Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
File: AS213323.roa (raw, json)
Hash identifier: gdIA5DHMolJTdGd4r94wUTYbKBHE6Pj9myWl3xldaNM=
Subject key identifier: 1A:7F:4F:4E:75:68:0C:9B:E9:C6:52:7C:0A:59:9F:F1:FC:F6:C8:69
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 23A27146A69AE992A26ABD32AD9526CE5525BE06
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
Signing time: Mon 03 Feb 2025 20:09:11 +0000
ROA not before: Mon 03 Feb 2025 20:04:11 +0000
ROA not after: Mon 02 Feb 2026 20:09:11 +0000
asID: 213323
IP address blocks: 2a0f:9400:6907::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a2:71:46:a6:9a:e9:92:a2:6a:bd:32:ad:95:26:ce:55:25:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 3 20:04:11 2025 GMT
Not After : Feb 2 20:09:11 2026 GMT
Subject: CN=1A7F4F4E75680C9BE9C6527C0A599FF1FCF6C869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:cc:72:30:fc:3c:38:79:c0:c4:f8:d8:e7:
62:aa:ef:64:88:d8:b6:09:ae:ae:27:f3:a6:ae:c9:
f6:e4:87:10:82:ef:3e:3d:92:9d:01:79:db:04:2c:
d6:36:ad:60:1e:5a:b6:67:a7:27:46:73:5e:77:23:
78:ee:5a:dd:1c:72:f0:e5:41:8a:9c:d9:12:eb:68:
3f:75:42:98:64:c3:40:48:47:85:4e:46:c2:73:59:
5e:c8:83:5e:21:6e:44:e2:c0:76:e5:2c:81:cd:57:
05:38:2d:dc:05:16:f0:cc:2e:11:5d:78:4b:9c:33:
a3:65:c4:5b:32:57:9c:bd:ba:e2:9a:f2:5a:22:0d:
e6:2b:e6:a1:7a:16:b6:71:93:55:a9:c3:23:7b:b0:
4e:33:a1:df:9a:0b:a9:2e:d7:de:75:f0:00:b3:8b:
c8:f1:e9:c0:fa:3a:0b:a7:0d:2e:22:c6:a5:63:57:
c0:7e:70:fc:4e:20:f3:1c:f4:37:1e:ac:5c:3d:2c:
b3:55:4b:d9:8b:2b:ad:68:e3:16:a5:d2:a9:2f:b7:
5b:8d:25:53:c3:84:1e:0a:94:84:4f:93:e1:c0:4a:
86:2f:ab:7a:1d:f0:eb:e5:b6:db:24:4b:0c:eb:79:
92:30:b9:69:96:1c:28:b7:06:40:88:f7:99:23:c2:
d2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:4F:4E:75:68:0C:9B:E9:C6:52:7C:0A:59:9F:F1:FC:F6:C8:69
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6907::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f3:5b:c8:c2:53:f0:d6:a9:08:f2:a3:ff:65:1d:c6:42:52:
7b:db:8e:2c:93:ec:58:89:91:42:bf:75:80:fb:b1:5a:c1:ff:
61:31:46:0f:8a:ef:35:b5:0a:dc:64:23:de:28:d1:4c:8d:b0:
af:80:cd:b0:19:34:69:47:23:b0:bf:3b:25:6b:15:1a:68:aa:
95:d3:a8:57:87:f1:c4:90:60:3f:7b:e4:5a:69:58:85:b8:a7:
4f:17:57:c1:b1:62:43:05:db:c2:b4:b3:b1:ab:ff:25:c8:c6:
52:a3:59:e5:62:7a:87:9f:6c:ef:65:57:31:ae:78:45:1e:11:
ba:08:ce:25:86:a0:b7:29:b8:bf:aa:89:c1:21:0f:e7:31:fe:
43:1e:76:2c:0a:9a:d2:83:f6:ee:a5:39:a2:e4:69:8f:16:f8:
a6:57:5f:c5:64:a6:41:35:48:0a:3f:c8:e7:ea:16:0e:a4:56:
9e:67:eb:cc:39:56:eb:bf:b5:74:0f:27:a4:17:42:a9:1a:11:
d5:2d:dc:8d:39:85:41:a7:7f:4a:cd:a6:25:ce:ab:56:74:79:
3e:06:af:4c:c2:20:54:62:4e:43:0c:b6:3e:db:76:50:0a:a0:
58:d9:56:9c:a2:bb:a1:f1:92:82:ad:d1:b5:f2:12:5d:79:70:
69:d5:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:08:28 2025 by rpki-client