Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS139677.roa
File:                     AS139677.roa (raw, json)
Hash identifier:          2ZLDx0twG841f+BC9XQI8Vpl+tHrPEy/nDxnN+y6/wo=
Subject key identifier:   43:3F:29:27:54:AE:BC:CF:B5:82:E4:A6:DC:DD:38:FC:C3:0F:FA:48
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       25D26877D051698564A220BC76A14DD3FB5B7BA4
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS139677.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     139677
IP address blocks:        2602:fed2:7110::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:68:77:d0:51:69:85:64:a2:20:bc:76:a1:4d:d3:fb:5b:7b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=433F292754AEBCCFB582E4A6DCDD38FCC30FFA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:88:af:ee:2b:1d:05:3b:ce:c3:01:93:5c:
                    77:18:a0:9b:55:63:ef:d6:77:0e:94:8b:9d:d4:70:
                    a3:f9:76:72:ad:84:3a:da:f3:38:e9:aa:91:50:49:
                    07:fe:f3:53:1a:df:55:b0:b7:0d:63:f8:df:02:5c:
                    49:fb:6e:76:3c:5e:f2:dc:8e:7c:be:d2:01:1d:d4:
                    49:e4:c9:a3:30:63:04:3a:ec:f4:c5:d4:59:f8:57:
                    44:bf:42:0a:05:f6:e8:3a:bd:8c:bc:f5:24:1a:9e:
                    5d:2a:82:f3:88:6b:4e:60:aa:1a:8d:6d:55:66:49:
                    ea:b7:58:7f:61:6c:48:2c:e4:02:ca:2d:a0:c4:19:
                    73:7f:11:d8:57:91:84:2c:75:29:3a:34:52:f1:f1:
                    67:2a:9d:fa:50:1c:95:3a:05:a5:ca:57:2e:d6:24:
                    9a:d9:fd:f2:19:44:30:f3:5a:d8:fe:e2:38:50:80:
                    08:da:73:33:38:9d:81:e9:b2:db:a9:e3:0a:54:07:
                    8d:d0:c0:09:7e:10:f5:b7:e8:5a:ad:62:19:92:d5:
                    26:cb:77:41:3d:ad:a1:20:45:a3:89:1f:b2:0e:d9:
                    99:46:e4:a5:80:89:15:3f:33:ee:4f:df:50:a8:bb:
                    67:0d:62:7c:fd:07:ed:e6:1f:ef:5c:5b:30:7b:88:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3F:29:27:54:AE:BC:CF:B5:82:E4:A6:DC:DD:38:FC:C3:0F:FA:48
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS139677.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7110::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:72:de:af:26:6c:1e:2e:94:86:89:7f:b1:b1:41:8c:9d:2e:
         d8:0a:92:3f:26:8c:1d:e9:b8:d8:39:3d:12:ac:09:5d:bb:5d:
         c4:a5:c6:03:5c:d4:98:11:f7:42:5f:31:94:b8:b6:cc:6a:e6:
         48:2b:bb:17:c6:92:6e:f7:87:c5:3b:96:58:ba:cf:82:aa:92:
         8c:11:cd:a8:22:d7:0c:56:79:5d:17:6d:3b:d5:17:96:4e:d3:
         4a:e2:b7:1d:b6:27:7f:ce:a5:12:a4:35:cd:51:61:db:64:23:
         bb:06:61:bd:81:be:aa:f2:71:9c:d8:7a:fc:a8:ed:26:54:81:
         b5:cb:ed:17:04:fc:b8:db:a9:d0:a6:af:9e:8e:6d:85:a2:86:
         7b:a9:c9:c1:73:46:85:ff:7c:3c:8a:f0:02:6b:f2:93:b7:41:
         7d:e3:30:cd:ea:c6:2b:06:cc:5b:62:6e:ca:78:0d:20:f9:1c:
         0e:a5:2a:2c:e8:23:29:21:c5:1f:b8:65:e6:3a:6d:46:ec:55:
         7c:ee:fb:5b:1a:e6:46:69:1c:06:08:f4:d7:b5:a8:6d:e1:4e:
         7d:3f:be:95:76:4a:4c:b0:2b:d8:b7:6e:a4:9a:e4:b4:7d:d2:
         de:ca:90:5f:87:d8:df:65:5d:1d:47:d8:2a:d3:30:d8:c7:73:
         c0:df:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:16 2024 by rpki-client on console-fra.rpki-client.org