Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
File: AS210718.roa (raw, json)
Hash identifier: bp0i8k5eu1mvjk2Cn2NW31niYKUlIZl6m1F3GUVyKlE=
Subject key identifier: 3C:CE:80:89:3F:62:78:D3:12:3D:E3:FF:8E:65:A1:7C:60:59:AE:B7
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 21EE4D72E3C5A1F61163B37CB188F2381BC1E7E0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
Signing time: Fri 14 Feb 2025 07:53:58 +0000
ROA not before: Fri 14 Feb 2025 07:48:58 +0000
ROA not after: Fri 13 Feb 2026 07:53:58 +0000
asID: 210718
IP address blocks: 2a0f:9400:7e01::/48 maxlen: 48
2a0f:9400:7e02::/48 maxlen: 48
2a0f:9400:7e06::/48 maxlen: 48
2a0f:9400:7e07::/48 maxlen: 48
2a0f:9400:7e08::/48 maxlen: 48
2a0f:9400:7e17::/48 maxlen: 48
2a0f:9400:7e18::/48 maxlen: 48
2a0f:9400:7e50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:4d:72:e3:c5:a1:f6:11:63:b3:7c:b1:88:f2:38:1b:c1:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 14 07:48:58 2025 GMT
Not After : Feb 13 07:53:58 2026 GMT
Subject: CN=3CCE80893F6278D3123DE3FF8E65A17C6059AEB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:89:5b:ab:77:bb:72:64:3f:26:26:12:b5:
6c:22:d7:25:53:30:4b:36:b5:b1:f6:31:39:84:4d:
4e:16:72:12:29:ad:e1:aa:0c:fc:81:9b:7e:d7:6b:
6f:70:b5:30:ae:60:43:d4:0c:b6:b0:77:97:4b:8c:
43:64:34:de:f1:f2:b4:81:ad:2a:0b:84:fe:d7:ab:
04:f0:20:2e:5f:50:2d:33:aa:ed:3f:8f:33:b9:7c:
50:da:eb:48:81:0d:11:37:58:71:f3:3e:b1:16:f1:
a5:5c:28:33:31:c8:52:ca:5b:72:4d:f5:99:b7:46:
40:58:52:91:15:29:27:08:8e:cc:54:0b:0d:22:72:
d9:33:db:18:26:ff:af:eb:f7:a9:cf:57:c8:da:9b:
96:da:92:eb:9b:b0:b7:21:32:bd:cd:de:0e:9f:8f:
56:6f:cd:90:21:b8:14:db:0a:b2:6d:6d:a9:41:97:
16:0e:05:6f:46:6a:61:28:b4:81:13:52:a1:d9:44:
08:c8:ea:12:00:0f:a5:62:cb:ce:28:67:fc:58:cc:
ab:be:74:97:12:7a:50:7e:6a:61:b3:ed:32:38:b4:
af:5c:04:b7:0c:d3:cb:c2:f7:5b:4d:74:33:bf:15:
22:2e:71:8e:d7:e7:73:54:ba:bd:34:1b:98:55:58:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CE:80:89:3F:62:78:D3:12:3D:E3:FF:8E:65:A1:7C:60:59:AE:B7
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS210718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7e01::-2a0f:9400:7e02:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e06::-2a0f:9400:7e08:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e17::-2a0f:9400:7e18:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7e50::/48
Signature Algorithm: sha256WithRSAEncryption
36:9d:35:ab:5e:de:8e:c0:35:e0:b3:48:b6:0b:ce:e2:0e:f3:
27:a6:6c:4e:bf:01:65:6f:f7:ad:b2:16:d9:4d:68:16:a5:0f:
b8:c3:6e:2a:e0:06:03:40:96:bd:04:5e:15:55:26:75:18:d6:
27:e7:16:da:a4:67:db:21:57:c7:9e:7e:55:b4:16:6e:70:2e:
bf:41:f2:82:3a:a2:97:31:e1:c3:3c:26:9b:a1:24:b2:33:71:
3a:e8:22:fa:e1:bd:83:42:82:1e:76:4e:4b:0d:6c:58:73:3f:
23:21:40:aa:7b:87:b2:a3:14:3d:2f:12:14:c6:4d:46:bb:d6:
c3:b2:a9:3c:09:47:f3:c5:f5:ab:65:87:e6:07:a9:cc:0e:d2:
ae:75:c9:ca:cd:1c:75:2d:4d:f5:d6:70:b7:ef:3d:cf:c0:d3:
7a:77:e8:94:d1:7d:8d:e2:e0:d1:1e:11:41:93:db:45:86:7a:
f7:97:f0:cc:15:27:05:e6:c5:11:13:c5:a8:52:ff:8e:46:e4:
e6:d9:8d:3b:23:ba:0b:ad:3a:07:ed:ee:86:96:1e:97:cd:9a:
67:37:3a:3d:12:b4:a9:f6:01:32:67:90:0f:04:27:23:a5:a6:
bf:ba:b7:be:a5:ec:d8:75:68:a2:f9:a3:f0:13:28:b3:9c:fb:
ff:24:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:53 2025 by rpki-client