Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
File: AS19318.roa (raw, json)
Hash identifier: LStnuWySo+mlPK+E+rtboNCNkGwg90YTKTLPQ1qv5no=
Subject key identifier: 91:0F:16:EF:EA:09:44:43:31:C8:45:D9:E5:B1:6C:E8:99:85:73:53
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 57188EFE9E6EE92C456255DA42EBAE6223AE753B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
Signing time: Thu 28 Nov 2024 23:55:03 +0000
ROA not before: Thu 28 Nov 2024 23:50:03 +0000
ROA not after: Thu 27 Nov 2025 23:55:03 +0000
asID: 19318
IP address blocks: 2a0f:9400:7e03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:18:8e:fe:9e:6e:e9:2c:45:62:55:da:42:eb:ae:62:23:ae:75:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Nov 28 23:50:03 2024 GMT
Not After : Nov 27 23:55:03 2025 GMT
Subject: CN=910F16EFEA09444331C845D9E5B16CE899857353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:83:a1:1a:51:15:db:fe:f7:11:d6:7f:77:
95:de:92:58:6c:4c:ae:12:c0:8e:08:86:7c:1b:6d:
10:cb:80:76:b9:e0:92:ea:75:db:8e:8d:b1:93:ea:
75:e2:13:b5:19:0c:88:ae:db:dc:03:75:6d:ae:fb:
8e:7f:73:aa:92:62:d9:33:71:0a:61:5d:6f:09:97:
81:12:fe:e8:a0:99:51:83:05:b2:0a:f0:d0:a8:57:
9d:48:5d:ff:22:84:c6:74:ad:a6:d9:74:81:78:93:
04:60:30:d2:1d:c7:23:b4:35:5c:f0:42:c2:87:26:
34:92:ef:ac:10:d1:ee:89:e7:97:8d:50:db:d8:51:
ed:36:e6:85:28:2c:61:65:a7:3f:f2:50:97:a2:19:
d8:c4:d3:5b:e5:e0:d8:ba:31:42:e0:d8:d4:4b:cc:
c3:9e:be:92:fa:c6:78:0f:71:c1:1c:50:2e:47:3e:
50:b9:50:bc:54:46:2c:b9:3b:e6:7d:33:e6:19:4d:
cf:46:3b:b7:d0:80:67:e2:3a:79:50:d1:89:96:35:
b5:1e:ca:71:4a:8e:02:11:08:a1:3a:38:8a:d7:65:
e5:89:9d:20:cc:58:46:95:60:90:73:f7:5a:55:b6:
fb:1d:d3:10:25:01:ac:2a:e2:cf:74:91:f8:6a:8c:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:16:EF:EA:09:44:43:31:C8:45:D9:E5:B1:6C:E8:99:85:73:53
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19318.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e03::/48
Signature Algorithm: sha256WithRSAEncryption
4a:e8:c4:a1:9d:fb:e6:7e:3b:77:02:89:40:a5:6a:3d:0b:58:
45:34:ad:02:a4:81:44:31:5a:5a:82:df:9a:05:f6:48:0a:b8:
cb:da:93:9f:93:85:30:e7:0d:ba:5e:19:45:8e:da:29:56:18:
7f:8d:a0:92:47:e8:da:36:37:8a:9e:70:61:0b:bc:ec:b9:47:
2d:ee:f1:bb:4d:3b:50:21:04:d3:a3:47:28:8b:6c:c5:12:a7:
af:d8:87:f0:2a:c4:cb:0f:c6:2c:1c:90:fc:84:44:06:a9:01:
13:65:e3:43:c2:bf:7c:4e:61:90:de:ee:7f:40:99:45:16:0e:
f9:e2:3f:17:f4:54:d4:05:84:e8:e9:e5:c5:69:f1:48:30:76:
b8:4e:81:53:6e:a7:de:4c:b8:ee:9c:d3:12:6d:20:10:91:f2:
88:2e:77:38:68:69:b0:b5:ae:bd:60:a7:d1:2b:c8:cf:52:45:
a1:f0:b9:b0:1f:21:74:8c:99:f3:36:e9:c7:23:bd:64:78:31:
07:40:4e:17:c5:7a:b5:09:dc:ee:18:49:b2:94:24:ff:43:02:
c3:c7:f8:60:45:5e:db:cb:51:6e:96:8e:88:6b:29:aa:71:ce:
c2:0b:b4:1e:89:70:4a:87:20:b3:d6:cd:3b:41:46:ac:df:f0:
0d:26:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:13 2025 by rpki-client