Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
File:                     AS33696.roa (raw, json)
Hash identifier:          Grjg87Illenfm6WraY0MgI3CZ+cFZVRYWrT2o/qlG5E=
Subject key identifier:   52:C2:C0:57:FE:DA:05:DB:86:CB:26:AC:79:EA:5E:EA:97:A7:E3:19
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       37417C3AF8C1E025606676BA52B281F264E81E94
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa
Signing time:             Thu 19 Oct 2023 17:04:12 +0000
ROA not before:           Thu 19 Oct 2023 16:59:12 +0000
ROA not after:            Thu 17 Oct 2024 17:04:12 +0000
asID:                     33696
IP address blocks:        2602:fed2:7195::/48 maxlen: 48
                          2602:fed2:7307::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 03:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:41:7c:3a:f8:c1:e0:25:60:66:76:ba:52:b2:81:f2:64:e8:1e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Oct 19 16:59:12 2023 GMT
            Not After : Oct 17 17:04:12 2024 GMT
        Subject: CN=52C2C057FEDA05DB86CB26AC79EA5EEA97A7E319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ef:0c:09:1a:f8:93:74:f4:4f:cb:5a:56:0c:
                    1f:4a:37:11:b6:c6:7b:36:bd:c7:6b:65:4a:d8:be:
                    6a:20:45:d2:66:b5:34:38:65:e9:82:0e:dd:9b:5b:
                    2f:24:49:2e:e8:97:ca:89:35:5a:43:ed:55:c1:d8:
                    eb:a4:b3:38:86:1e:40:e4:35:84:bb:2c:1b:a5:d2:
                    22:1b:91:d0:30:c2:b5:f2:7e:30:10:12:1d:c8:22:
                    91:39:86:3d:0c:4b:90:9a:53:4f:58:45:41:83:e0:
                    27:80:0b:40:24:d8:2d:ac:3e:0f:59:be:9b:07:9a:
                    3e:98:44:89:a7:23:5c:3c:ec:63:08:89:01:1f:fc:
                    fe:cd:49:6b:f8:7b:00:43:64:88:e2:83:3c:3d:2d:
                    b6:39:cf:67:ff:eb:6d:1c:f6:02:e5:87:6b:b2:15:
                    9b:fc:84:fe:01:f5:bd:fb:f5:cd:4f:2f:46:5b:d9:
                    4e:7a:15:38:ca:b1:0a:ac:90:29:02:db:40:ed:6a:
                    5b:e3:48:2d:5a:41:f0:61:3b:1f:24:14:32:37:cd:
                    a4:f7:fc:50:3c:70:7b:da:96:57:2e:2f:31:c6:b1:
                    f9:fa:59:16:1f:9b:7a:b7:b6:7b:94:09:3c:a1:06:
                    d6:ad:96:c5:41:f8:b1:5e:07:31:9b:dc:4d:77:b3:
                    16:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C2:C0:57:FE:DA:05:DB:86:CB:26:AC:79:EA:5E:EA:97:A7:E3:19
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS33696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7195::/48
                  2602:fed2:7307::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:17:9b:7d:07:a0:5b:48:e4:c7:f2:a6:f3:43:9a:2b:95:
         fb:04:64:1b:83:6c:9d:65:d5:16:4a:98:94:5d:02:9d:13:99:
         ea:b9:41:53:c8:d2:22:91:0a:d0:58:e1:7f:95:81:a0:10:7d:
         c9:cc:a7:0c:30:25:c4:07:86:0c:cb:32:b5:f8:63:a9:bd:9f:
         0f:10:5d:4c:16:64:f3:44:65:86:ee:df:86:d4:92:cf:c8:da:
         37:90:c4:47:97:6e:c3:dd:02:b6:b6:68:9e:6d:b2:e2:7b:34:
         f9:97:05:1f:4b:da:07:c9:dd:12:48:64:20:a9:d5:c3:86:1d:
         99:aa:55:33:34:10:3e:0b:22:bc:0d:29:b1:5e:d0:9a:8c:60:
         0b:3f:95:50:0c:a7:e3:46:67:37:c7:ec:70:62:4e:57:f6:1d:
         79:8c:b0:c8:d1:0d:c2:c8:15:8a:1e:f1:48:34:e6:0c:bb:1c:
         a8:6e:81:aa:50:20:3a:23:8f:3c:b1:6c:1c:c9:15:06:9d:e4:
         ac:25:9e:f4:2c:dc:51:01:91:c7:d0:b1:8b:4e:c4:83:3d:db:
         6d:01:61:bc:d6:39:80:6d:73:cf:72:1a:e5:95:6c:ab:b8:25:
         1c:d3:28:c9:9b:88:fb:0e:e0:41:8d:5d:92:13:fb:68:2a:5e:
         bb:68:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:49:46 2024 by rpki-client on console-fra.rpki-client.org