![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa
File: 323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa (raw, json)
Hash identifier: COSnTQ1rplvlyoeCFdnvCwTHuF2yeJz+zAKJlMHvqWs=
Subject key identifier: 5A:56:CE:29:CE:A9:F9:B8:E4:8E:32:F8:AB:93:FB:3C:19:05:87:6E
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 5224FCAFE829D5F839C3CAA6D2CF13AE77AC3C09
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa
Signing time: Thu 16 Dec 2021 03:26:19 +0000
ROA not before: Thu 16 Dec 2021 03:21:19 +0000
ROA not after: Thu 15 Dec 2022 03:26:19 +0000
asID: 53356
IP address blocks: 2602:fed2:730b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:24:fc:af:e8:29:d5:f8:39:c3:ca:a6:d2:cf:13:ae:77:ac:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Dec 16 03:21:19 2021 GMT
Not After : Dec 15 03:26:19 2022 GMT
Subject: CN=5A56CE29CEA9F9B8E48E32F8AB93FB3C1905876E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:c2:76:02:9a:d5:11:d3:cf:1e:44:be:75:
b8:e0:98:7e:d3:d9:e7:b8:45:cb:1e:f2:d2:6c:b3:
ff:6f:e1:5c:c9:c5:b5:1b:a2:11:12:c1:f9:d3:ac:
f0:6f:7c:85:73:ab:1d:91:86:27:0f:60:09:8b:e7:
e1:f5:05:f0:ae:d4:72:d2:49:9d:de:e3:2d:cb:0c:
d3:64:4e:37:52:77:08:bb:bd:e9:14:a3:1d:dd:5e:
7f:87:f6:6d:79:60:4f:83:15:9d:b4:f2:2a:ef:9f:
e1:20:cb:bf:16:9b:44:22:45:5c:31:c5:1e:41:23:
e2:60:74:04:1e:bd:d6:1f:6c:c0:d5:53:30:05:d2:
22:63:82:26:bd:a3:3f:1c:16:2a:33:02:b3:1d:b0:
c4:c0:82:34:0a:c5:b0:26:cc:a1:4c:7c:66:c5:63:
d3:cd:50:04:1f:4a:8b:44:93:3d:2e:23:3d:ed:64:
4a:fa:a0:c7:02:82:ad:d9:c2:b6:c5:6f:0e:f6:5f:
f0:b1:d2:9b:6e:1f:17:5e:ca:ab:1d:0b:ff:e0:d4:
4a:f5:0b:5a:4c:17:9b:38:ca:4d:8d:26:36:b2:ee:
cd:03:fa:32:99:9d:56:e9:c7:d9:25:7c:9d:6b:84:
f0:da:97:d6:1b:70:69:66:13:c4:00:4b:32:c9:58:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:CE:29:CE:A9:F9:B8:E4:8E:32:F8:AB:93:FB:3C:19:05:87:6E
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/323630323a666564323a373330623a3a2f34382d3438203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:730b::/48
Signature Algorithm: sha256WithRSAEncryption
5f:c5:df:9c:39:dc:bc:29:2c:a5:b9:8a:8b:dc:27:5c:ac:9c:
41:9f:0d:58:86:a7:80:51:57:58:ac:80:28:6a:3b:9f:1c:34:
cc:d6:96:f3:11:9e:b7:14:83:14:bc:4f:53:ff:ed:72:6b:e7:
55:80:72:f5:96:3c:b1:2f:ef:78:67:4b:42:23:45:68:e7:04:
0d:9a:aa:6b:9e:77:90:d9:94:be:c3:93:89:54:06:1c:19:d3:
4d:d3:ab:5d:87:cf:17:79:ef:cf:36:c3:f9:05:5d:6b:e2:fc:
89:9a:06:91:d1:d1:c8:e3:55:03:46:b0:56:3c:ae:c3:a1:85:
b4:db:da:85:35:14:4e:19:f9:43:1c:60:b7:73:14:69:dd:cf:
aa:90:da:e9:29:1f:85:4a:72:f6:41:00:da:2b:98:36:d9:16:
18:13:4f:93:27:79:0c:66:25:ca:95:74:fe:ec:d8:25:b0:b5:
e1:3c:ab:4a:23:7d:34:17:70:4a:32:18:be:1e:94:df:cf:60:
39:a1:f6:40:72:24:2b:37:21:6f:7e:f5:b2:f8:cf:d5:5e:4b:
03:37:09:2f:9e:da:9a:de:07:b0:f9:77:b9:0d:e3:78:ee:27:
73:8c:fe:ac:aa:e2:bb:b6:f0:dd:4f:61:71:76:6c:c6:65:43:
de:67:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:10 2025 by rpki-client