Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
File:                     AS138166.roa (raw, json)
Hash identifier:          l9rB42b97NYapcE+hF55SC1Rj+AmBMi/Kl8n39yWb5o=
Subject key identifier:   20:AB:66:1F:3A:D1:DB:14:1F:BC:67:5B:64:7B:BF:1E:05:29:84:45
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       260C0673CADC35E61920CE2FD8F8DC0AE13A1E90
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa
Signing time:             Sun 21 Apr 2024 17:16:02 +0000
ROA not before:           Sun 21 Apr 2024 17:11:02 +0000
ROA not after:            Sun 20 Apr 2025 17:16:02 +0000
asID:                     138166
IP address blocks:        2602:fed2:710f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:0c:06:73:ca:dc:35:e6:19:20:ce:2f:d8:f8:dc:0a:e1:3a:1e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Apr 21 17:11:02 2024 GMT
            Not After : Apr 20 17:16:02 2025 GMT
        Subject: CN=20AB661F3AD1DB141FBC675B647BBF1E05298445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:d4:2e:1e:1f:63:a1:81:b7:04:3d:18:ee:
                    88:23:19:98:ff:13:14:fc:55:23:a5:cd:fb:21:64:
                    fc:98:76:fc:31:68:5f:09:ce:74:8a:aa:df:dd:db:
                    fa:6f:22:3f:e0:ad:46:eb:74:bd:f2:e8:39:87:0c:
                    c3:95:40:26:a4:91:22:2e:66:8b:12:7b:87:b6:22:
                    31:1b:d2:f5:33:95:5b:6d:49:99:27:8b:9a:aa:ce:
                    1f:4f:fa:c0:65:be:16:26:86:52:60:04:91:41:ed:
                    22:54:68:c3:7d:02:eb:1c:42:75:7f:6d:d2:4c:ed:
                    4d:27:90:61:cb:15:70:94:42:53:97:e2:e6:ff:a4:
                    e7:87:e1:73:f9:0c:8d:09:09:85:c6:94:fd:0f:37:
                    ea:6f:32:96:0b:46:84:c1:2f:7c:bc:8d:67:99:18:
                    b9:03:7c:8f:26:65:bf:7d:ac:3b:6c:d4:14:28:98:
                    80:ab:0c:50:9a:43:44:1c:d5:51:ae:2c:48:45:2d:
                    ab:8d:d8:25:54:36:4d:66:6d:8f:8b:e0:f6:66:fd:
                    92:5b:91:bf:ee:a1:27:ba:07:80:ff:de:f1:6f:02:
                    0e:dd:54:05:f2:2a:a7:53:42:b9:fb:4f:1b:9e:0f:
                    46:7c:2d:a9:f6:22:7f:b6:6f:34:23:58:75:3d:63:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:66:1F:3A:D1:DB:14:1F:BC:67:5B:64:7B:BF:1E:05:29:84:45
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS138166.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:710f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:fc:12:e5:06:1e:35:b5:62:0d:4b:28:df:7e:4b:2e:68:dc:
         c3:00:11:47:44:24:60:51:94:c9:cc:12:da:a2:a7:90:b9:cb:
         cb:e1:6e:ea:96:6e:2c:ef:0b:36:be:f7:f8:16:41:0d:92:c5:
         61:91:9a:43:26:3c:4d:c7:da:6d:19:cf:1b:af:13:0b:0f:c4:
         04:94:58:7c:56:ca:5b:61:3b:04:ab:ef:29:10:fc:af:17:33:
         99:45:73:3b:55:6c:c5:aa:62:42:67:f5:f6:7c:0b:31:c4:e8:
         ac:c5:11:a6:8b:80:b1:4c:9c:08:f8:e0:59:4a:24:6b:dd:37:
         84:94:49:64:6e:02:e5:1d:e2:22:96:61:6e:17:82:d7:fc:41:
         2d:5c:9f:3a:2d:33:eb:3e:61:94:23:ce:38:eb:93:43:53:0b:
         db:75:0b:13:9a:a6:16:47:c9:74:07:71:04:07:55:9b:8e:5f:
         cc:f7:04:3e:72:94:96:ad:87:86:ae:12:ba:4a:84:42:88:3e:
         b3:72:4a:3c:1c:35:fb:7d:68:d1:be:76:b8:7f:fa:c3:e0:61:
         71:76:37:44:26:11:0e:24:20:02:00:b9:26:65:55:63:02:a3:
         61:f0:b8:18:ed:67:80:bd:4f:32:32:d6:c6:1c:54:3a:95:a3:
         19:a2:eb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org