Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: E3KTBxaPs3oHFmTaB3/Szaywy6IrfP8yEefF17l1ujk=
Subject key identifier: 73:97:A1:78:1A:87:FB:57:3C:5C:84:A4:82:B5:30:88:0E:FD:6C:7A
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 13D23020EC97FA8E122D543AECE21C77B2DC62EF
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
Signing time: Wed 26 Feb 2025 00:37:34 +0000
ROA not before: Wed 26 Feb 2025 00:32:34 +0000
ROA not after: Wed 25 Feb 2026 00:37:34 +0000
asID: 20473
IP address blocks: 2602:fed2:710e::/48 maxlen: 48
2602:fed2:710f::/48 maxlen: 48
2602:fed2:7110::/48 maxlen: 48
2602:fed2:719a::/48 maxlen: 48
2602:fed2:719c::/48 maxlen: 48
2602:fed2:719e::/48 maxlen: 48
2602:fed2:730d::/48 maxlen: 48
2602:fed2:7316::/48 maxlen: 48
2602:fed2:731c::/48 maxlen: 48
2602:fed2:7e08::/48 maxlen: 48
2602:fed2:7e81::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:d2:30:20:ec:97:fa:8e:12:2d:54:3a:ec:e2:1c:77:b2:dc:62:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Feb 26 00:32:34 2025 GMT
Not After : Feb 25 00:37:34 2026 GMT
Subject: CN=7397A1781A87FB573C5C84A482B530880EFD6C7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:17:ca:f3:f2:32:43:3b:f2:31:4b:68:8d:
dc:af:3a:0f:6d:d5:a5:56:df:e4:0b:22:4a:68:6d:
c6:4e:ba:b0:b6:39:24:e6:13:df:44:0a:19:c2:51:
d9:9e:eb:e9:8d:f0:df:ba:29:9e:f0:49:f9:db:cf:
5d:c4:21:b7:32:6a:22:8a:6f:82:5d:aa:ca:a1:bb:
5e:8b:c2:de:58:e4:d7:56:c2:16:dc:f9:73:31:a2:
c9:c3:62:bd:c1:97:3f:60:e3:7e:b0:cc:80:0e:99:
0c:d4:9e:a9:a5:ce:66:3a:33:bf:4a:8f:bd:ae:75:
3d:5b:2a:57:88:27:75:90:7a:dc:5b:5c:35:37:3e:
a7:84:97:7b:9b:03:60:e3:67:b0:5a:69:2d:a9:a2:
1e:6b:21:c7:33:97:dc:18:b7:ff:79:32:59:f3:62:
3b:97:70:2f:dc:91:3b:9c:dc:91:53:97:6a:b2:7b:
ba:6f:03:75:07:7c:72:95:38:6b:0a:e0:c7:16:63:
0a:dc:95:89:e2:11:79:db:41:cf:66:97:f4:49:6c:
87:a8:99:68:0b:54:24:50:c0:f2:76:bb:0f:93:12:
4a:03:1b:05:34:77:59:a0:db:86:00:5b:97:fd:24:
b2:a1:c7:75:4b:91:92:da:7c:4e:2a:7a:cc:0b:43:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:97:A1:78:1A:87:FB:57:3C:5C:84:A4:82:B5:30:88:0E:FD:6C:7A
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:710e::-2602:fed2:7110:ffff:ffff:ffff:ffff:ffff
2602:fed2:719a::/48
2602:fed2:719c::/48
2602:fed2:719e::/48
2602:fed2:730d::/48
2602:fed2:7316::/48
2602:fed2:731c::/48
2602:fed2:7e08::/48
2602:fed2:7e81::/48
Signature Algorithm: sha256WithRSAEncryption
9d:f5:d9:62:d3:20:38:4e:f6:4a:97:b9:e5:70:82:3c:4f:93:
22:b0:b7:6d:66:56:1a:45:4c:18:3d:b0:a3:cd:a7:e6:69:8b:
30:a1:9b:76:ed:cf:42:1c:e2:68:03:d8:cc:71:26:80:56:72:
4d:d4:18:a3:48:91:c6:ed:6e:a6:b4:70:96:0d:c5:a2:f6:ad:
90:f5:e0:41:01:bb:02:05:4d:c7:30:94:a7:47:19:60:e9:aa:
c3:a2:9b:a6:37:c8:d4:d7:95:6b:05:47:b8:b7:e1:c1:68:1d:
3f:69:96:b5:8c:35:83:9e:62:59:6b:43:8a:e2:df:de:a7:5c:
f9:a9:77:6b:2b:7f:29:1c:87:c4:ae:32:1b:b4:2e:22:f4:42:
b7:95:27:4c:83:3d:3e:ea:ad:11:70:bb:58:c1:70:83:4e:37:
a7:a2:9e:6e:3e:f3:c3:de:be:00:6b:1c:69:89:63:d9:0d:bf:
2d:57:2a:11:4f:b5:92:db:46:d6:2b:02:80:be:79:7c:ce:bf:
e8:ef:bc:15:6d:f4:46:59:62:05:e1:d6:2e:d9:a2:7a:a8:8e:
a4:18:0d:c3:92:99:3a:1d:d6:e6:3f:c0:fd:9d:7c:41:96:ba:
18:e8:5f:1d:09:bf:03:47:a9:05:06:18:93:0d:b4:48:ab:ae:
1c:0a:77:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:58:29 2025 by rpki-client