Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: i7rk57O6wnSSwJ5KR0PsAPzi4oEO5y3dB17C8mmqaTs=
Subject key identifier: 53:AE:D5:23:74:5C:70:91:74:03:17:7E:B9:7B:42:E1:3D:C4:D3:B3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4140A508DE3BF64FF595354BABF4F3406DA60B2A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200636.roa
Signing time: Sun 23 Feb 2025 10:24:35 +0000
ROA not before: Sun 23 Feb 2025 10:19:35 +0000
ROA not after: Sun 22 Feb 2026 10:24:35 +0000
asID: 200636
IP address blocks: 2a0f:9400:6162::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:40:a5:08:de:3b:f6:4f:f5:95:35:4b:ab:f4:f3:40:6d:a6:0b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 23 10:19:35 2025 GMT
Not After : Feb 22 10:24:35 2026 GMT
Subject: CN=53AED523745C70917403177EB97B42E13DC4D3B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:27:0f:b8:f3:df:43:da:a5:d3:e9:60:f4:
ad:76:f9:0c:c6:66:b8:5d:a2:69:9e:88:c3:2e:c0:
03:76:58:af:b7:cb:22:dc:70:32:6e:75:f5:4b:a0:
bf:50:14:2f:85:62:be:2d:8c:66:43:f6:5c:31:dc:
35:ce:b7:b3:ac:1e:09:f8:96:79:85:13:f3:bb:45:
78:0e:1a:47:11:7b:be:10:af:81:49:1c:b3:d0:84:
8c:f0:5a:c2:cd:2b:d8:6f:5c:09:0f:b6:de:d4:4c:
15:a0:69:bf:c7:6a:28:44:b5:e6:10:b5:a8:ab:34:
68:bd:e7:d7:61:91:d4:b8:4c:ca:05:35:e7:78:71:
7d:51:b9:c5:2a:8a:30:72:66:cd:ef:89:34:e4:6e:
f2:ba:84:a6:dd:a8:76:79:65:7a:02:12:02:a2:a4:
ff:32:bb:7b:da:8a:a5:67:24:ab:ed:a0:b0:d3:f2:
e0:3e:94:d2:d3:fb:01:7b:cc:c9:92:7f:ca:8b:1a:
64:1d:78:f5:6e:e4:cd:47:d9:24:64:9a:bd:92:da:
18:45:ab:02:36:c0:1c:4a:26:0b:00:0c:b4:eb:0a:
d2:cf:06:45:dd:47:60:57:32:8f:c6:db:c5:b5:9e:
98:c0:d5:7b:a4:df:f4:30:80:4d:bb:8c:21:20:da:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:D5:23:74:5C:70:91:74:03:17:7E:B9:7B:42:E1:3D:C4:D3:B3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6162::/48
Signature Algorithm: sha256WithRSAEncryption
23:0b:06:50:70:c7:5d:d4:af:eb:c9:01:c4:70:c8:1b:85:38:
38:92:cc:78:a3:36:8a:c0:b1:fa:2a:6f:60:3a:09:c5:a2:bd:
e1:5c:8b:17:3b:59:72:12:3e:2f:f3:06:e3:cc:4c:62:e2:4e:
03:e3:af:53:52:3b:29:bd:9e:11:5e:94:ff:99:56:a7:e6:ec:
fb:45:ac:af:94:a9:f2:fc:cc:ad:24:78:72:76:0b:d6:08:98:
c5:34:70:d7:a5:9a:62:b1:b9:64:87:f5:92:db:65:de:81:6d:
f8:aa:5a:c8:72:39:4e:98:60:2d:20:85:5e:40:22:58:35:85:
b8:c3:ee:3e:c2:c2:2c:33:b1:9b:be:0b:34:8f:45:3e:7d:23:
d6:c2:0e:08:36:2b:8a:bb:f5:69:f6:a3:78:28:68:46:97:4e:
98:09:f4:d4:77:68:6e:d3:a4:de:37:84:71:94:41:7b:16:d3:
79:1f:70:0b:9e:67:3e:3d:36:f0:59:b7:fc:01:72:ba:48:66:
d6:69:65:5a:eb:04:10:57:d9:1c:52:c5:90:76:74:61:6d:a6:
1f:bb:66:b7:22:45:40:54:2f:57:76:67:a0:f9:e2:6e:14:96:
19:69:26:e3:37:06:3e:b2:f8:d4:7c:3a:aa:08:2a:38:d0:3f:
60:42:68:33
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUQUClCN479k/1lTVLq/TzQG2mCyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTAyMjMxMDE5MzVaFw0yNjAyMjIxMDI0MzVaMDMxMTAvBgNV
BAMTKDUzQUVENTIzNzQ1QzcwOTE3NDAzMTc3RUI5N0I0MkUxM0RDNEQzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+ScPuPPfQ9ql0+lg9K12+QzG
ZrhdommeiMMuwAN2WK+3yyLccDJudfVLoL9QFC+FYr4tjGZD9lwx3DXOt7OsHgn4
lnmFE/O7RXgOGkcRe74Qr4FJHLPQhIzwWsLNK9hvXAkPtt7UTBWgab/HaihEteYQ
tairNGi959dhkdS4TMoFNed4cX1RucUqijByZs3viTTkbvK6hKbdqHZ5ZXoCEgKi
pP8yu3vaiqVnJKvtoLDT8uA+lNLT+wF7zMmSf8qLGmQdePVu5M1H2SRkmr2S2hhF
qwI2wBxKJgsADLTrCtLPBkXdR2BXMo/G28W1npjA1Xuk3/QwgE27jCEg2gZTAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUU67VI3RccJF0Axd+uXtC4T3E07MwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMDYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhYjANBgkqhkiG9w0BAQsFAAOC
AQEAIwsGUHDHXdSv68kBxHDIG4U4OJLMeKM2isCx+ipvYDoJxaK94VyLFztZchI+
L/MG48xMYuJOA+OvU1I7Kb2eEV6U/5lWp+bs+0Wsr5Sp8vzMrSR4cnYL1giYxTRw
16WaYrG5ZIf1kttl3oFt+KpayHI5TphgLSCFXkAiWDWFuMPuPsLCLDOxm74LNI9F
Pn0j1sIOCDYrirv1afajeChoRpdOmAn01HdobtOk3jeEcZRBexbTeR9wC55nPj02
8Fm3/AFyukhm1mllWusEEFfZHFLFkHZ0YW2mH7tmtyJFQFQvV3ZnoPnibhSWGWkm
4zcGPrL41Hw6qggqONA/YEJoMw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:08:28 2025 by rpki-client