Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
File: 323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa (raw, json)
Hash identifier: 1z8kq6qCgMokGYaklaMrdqALDsXbw/3Oi2cAQzGfkw4=
Subject key identifier: 10:A0:DB:39:BD:E3:62:5C:31:3A:88:D7:CA:E0:E1:38:6C:0F:FB:A2
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 5AC86223D0268F99DE4D7CB8AC70047966A272C0
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
Signing time: Fri 20 Sep 2024 01:19:47 +0000
ROA not before: Fri 20 Sep 2024 01:14:47 +0000
ROA not after: Fri 19 Sep 2025 01:19:47 +0000
asID: 26042
IP address blocks: 2602:fe13:2e0::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c8:62:23:d0:26:8f:99:de:4d:7c:b8:ac:70:04:79:66:a2:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Sep 20 01:14:47 2024 GMT
Not After : Sep 19 01:19:47 2025 GMT
Subject: CN=10A0DB39BDE3625C313A88D7CAE0E1386C0FFBA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:3a:f3:09:46:94:4e:b9:96:1a:8b:91:9f:
b6:fb:c5:01:ff:ad:ca:ec:4a:d3:46:60:cd:ac:87:
dc:97:15:27:6e:87:9a:5d:05:7c:b7:dc:49:2f:e8:
cf:46:88:74:ac:6b:dc:d0:77:11:45:c2:af:51:45:
31:da:a0:22:5c:7b:10:dc:82:27:51:8c:22:38:29:
ea:5f:7d:54:98:08:0c:58:41:62:6c:cd:7b:b0:17:
ab:c6:4b:4a:f4:dd:44:bb:37:90:34:9e:41:b9:2b:
b2:e8:2a:55:09:1c:1a:6b:53:00:90:1d:94:a8:14:
2e:ec:57:3d:40:60:89:82:1c:6d:68:69:ea:fb:17:
30:d9:d6:79:ec:90:88:c4:ac:21:81:a6:80:7e:82:
bf:f3:9a:d7:7f:1e:14:5d:ec:b3:6c:90:7c:03:c6:
33:85:e0:8a:a8:2c:26:d8:3f:92:5f:96:a5:e1:58:
ff:57:7b:aa:90:16:41:71:c8:07:11:55:37:5a:20:
9f:6e:6d:97:20:10:15:89:84:42:bd:cb:bf:f7:a7:
80:5f:ca:88:c6:6d:d0:a0:c4:e8:0a:6f:41:47:4b:
eb:c4:0c:6a:ff:a2:89:69:d0:ad:a5:7e:93:6f:d8:
eb:20:f1:88:71:8d:b0:b4:84:b7:47:dd:48:6d:70:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:DB:39:BD:E3:62:5C:31:3A:88:D7:CA:E0:E1:38:6C:0F:FB:A2
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3265303a3a2f34342d3434203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:2e0::/44
Signature Algorithm: sha256WithRSAEncryption
44:3d:e5:0a:ff:2a:33:2d:58:ae:ed:f7:13:35:6c:8a:22:bc:
70:be:7e:4b:af:5e:e0:b8:57:cc:8c:cb:19:1e:9e:de:f7:1f:
b8:a5:42:bd:ce:a7:83:1f:7a:fd:c8:4b:d1:47:89:ae:27:ec:
4f:42:b9:f0:d7:2c:c1:d1:4e:62:c4:fa:8d:0f:d5:ef:e4:16:
68:be:ab:28:ad:e2:29:84:f7:5c:2a:fc:72:bc:0a:8e:d4:87:
f4:0a:98:dc:2e:12:eb:66:79:0b:5b:e7:1e:85:5d:d7:55:dc:
a2:e5:7a:ef:ce:08:04:93:74:63:e5:58:c0:84:89:08:c0:c3:
6e:dc:a4:e5:7b:38:5e:c9:50:2d:c3:8d:6a:17:e4:b6:4c:4a:
a6:d4:fe:b3:d9:36:81:36:ad:7d:84:c0:ac:05:5c:f1:92:67:
44:7c:4f:9a:eb:20:02:22:a5:b4:af:96:4d:62:b1:9e:6b:55:
c0:60:99:13:ec:3b:a8:a2:a9:9a:72:af:1d:dd:72:42:f1:42:
c3:2a:0b:17:1f:1d:b4:ce:db:e9:e7:7e:13:3d:50:b9:9f:1d:
17:73:97:8d:e4:12:74:bc:1f:89:49:9e:9b:62:72:22:db:51:
97:dd:e5:9e:42:bc:bb:3a:75:55:6b:62:e7:75:11:70:36:fd:
01:de:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:25 2025 by rpki-client