![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131653a3a2f34382d3438203d3e203230343733.roa
File: 323630323a666564323a373131653a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier: MHKoj1IqnP8QV8dQ+IplCsHkkSTmT7QD6nKcPw8j22I=
Subject key identifier: B8:00:1E:C0:26:AD:2F:41:B8:AC:20:5F:9C:74:A2:72:AE:3B:6D:92
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 75DEDDA7054980E8E4217DBF0AD2884BCE710819
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131653a3a2f34382d3438203d3e203230343733.roa
Signing time: Thu 16 Dec 2021 03:26:23 +0000
ROA not before: Thu 16 Dec 2021 03:21:23 +0000
ROA not after: Thu 15 Dec 2022 03:26:23 +0000
asID: 20473
IP address blocks: 2602:fed2:711e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:de:dd:a7:05:49:80:e8:e4:21:7d:bf:0a:d2:88:4b:ce:71:08:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:23 2021 GMT
Not After : Dec 15 03:26:23 2022 GMT
Subject: CN=B8001EC026AD2F41B8AC205F9C74A272AE3B6D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:45:d3:73:66:dd:2c:10:74:f6:eb:da:14:
ff:b4:03:ad:1e:b1:91:06:3b:56:9d:25:88:c3:59:
da:39:0d:86:8c:6c:cc:a2:33:48:1f:0d:ee:53:be:
89:a0:42:c0:1a:cb:5d:19:85:a9:d9:32:82:d8:63:
0c:c2:de:01:d9:c1:64:ff:4b:31:65:d8:24:fb:15:
2b:c7:9f:a0:6e:48:da:9c:7b:a7:e2:d2:cf:9d:6c:
33:ef:47:00:51:ff:c9:f1:58:44:b2:d0:d6:5a:84:
97:74:8f:fa:d0:d0:2d:42:38:31:7b:1b:95:4f:e2:
d3:00:13:d7:10:ac:d0:93:79:05:ba:43:a7:1f:8e:
7b:4e:7e:d3:09:90:03:f1:ff:6d:0e:85:27:6d:af:
35:2c:ca:39:74:d2:25:8d:80:f1:c5:ab:d8:e2:12:
89:8c:ae:3b:9d:e7:ab:a1:4a:86:13:fb:af:90:74:
07:d9:05:e3:03:9f:71:a4:3c:60:1a:66:8d:2b:8f:
bc:d6:29:67:06:b3:f1:79:40:b2:be:ec:e7:ff:fb:
cf:20:a9:dc:e5:bf:26:47:89:8f:57:0f:9e:e1:1d:
7d:93:5c:62:f0:9e:e0:59:2d:e8:1f:ab:b8:e6:00:
a0:37:75:31:9c:3b:b6:16:0a:4d:98:9a:26:1a:a2:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:1E:C0:26:AD:2F:41:B8:AC:20:5F:9C:74:A2:72:AE:3B:6D:92
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373131653a3a2f34382d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:711e::/48
Signature Algorithm: sha256WithRSAEncryption
08:d3:2b:8c:2d:9b:83:b0:8e:fc:e1:45:a2:0e:4b:99:2c:54:
a7:f3:5b:cd:db:1e:aa:cf:37:27:a2:a8:86:09:10:d1:06:b6:
c9:7a:ba:5c:5b:1d:46:0f:b7:e4:ca:b9:c0:4e:64:df:9c:0f:
d2:fd:39:44:06:55:ad:d0:36:c1:df:7c:be:25:71:1e:96:f1:
9d:85:58:80:9a:85:95:fa:9b:8a:32:0e:e3:7a:6e:55:01:f2:
f8:88:0e:94:80:88:f8:c7:9c:de:36:b5:ea:8d:22:84:c4:73:
aa:2f:e4:6d:27:3c:01:2f:5c:86:64:cc:9b:ca:d2:49:76:1d:
57:06:82:f1:22:02:09:de:a7:2c:8b:a0:54:6b:4a:fc:89:5f:
5b:1a:37:8d:43:50:e9:8a:92:03:8d:1c:4e:d4:ed:1d:ab:79:
46:a4:7e:fd:e7:95:51:39:76:c4:8d:9d:ba:6b:c1:80:63:a3:
16:f0:68:f9:bb:47:a7:73:93:0a:32:33:36:90:19:87:38:52:
48:4f:35:77:81:1c:1a:68:4c:24:0b:bc:01:a7:ee:8e:5a:d2:
aa:7c:32:10:76:55:6e:57:07:2c:02:59:d0:67:3b:9a:ca:35:
f5:5c:b4:86:bb:fc:9f:4f:44:3c:f0:5d:8f:54:f0:80:e1:23:
51:b5:a6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:48 2025 by rpki-client