Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
File: AS33696.roa (raw, json)
Hash identifier: wsax1qwmfD39em2F3mySmCJy8ccS3pWEm3xiao/s1kM=
Subject key identifier: E4:BF:D9:C3:98:50:7D:6F:51:85:FA:84:D6:BB:28:8F:4B:A2:BA:F8
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 3802C856D790E310463707800EFE1985834F81E1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
Signing time: Thu 19 Sep 2024 17:10:11 +0000
ROA not before: Thu 19 Sep 2024 17:05:11 +0000
ROA not after: Thu 18 Sep 2025 17:10:11 +0000
asID: 33696
IP address blocks: 2602:fed2:7195::/48 maxlen: 48
2602:fed2:7307::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:02:c8:56:d7:90:e3:10:46:37:07:80:0e:fe:19:85:83:4f:81:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Sep 19 17:05:11 2024 GMT
Not After : Sep 18 17:10:11 2025 GMT
Subject: CN=E4BFD9C398507D6F5185FA84D6BB288F4BA2BAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:d1:78:97:68:9b:2c:06:ff:d5:cc:51:cb:
ab:f3:c7:86:03:c3:65:6c:84:95:b3:85:c9:f4:ee:
ac:d0:75:01:08:d1:03:de:60:6f:44:49:90:a0:26:
ca:63:9b:39:a2:55:40:9e:41:83:cb:3e:12:1d:cb:
55:b3:9e:01:6f:a3:8c:40:6a:6c:32:a3:9e:28:b8:
73:08:cb:c4:a2:1e:33:2c:88:24:d4:a5:51:3d:da:
94:d3:ac:ba:4c:42:98:36:9f:af:3b:24:5b:48:97:
0b:3a:ff:3a:04:2c:e4:f5:a9:c9:cb:b0:7f:af:be:
65:bc:20:34:d6:ab:2a:80:dc:24:b7:25:4f:c3:18:
ee:69:1e:ba:9e:f2:cf:5c:d3:72:35:ab:f3:7d:f2:
04:b3:30:bb:21:8c:a2:4a:7c:e2:c9:a8:1e:4c:61:
73:14:de:97:72:0f:82:72:73:6d:03:11:5c:81:3f:
34:9e:04:c0:7c:19:02:ca:b1:1f:fa:b5:aa:a8:f2:
85:af:11:8f:93:f1:70:ea:4c:9e:f1:bf:d4:70:cd:
04:dc:1a:68:af:c0:52:cb:4b:e6:bf:55:8c:88:06:
7a:1a:a8:48:aa:bc:25:2d:ee:1b:90:81:83:b5:4a:
40:a1:06:8d:79:b3:63:a8:77:7a:9a:4c:96:d0:d2:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BF:D9:C3:98:50:7D:6F:51:85:FA:84:D6:BB:28:8F:4B:A2:BA:F8
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7195::/48
2602:fed2:7307::/48
Signature Algorithm: sha256WithRSAEncryption
7b:61:27:b9:c8:ae:ce:fe:c9:5a:48:d3:65:1e:20:95:c4:ac:
f2:42:bd:c6:be:8d:0b:aa:c2:5c:d7:f6:b8:65:5c:76:a2:00:
9b:97:25:27:fb:53:da:ab:7b:e1:61:94:c3:09:21:05:fc:5a:
33:de:84:4f:72:ae:d3:16:2c:ac:68:7b:c4:34:5d:3f:e5:55:
50:6a:3a:55:fa:30:a4:2f:34:bb:59:a2:3f:66:b5:9d:2b:bf:
59:0b:42:5f:40:ac:0f:c8:47:69:60:15:52:dc:fc:27:17:4d:
c2:31:68:30:58:b2:f7:e7:ba:d4:6e:79:d3:56:b4:c7:e2:3b:
58:dd:2e:91:27:2a:2a:ca:2d:ec:1b:29:4e:fd:e4:09:a3:de:
a6:e1:1a:ec:47:bb:2b:26:0c:3c:2e:34:b4:c7:b5:35:07:66:
a2:81:d9:6c:62:1d:51:cb:00:49:a4:ca:02:26:7a:c1:47:0d:
5b:d3:64:aa:30:7c:ba:6a:77:8c:ca:0f:0f:41:98:8d:65:3b:
f8:34:0c:b7:c1:cd:c1:9b:53:59:59:01:72:01:e2:3e:ab:7a:
6f:22:6a:34:a6:16:b1:1e:b0:1b:18:cb:85:7f:ff:be:ae:9d:
e9:13:08:e3:ae:ca:ce:dc:75:76:ff:7f:9a:49:2d:49:89:b5:
6d:78:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:12:23 2025 by rpki-client