Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
File: 323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa (raw, json)
Hash identifier: 6+llNnPi02v1IB6ShWsv8LCi+rSoCHpwZnCCDQ9sMmU=
Subject key identifier: C8:93:BD:AF:63:22:BC:F7:1F:31:07:E6:2C:A1:41:6E:E6:4A:CB:DA
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 0D0C5E385CB8D0B00B6B7BBEC98029F366446E5A
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
Signing time: Tue 25 Mar 2025 16:40:17 +0000
ROA not before: Tue 25 Mar 2025 16:35:17 +0000
ROA not after: Tue 24 Mar 2026 16:40:17 +0000
asID: 54133
IP address blocks: 2602:fe13:2c0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0c:5e:38:5c:b8:d0:b0:0b:6b:7b:be:c9:80:29:f3:66:44:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Mar 25 16:35:17 2025 GMT
Not After : Mar 24 16:40:17 2026 GMT
Subject: CN=C893BDAF6322BCF71F3107E62CA1416EE64ACBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:ab:6c:49:3a:69:32:0b:ca:7a:dd:94:1c:
06:fc:2b:b9:5f:c6:10:b0:96:54:73:9a:75:58:3c:
cb:5d:b2:a3:ad:51:ff:bf:e0:5c:ae:4f:f3:c7:7a:
bf:03:ff:65:03:cc:a4:53:07:d9:28:90:9e:17:68:
c0:94:63:fd:43:00:b9:4f:ea:24:22:83:8c:6f:61:
99:f0:f3:f5:5a:ed:10:67:52:0c:99:09:80:4d:7d:
19:fa:ed:69:43:6f:d1:99:d4:d9:5c:96:c3:94:3b:
dd:05:cb:31:50:ec:44:dd:7a:2e:08:bd:16:64:3a:
8e:23:62:22:ff:51:cf:55:9e:37:eb:90:d7:d1:c9:
21:ce:94:95:d7:24:57:17:41:6e:cc:4c:cf:a0:b5:
d2:ca:b1:ca:ce:36:ba:fe:ef:25:14:97:f1:3d:fa:
66:ed:b7:0d:6e:55:43:4c:1f:45:17:43:56:be:20:
81:b5:71:cf:a9:be:ad:79:04:e6:34:e6:d8:e5:a3:
a1:a2:0e:2d:64:f8:8e:25:2a:32:bf:13:19:c4:fd:
2c:39:39:d6:46:64:56:05:78:02:f4:4b:9a:85:2f:
33:cf:08:ce:14:c7:9c:84:dd:aa:30:c5:64:af:82:
4d:c2:d6:cf:aa:ba:9c:be:0f:a0:59:2b:1d:03:a0:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:BD:AF:63:22:BC:F7:1F:31:07:E6:2C:A1:41:6E:E6:4A:CB:DA
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3263303a3a2f34342d3438203d3e203534313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
58:73:b2:1e:8c:59:e2:89:42:20:84:9a:c2:2a:ba:ce:99:c5:
2a:d5:2e:90:5f:5e:4a:69:ec:32:31:42:32:10:ed:68:4f:a6:
06:5c:06:6a:df:76:b6:5c:ac:d0:31:91:73:33:a1:2b:bc:dc:
fc:33:61:67:b6:ef:65:53:32:e5:7e:d3:5b:ff:e2:5a:8d:c2:
ff:02:a2:3e:a1:2e:88:2c:d4:9d:4a:29:5b:f1:c2:e3:bf:43:
02:50:4b:a0:a4:38:e9:3f:e5:6d:47:b4:89:12:13:56:66:0a:
5d:a2:b9:f1:b2:eb:e8:b7:54:5b:50:77:00:1e:d3:89:f7:24:
33:79:2d:c3:07:37:c2:cf:da:46:a1:be:e7:3b:12:b9:0b:0c:
c8:84:1a:e8:b4:76:48:b6:8b:ff:fa:cd:c8:ed:97:b0:0a:85:
1f:47:1f:be:cd:b0:8e:52:37:10:56:ca:c1:d0:0d:70:d3:a2:
9c:29:d9:69:52:3e:df:7f:e6:c7:be:be:ca:fc:3b:46:df:c5:
b9:b4:8c:5f:ac:1a:ba:ae:f1:ab:f7:d0:ca:cc:bc:8c:5d:cb:
d4:0f:ce:55:ed:41:62:6c:48:39:7e:2a:05:df:1b:05:fa:c7:
3c:fe:15:dd:8c:6e:ac:24:00:46:5e:2f:b9:10:29:52:3f:59:
2c:3b:42:4b
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUDQxeOFy40LALa3u+yYAp82ZEblowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMjhmYmM4YzA4NGQzNmNkMjZkMzA4YjE2NzAyZTU5
ZTAxZmNiYTY4MWJmZWM5ZWYwHhcNMjUwMzI1MTYzNTE3WhcNMjYwMzI0MTY0MDE3
WjAzMTEwLwYDVQQDEyhDODkzQkRBRjYzMjJCQ0Y3MUYzMTA3RTYyQ0ExNDE2RUU2
NEFDQkRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWWrbEk6aTIL
ynrdlBwG/Cu5X8YQsJZUc5p1WDzLXbKjrVH/v+Bcrk/zx3q/A/9lA8ykUwfZKJCe
F2jAlGP9QwC5T+okIoOMb2GZ8PP1Wu0QZ1IMmQmATX0Z+u1pQ2/RmdTZXJbDlDvd
BcsxUOxE3XouCL0WZDqOI2Ii/1HPVZ4365DX0ckhzpSV1yRXF0FuzEzPoLXSyrHK
zja6/u8lFJfxPfpm7bcNblVDTB9FF0NWviCBtXHPqb6teQTmNObY5aOhog4tZPiO
JSoyvxMZxP0sOTnWRmRWBXgC9EuahS8zzwjOFMechN2qMMVkr4JNwtbPqrqcvg+g
WSsdA6BEGwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFMiTva9jIrz3HzEH5iyhQW7m
SsvaMB8GA1UdIwQYMBaAFKDfjrKNEvnN96aLPcelZXZ0iy5UMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJh
bmdlY2xvdWQuY29tL3JlcG8vRlJDLUNBLzMvQTBERjhFQjI4RDEyRjlDREY3QTY4
QjNEQzdBNTY1NzY3NDhCMkU1NC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZm
ZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhiYjdlNDE2LWRiMWIt
NDIyMS1hNmMwLTk0NzA3NGEyMGY4Zi85YWIyOGZiYzhjMDg0ZDM2Y2QyNmQzMDhi
MTY3MDJlNTllMDFmY2JhNjgxYmZlYzllZi5jZXIwgZMGCCsGAQUFBwELBIGGMIGD
MIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLmFkbWluLmZyZWVyYW5nZWNsb3Vk
LmNvbS9yZXBvL0ZSQy1DQS8zLzMyMzYzMDMyM2E2NjY1MzEzMzNhMzI2MzMwM2Ez
YTJmMzQzNDJkMzQzODIwM2QzZTIwMzUzNDMxMzMzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYC/hMC
wDANBgkqhkiG9w0BAQsFAAOCAQEAWHOyHoxZ4olCIISawiq6zpnFKtUukF9eSmns
MjFCMhDtaE+mBlwGat92tlys0DGRczOhK7zc/DNhZ7bvZVMy5X7TW//iWo3C/wKi
PqEuiCzUnUopW/HC479DAlBLoKQ46T/lbUe0iRITVmYKXaK58bLr6LdUW1B3AB7T
ifckM3ktwwc3ws/aRqG+5zsSuQsMyIQa6LR2SLaL//rNyO2XsAqFH0cfvs2wjlI3
EFbKwdANcNOinCnZaVI+33/mx76+yvw7Rt/FubSMX6wauq7xq/fQysy8jF3L1A/O
Ve1BYmxIOX4qBd8bBfrHPP4V3YxurCQARl4vuRApUj9ZLDtCSw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:58 2025 by rpki-client