL3SodF0lxSmrPb8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:17:24 2025 by rpki-client