Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20313334383335.roa
File: 32332e3136392e3232352e302f32342d3234203d3e20313334383335.roa (raw, json)
Hash identifier: 4P4fq3B+RwI4XUSf2y5ofVGYbw67HacUjL/EBXK4YOo=
Subject key identifier: 0F:3F:13:CA:DC:B3:49:7A:AC:52:1A:C7:14:8A:14:B6:CC:9B:FC:06
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 1597BB6406E5BA7396057DCE2663423A83EEB770
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20313334383335.roa
Signing time: Wed 15 Jan 2025 20:05:13 +0000
ROA not before: Wed 15 Jan 2025 20:00:13 +0000
ROA not after: Wed 14 Jan 2026 20:05:13 +0000
asID: 134835
IP address blocks: 23.169.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:97:bb:64:06:e5:ba:73:96:05:7d:ce:26:63:42:3a:83:ee:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Jan 15 20:00:13 2025 GMT
Not After : Jan 14 20:05:13 2026 GMT
Subject: CN=0F3F13CADCB3497AAC521AC7148A14B6CC9BFC06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:a8:4d:44:e4:ce:51:8b:57:5a:d7:09:58:
09:8b:45:df:f4:14:0a:33:ac:2b:2d:8f:a9:07:ef:
5b:f6:43:78:e7:dd:fa:50:1d:a4:39:d4:b6:84:d8:
06:b8:85:cd:e2:50:ee:13:62:c0:43:31:77:d5:9c:
23:82:bc:08:29:e3:cc:6f:7f:f9:53:49:0e:00:6c:
22:61:ef:ae:19:5c:9c:be:84:cc:4c:04:7c:4c:95:
6e:51:fb:05:7f:b5:0e:7b:51:d9:08:0b:a4:cf:da:
b9:04:67:ad:e3:fa:66:2f:3a:9d:62:90:4e:99:31:
c9:53:49:89:99:fc:75:56:bc:ec:2b:4e:b4:b0:51:
a4:c9:ba:13:ee:03:2d:6c:07:f3:1e:ff:de:4d:5f:
55:ff:67:33:dd:c7:ff:4f:de:08:79:c5:1d:cf:b0:
ed:2b:e6:75:57:7f:5c:a5:52:0c:d5:c9:f5:44:4f:
9b:00:fc:14:da:6c:e5:c2:d1:9e:81:fb:8c:92:a8:
7f:8c:6b:e9:57:7f:10:e3:09:2e:5a:3c:da:a4:2e:
7f:ca:91:1a:bb:1a:9a:02:d9:96:ec:84:83:ca:87:
b6:15:ec:af:c0:50:0a:59:02:05:43:3d:9c:5e:96:
cf:25:9d:97:04:6c:f0:7e:9c:ae:f5:29:79:f7:d3:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3F:13:CA:DC:B3:49:7A:AC:52:1A:C7:14:8A:14:B6:CC:9B:FC:06
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/32332e3136392e3232352e302f32342d3234203d3e20313334383335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.169.225.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:20:fc:20:12:47:87:6e:77:a1:ec:5b:64:f9:6e:57:2f:32:
70:f5:17:7c:10:12:15:cb:a5:10:60:64:b4:d8:e8:3c:77:75:
ea:75:83:58:d0:c5:07:b1:43:e9:60:fc:81:8e:ab:7b:9f:c7:
88:96:9e:54:49:0a:f4:3d:06:19:44:13:59:4e:b9:b9:00:0b:
09:1e:8c:f7:d3:86:2a:a6:d2:df:88:cb:ab:db:76:9a:88:69:
38:9b:9e:67:77:8b:bb:a8:8b:b5:be:40:aa:c2:5a:c4:47:dd:
3b:4b:f2:f1:c6:b4:95:6c:ef:5b:ce:55:19:a8:f7:16:78:0c:
8f:d2:8e:89:bc:ba:a7:fc:7a:89:ed:cb:94:cc:56:76:76:12:
65:e3:aa:cd:fc:75:66:fa:30:04:92:9b:cc:34:24:79:4e:9d:
f3:9c:4d:d0:a9:4b:14:64:fd:f8:ba:75:46:cc:62:a4:3d:f7:
70:e7:ab:a2:4a:ff:ae:c9:9c:8f:93:46:4f:21:38:51:45:43:
45:cb:fb:4b:69:e8:d7:43:dc:5b:19:fd:5a:c7:84:cc:8e:36:
89:1a:1c:55:02:bb:db:09:f7:02:4d:d9:ab:20:eb:bb:c9:fa:
07:68:04:56:24:1b:b2:3a:cf:35:10:f0:3a:1f:60:c4:c4:7b:
f2:f3:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:33:15 2025 by rpki-client