Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397877.roa
File:                     AS397877.roa (raw, json)
Hash identifier:          racQH4spsW8jlOCw5ByZ1JwNOBnyNIQlYF9yQQXovA0=
Subject key identifier:   76:E8:3D:65:8D:C4:CD:4D:56:AB:A5:C4:38:79:38:67:1F:FD:36:36
Certificate issuer:       /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial:       32FAF1EB5F8D531F9E23BC793C860C2EDB76A722
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397877.roa
Signing time:             Sat 24 Aug 2024 06:23:17 +0000
ROA not before:           Sat 24 Aug 2024 06:18:17 +0000
ROA not after:            Sat 23 Aug 2025 06:23:17 +0000
asID:                     397877
IP address blocks:        2602:fed2:7041::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/6e5d9611-fd33-488c-9aec-f4df2a25351e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fa:f1:eb:5f:8d:53:1f:9e:23:bc:79:3c:86:0c:2e:db:76:a7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
        Validity
            Not Before: Aug 24 06:18:17 2024 GMT
            Not After : Aug 23 06:23:17 2025 GMT
        Subject: CN=76E83D658DC4CD4D56ABA5C4387938671FFD3636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:43:0b:e3:8c:7a:19:05:bf:b7:0b:a0:d6:
                    43:93:08:56:9e:b2:ba:1a:7c:ea:c9:64:40:2e:e2:
                    fd:91:ec:6a:7a:0c:c9:5c:91:de:9f:3e:c1:4a:ba:
                    ab:fe:08:bc:7f:b9:42:3a:c3:08:d3:27:10:ab:6e:
                    04:7c:7b:52:16:d3:22:37:ab:1c:6b:5a:23:3b:da:
                    6a:0e:bc:ac:f1:09:b9:57:68:84:71:93:33:a0:b2:
                    b3:3e:dc:38:c0:23:c7:3c:b4:29:dc:65:77:96:21:
                    ae:ef:bd:01:60:e7:bf:b4:aa:1d:8e:f8:8a:24:80:
                    2a:0d:ef:90:32:03:8f:f2:03:78:ca:df:8b:0b:8e:
                    d6:3a:60:5c:5f:79:33:22:a3:6e:88:b4:c2:68:30:
                    95:af:b9:10:e0:fb:b6:f8:3e:bf:1d:d8:3a:31:3e:
                    b8:ed:38:ed:ff:f9:a2:6c:f2:b8:f7:b8:3b:4c:25:
                    71:f8:22:7f:c7:79:10:b0:8c:b5:f6:84:ca:b6:03:
                    84:96:dd:79:28:1d:e4:00:9b:05:7d:b9:6e:24:61:
                    9b:4f:21:e8:40:1d:63:3c:c1:2a:83:36:52:8a:47:
                    20:d3:16:c3:bb:45:1b:13:3e:6d:a2:5f:6b:0f:ba:
                    88:f9:0f:ac:a6:88:42:ac:43:3d:b0:34:00:3c:03:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:3D:65:8D:C4:CD:4D:56:AB:A5:C4:38:79:38:67:1F:FD:36:36
            X509v3 Authority Key Identifier:
                keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS397877.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fed2:7041::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:85:6b:77:e8:b6:ce:3b:c3:3f:8d:7a:f2:e1:05:2a:fa:59:
         00:89:66:62:31:e4:f9:cb:31:34:e2:dc:89:2d:17:d0:1d:4e:
         55:5d:03:8a:b0:4a:57:df:09:33:bb:66:e1:a9:cf:4c:3c:8f:
         3b:5b:84:16:3f:aa:ef:ed:4d:fe:16:04:0e:26:e5:80:e7:ba:
         4f:46:d9:b2:33:ec:88:49:3f:48:3e:4d:7d:c4:ac:c7:22:3d:
         f2:6d:7b:48:7c:a2:d8:6c:fb:95:31:d0:eb:7d:73:54:bd:bf:
         28:48:ad:19:45:49:89:15:f6:ba:a4:30:6e:6f:a4:71:57:97:
         be:84:ad:c3:f3:e5:7b:55:52:81:de:ca:f4:8e:c0:ef:96:53:
         69:36:9e:af:92:76:ad:08:4c:0b:8c:90:83:53:7e:dc:68:42:
         17:18:1b:93:89:aa:b8:c8:9c:d4:0f:1e:c0:c4:09:48:ea:4f:
         00:2c:95:7b:fa:02:9a:47:bc:35:c3:45:f7:35:f6:3b:83:5e:
         ad:e3:9a:63:73:b9:1c:a4:e0:15:52:4c:b0:fd:54:ba:c6:7d:
         9b:f3:81:86:03:e8:7a:6d:c6:fa:4f:3c:d2:a0:df:f6:17:4f:
         0a:cb:e8:94:c9:b7:20:32:fc:73:e2:99:df:2c:8e:bc:24:24:
         1f:a7:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:35:04 2024 by rpki-client on console-ams.rpki-client.org