Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa
File: AS11721.roa (raw, json)
Hash identifier: ZDwfWMdW9rINeJDoe/PFToLNnpkk+FBW7R6csxq326M=
Subject key identifier: 9F:F4:D5:6D:6F:04:6C:EA:03:89:D7:3F:CB:40:2C:BE:43:3E:98:5D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7B22D3A421D2351649E66634BA95A0A11EBC373B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa
Signing time: Mon 10 Feb 2025 23:12:14 +0000
ROA not before: Mon 10 Feb 2025 23:07:14 +0000
ROA not after: Mon 09 Feb 2026 23:12:14 +0000
asID: 11721
IP address blocks: 2a0f:9400:7384::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:22:d3:a4:21:d2:35:16:49:e6:66:34:ba:95:a0:a1:1e:bc:37:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 10 23:07:14 2025 GMT
Not After : Feb 9 23:12:14 2026 GMT
Subject: CN=9FF4D56D6F046CEA0389D73FCB402CBE433E985D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:e0:4d:10:5a:2c:51:55:b1:d5:70:f2:fe:
37:ef:ea:dd:87:e4:8e:7e:d6:c6:40:93:c3:6e:33:
f1:55:64:bb:af:0f:23:02:d3:86:28:c4:95:a2:ea:
9c:d8:89:4f:d6:ad:42:b4:a2:51:16:e0:6e:d9:29:
1b:8b:1f:ee:a8:54:2b:49:14:d0:57:10:f8:9d:02:
e8:6f:e9:79:4c:e0:4a:b1:2e:ad:35:6e:9c:4b:fe:
a8:f3:cb:ce:86:8c:ff:4f:c9:cc:5f:27:13:42:55:
34:64:83:6d:be:7b:96:53:9a:67:c3:05:f9:8a:d1:
c1:68:6c:70:ac:ca:00:d3:ea:d4:d0:51:dc:34:5b:
86:61:48:cb:1c:d3:e3:23:51:a2:27:66:ec:52:92:
53:1f:06:b5:80:78:9d:c0:a3:c2:00:be:08:af:c3:
b2:2e:e2:e4:da:0a:16:e6:be:de:47:63:97:0a:d5:
e7:d2:e0:f8:56:7e:18:f5:60:c5:25:0e:5f:50:9d:
1d:86:34:0e:75:35:e0:7a:a0:7e:a8:92:41:8e:ca:
41:a9:15:96:0e:c1:f5:7c:75:b8:42:27:5e:50:69:
e5:a6:ac:25:ae:75:50:a9:93:d8:52:1d:15:79:29:
28:15:f1:46:b2:68:83:bd:82:04:aa:51:d4:40:1c:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:D5:6D:6F:04:6C:EA:03:89:D7:3F:CB:40:2C:BE:43:3E:98:5D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS11721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7384::/48
Signature Algorithm: sha256WithRSAEncryption
b6:41:4a:b5:49:06:4b:06:a9:4c:7f:b2:1d:6f:51:ec:cd:3c:
71:4d:50:da:a9:af:66:f5:ee:55:c1:cb:80:80:81:a3:59:69:
69:a4:de:9f:fe:94:89:1e:81:93:51:25:1d:48:81:43:a9:4a:
15:03:c5:8a:a7:1d:63:7d:b6:c7:75:1b:df:66:be:5d:37:ac:
23:2b:69:60:c1:43:44:44:85:9c:24:51:65:dd:7f:15:91:a4:
b0:19:bd:31:14:57:4f:32:f9:73:87:35:a5:cb:bf:1a:eb:c1:
a5:02:f1:82:50:8d:d9:50:65:84:d6:1f:b1:99:7a:56:5a:7e:
97:02:6c:bb:b6:08:c3:b1:a0:4d:21:20:a5:9f:04:4b:8c:71:
9a:0c:57:d6:23:8e:de:55:20:41:8c:1b:22:03:87:06:3a:5b:
dc:50:cf:62:49:8f:52:c4:1d:21:aa:13:1a:19:c9:b4:1c:39:
35:bf:b3:34:0a:e1:d6:fb:bd:9b:99:1d:5f:1b:80:41:bb:09:
cc:70:a5:f3:e9:bc:58:12:e2:96:db:25:b9:d7:06:cb:7c:4a:
2b:8f:ed:9a:bf:f5:e6:de:7b:52:f6:e4:08:f0:31:97:9a:04:
a0:08:06:a1:dc:c4:f6:be:7f:12:3b:d5:b1:3e:c1:0b:30:60:
c8:59:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:57 2025 by rpki-client