Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
File: 323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa (raw, json)
Hash identifier: UXLgBCwCd/kC/dywQkp0EahVPBNuz2MkQO1QKIuz0Kg=
Subject key identifier: BF:E8:96:1D:D8:7A:87:06:8C:54:08:CB:1B:D1:2B:94:D3:FB:06:26
Certificate issuer: /CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Certificate serial: 40E056C9FA611333431620273E9830900B1F834A
Authority key identifier: A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
Signing time: Tue 18 Feb 2025 16:17:40 +0000
ROA not before: Tue 18 Feb 2025 16:12:40 +0000
ROA not after: Tue 17 Feb 2026 16:17:40 +0000
asID: 54133
IP address blocks: 2602:fe13:800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e0:56:c9:fa:61:13:33:43:16:20:27:3e:98:30:90:0b:1f:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef
Validity
Not Before: Feb 18 16:12:40 2025 GMT
Not After : Feb 17 16:17:40 2026 GMT
Subject: CN=BFE8961DD87A87068C5408CB1BD12B94D3FB0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:41:73:a7:36:5f:ed:b1:33:f6:d6:99:5a:
c5:25:bf:63:b0:91:3e:88:a3:12:2d:8a:a9:fa:87:
88:b7:f9:db:a8:97:75:a5:13:29:a9:16:57:c7:f2:
3b:46:00:d6:1c:58:83:9d:32:2d:37:2e:d6:dc:2d:
03:4e:92:39:24:1a:ec:71:d1:a5:f1:14:66:b8:13:
5c:1e:49:57:f3:ac:ab:42:c6:c9:e0:2b:7b:f6:61:
2e:75:0d:ef:eb:de:fb:db:eb:5f:ca:07:e9:8c:58:
4f:96:87:6f:0e:1a:c8:d2:cd:73:e6:92:8e:00:b9:
b0:00:33:ec:07:17:1e:61:5d:c4:8b:a9:07:43:78:
b1:4d:3d:6b:85:68:8b:d7:85:8a:76:a2:6a:28:40:
92:75:62:8e:f4:b4:03:6b:cd:c6:1d:aa:e3:b0:af:
f8:15:50:4b:8e:a0:88:cf:03:9f:38:55:36:b4:c8:
94:1d:ec:89:ce:0f:10:a8:e0:23:16:58:0a:93:e1:
93:9d:e5:98:1f:36:f2:84:20:ff:93:8c:9e:d1:10:
29:c1:3d:93:ec:e1:67:76:e6:08:c2:5a:f9:6a:97:
66:45:ac:7b:fe:90:bd:db:76:1c:b0:37:9a:08:9f:
54:16:c7:1d:3d:e1:d3:86:ac:94:75:9d:c6:6c:6d:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E8:96:1D:D8:7A:87:06:8C:54:08:CB:1B:D1:2B:94:D3:FB:06:26
X509v3 Authority Key Identifier:
keyid:A0:DF:8E:B2:8D:12:F9:CD:F7:A6:8B:3D:C7:A5:65:76:74:8B:2E:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/A0DF8EB28D12F9CDF7A68B3DC7A56576748B2E54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8bb7e416-db1b-4221-a6c0-947074a20f8f/9ab28fbc8c084d36cd26d308b16702e59e01fcba681bfec9ef.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/3/323630323a666531333a3830303a3a2f34382d3438203d3e203534313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:fe13:800::/48
Signature Algorithm: sha256WithRSAEncryption
7b:40:06:88:30:ee:6a:60:a7:c6:e2:62:76:f0:fe:ab:66:5d:
74:7e:ab:21:19:92:f3:b3:19:95:65:3c:1a:8e:66:46:82:2d:
c9:93:d4:23:6f:90:ed:d0:1c:fc:f2:4b:f2:90:3d:10:fc:a4:
54:c2:06:ff:84:50:99:c3:5c:16:31:c0:0d:7e:92:90:6c:b4:
76:40:ba:d4:ae:44:3b:8e:19:7b:c5:5d:7f:11:a9:f4:02:07:
7e:e7:99:85:8c:0c:7a:ea:6b:0b:78:fc:c7:66:bc:ac:69:0a:
7a:04:e3:29:fe:d1:59:f5:54:8f:02:71:50:45:42:78:a5:f9:
05:e3:a8:91:2e:ec:88:e1:47:13:26:ff:02:67:78:42:b8:59:
d0:df:a5:64:30:1f:5f:b9:eb:95:bf:fa:df:d4:eb:56:b3:2d:
e1:89:15:02:7f:b8:91:9b:14:b9:c7:ab:cd:8d:a1:59:9f:18:
8b:85:97:cd:4a:2b:6b:a5:fa:d4:d6:5c:ef:8f:1e:7e:58:61:
19:4c:93:d3:d7:f9:24:42:ee:10:cf:03:d4:2a:dc:d4:1c:36:
eb:c3:d6:1f:08:14:88:65:ff:73:5e:22:5a:43:04:28:2e:71:
31:c8:da:4d:a8:e0:f0:1f:96:17:88:14:ac:dc:fd:7d:f8:ab:
69:3d:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:16 2025 by rpki-client