Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
File: AS400298.roa (raw, json)
Hash identifier: qksvOMc/r4e8HAo1PpHgOYSyUZBirTPXKaZKdBapo1Q=
Subject key identifier: D8:F2:1A:B1:2A:99:CE:61:FD:65:DF:A1:18:7C:2D:E7:74:A5:89:5F
Certificate issuer: /CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Certificate serial: 6A1072DE50C1B3E38B21D59085B9494CA7B688F1
Authority key identifier: C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
Signing time: Sat 08 Feb 2025 23:34:15 +0000
ROA not before: Sat 08 Feb 2025 23:29:15 +0000
ROA not after: Sat 07 Feb 2026 23:34:15 +0000
asID: 400298
IP address blocks: 2602:fed2:7081::/48 maxlen: 48
2602:fed2:7086::/48 maxlen: 48
2602:fed2:7089::/48 maxlen: 48
2602:fed2:730e::/48 maxlen: 48
2602:fed2:7e85::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:10:72:de:50:c1:b3:e3:8b:21:d5:90:85:b9:49:4c:a7:b6:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855
Validity
Not Before: Feb 8 23:29:15 2025 GMT
Not After : Feb 7 23:34:15 2026 GMT
Subject: CN=D8F21AB12A99CE61FD65DFA1187C2DE774A5895F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:0d:81:d4:e7:da:fe:38:61:be:f1:78:e3:
56:54:c1:3f:18:48:15:1c:4f:f4:cc:91:58:a0:3b:
83:93:31:36:6b:28:0c:82:51:8c:40:09:70:68:f7:
2c:49:6c:19:67:28:b6:6e:6f:fd:15:66:49:67:4d:
ec:a1:0f:b9:8f:b9:83:ae:c4:ad:76:da:53:a0:01:
02:83:80:e6:b8:c7:f1:32:f7:b6:d6:19:cc:c1:b0:
a7:a4:5e:8a:1b:31:aa:83:23:ac:72:a9:6f:62:d4:
a7:64:e2:a2:31:3e:33:55:d2:c8:4f:91:51:df:7e:
fd:3f:6d:57:5b:54:83:aa:15:e4:ea:64:07:aa:7e:
b9:cc:dd:e0:a3:ee:fb:cf:26:c7:d3:b5:c2:cb:90:
2d:b3:69:c4:f8:06:fe:a6:5a:a7:1e:21:3a:0d:7f:
ad:c5:01:ba:27:91:fe:27:65:c2:65:c7:18:c1:04:
95:d6:84:53:e2:68:3c:2d:2e:1e:45:3f:2d:45:cf:
ba:03:65:d8:02:a8:7b:ab:a9:9b:c1:ee:84:b9:dd:
56:4e:de:96:20:98:14:ec:63:08:3b:10:56:63:0b:
72:d9:98:67:9f:e5:d8:02:51:79:51:80:20:5b:8e:
21:b3:27:d7:43:6b:31:fc:99:7c:c1:e1:51:34:04:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:1A:B1:2A:99:CE:61:FD:65:DF:A1:18:7C:2D:E7:74:A5:89:5F
X509v3 Authority Key Identifier:
keyid:C8:93:5F:DC:A5:02:8A:E8:20:9F:EC:82:AD:8A:E8:CF:B7:C6:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/C8935FDCA5028AE8209FEC82AD8AE8CFB7C6E776.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6e5d9611-fd33-488c-9aec-f4df2a25351e/fd77f55efe3a93c53ca3dc8a6f8374fe70fec5567dd1e8c855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/0/AS400298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fed2:7081::/48
2602:fed2:7086::/48
2602:fed2:7089::/48
2602:fed2:730e::/48
2602:fed2:7e85::/48
Signature Algorithm: sha256WithRSAEncryption
4c:95:49:07:40:01:1d:09:44:c4:47:37:94:27:ea:1e:67:37:
2f:94:80:98:d2:8a:f8:71:8c:4f:de:12:10:b8:5c:84:8e:a9:
0b:91:33:8b:c1:41:48:a7:1b:30:9c:33:a0:1f:4d:e2:9f:94:
04:76:a2:67:f9:b9:b9:29:26:75:f0:89:a9:3c:ed:57:58:05:
ae:8b:33:6f:a0:6e:5d:a3:d7:09:b6:dc:9f:cb:e5:8c:c3:d7:
6c:6b:45:7c:cd:60:8d:e7:60:25:8d:24:2d:97:97:4a:19:67:
34:06:02:e1:b8:c1:c8:e5:20:9f:78:c2:b8:a3:5a:d7:b8:46:
63:98:38:4d:58:a8:13:fe:ed:79:f9:96:2b:3a:76:fb:c4:7c:
c4:39:a6:c3:94:98:b8:bf:1e:77:c4:a8:8f:31:0a:25:8f:83:
a3:01:ad:52:3d:4b:a9:f7:2b:66:6b:26:fe:81:7a:ed:8d:48:
9c:76:d2:ba:bf:06:3e:c1:03:6a:6c:27:20:b8:a8:57:05:ac:
9d:9c:66:f4:49:0f:f5:59:7b:ec:f3:b0:0e:31:db:29:56:24:
df:47:c9:5f:a3:d9:ba:8d:c5:c1:6d:a2:10:c5:d9:f7:29:77:
bd:91:d6:93:6b:f1:46:1d:00:f9:dd:5c:44:e4:de:ba:55:a2:
26:51:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:41 2025 by rpki-client