Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
File:                     AS39753.roa (raw, json)
Hash identifier:          EeRj//ZNR7T+SZpkpRPJjSrqlrCkQF1ow1jMCaYzOo8=
Subject key identifier:   23:08:37:EA:62:13:F3:7D:0B:23:DE:1D:E6:98:12:3F:63:3B:1A:A6
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       7B57B8432C977EB48D05ABF8B8DFC8FA98AC7D00
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa
Signing time:             Tue 15 Aug 2023 02:00:28 +0000
ROA not before:           Tue 15 Aug 2023 01:55:28 +0000
ROA not after:            Tue 13 Aug 2024 02:00:28 +0000
asID:                     39753
IP address blocks:        2602:fed2:7020::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 18:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:57:b8:43:2c:97:7e:b4:8d:05:ab:f8:b8:df:c8:fa:98:ac:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 15 01:55:28 2023 GMT
            Not After : Aug 13 02:00:28 2024 GMT
        Subject: CN=230837EA6213F37D0B23DE1DE698123F633B1AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:0c:2a:76:35:0a:30:ec:3a:b9:44:bf:e5:
                    d5:45:a7:ab:1c:97:52:27:22:58:69:29:6e:85:62:
                    47:d7:24:ed:27:01:ac:9b:c8:dd:75:ea:8a:50:48:
                    fa:4a:ad:56:e8:ff:2b:f9:00:58:c5:2b:a9:6f:09:
                    15:79:78:ed:cf:16:49:ff:ff:6e:1b:1a:20:a5:0e:
                    19:05:04:e1:b3:7a:df:33:48:bc:15:bf:28:98:0b:
                    78:e5:df:16:cc:db:dd:f4:70:90:b9:b2:ba:9c:96:
                    a9:9b:13:4b:e4:b4:3c:b3:70:29:0d:c1:9e:ad:47:
                    32:22:61:f7:9e:a3:35:03:a2:b9:10:e1:d4:e6:8a:
                    d5:45:a4:52:17:a3:97:6e:7e:b2:9f:0b:e4:fd:a0:
                    f6:f8:db:d6:3e:2e:62:a7:5a:96:6b:b2:b6:b8:66:
                    85:cb:8c:d0:12:54:97:e8:4b:4c:b2:88:2b:29:6b:
                    e4:95:e1:5d:2c:9f:03:d6:6b:10:46:5b:89:49:2c:
                    0a:cd:ab:01:8f:d4:2e:e5:0a:75:41:cf:2c:fd:40:
                    e6:5f:60:e0:f8:9d:9a:2e:76:f0:43:06:aa:16:bc:
                    70:87:37:b2:99:12:6b:6a:c3:48:68:a0:ba:d2:2c:
                    11:3e:ca:4c:7e:f5:75:1d:4f:1a:07:a9:87:eb:96:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:37:EA:62:13:F3:7D:0B:23:DE:1D:E6:98:12:3F:63:3B:1A:A6
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS39753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:72:6e:5e:a6:7a:42:5a:63:2b:3b:36:69:df:03:30:e7:f4:
         db:f4:43:e4:61:71:18:a9:8d:5b:c8:54:26:82:c2:30:1f:95:
         44:ef:c6:4c:79:40:54:c4:b0:86:03:30:25:0a:de:9a:f5:4c:
         36:26:49:2a:f1:b4:aa:15:89:48:e3:e6:e9:18:a0:5c:df:30:
         a8:db:e8:89:03:19:81:7f:e4:c2:61:a1:9f:04:7d:8c:a7:60:
         03:33:e4:b7:05:d4:d8:e9:b4:fe:5d:15:97:50:08:c2:2a:af:
         ed:0d:e2:3d:37:73:a2:34:92:bd:aa:3e:59:f8:da:d2:4c:fd:
         60:9b:d7:e0:d7:3f:d8:fd:3c:1f:26:37:88:0a:ea:f4:a6:8b:
         fd:13:bf:0e:36:31:c3:20:58:89:8a:ce:fb:03:90:a8:cb:54:
         f6:e9:72:a7:11:a4:12:bc:ee:73:f6:e1:e9:22:30:9e:3e:2e:
         a0:56:2c:22:aa:39:75:b5:2b:3d:2f:da:9b:7b:69:83:44:c6:
         b9:9f:64:9a:66:88:d8:91:b1:eb:fe:e5:b3:2a:bc:d2:ab:47:
         83:97:ff:c7:8b:86:e0:1b:b1:bd:2c:50:89:0c:37:ed:a8:76:
         f8:70:cc:68:dc:68:11:e8:de:80:e5:62:a0:c5:45:9b:5d:0a:
         34:49:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:17:55 2024 by rpki-client on console-ams.rpki-client.org