Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213891.roa
File: AS213891.roa (raw, json)
Hash identifier: etMXujOFd1B25cq5hqrw0xZLyciHNmAQiBfTz8Qgjrw=
Subject key identifier: 0C:1D:A5:5A:14:94:42:64:88:F0:C9:51:9F:6B:97:9E:FD:8F:05:E3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2B0729347C2489C7BCAED011E61AD67604E9D80F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213891.roa
Signing time: Mon 10 Feb 2025 20:41:13 +0000
ROA not before: Mon 10 Feb 2025 20:36:13 +0000
ROA not after: Mon 09 Feb 2026 20:41:13 +0000
asID: 213891
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:07:29:34:7c:24:89:c7:bc:ae:d0:11:e6:1a:d6:76:04:e9:d8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 10 20:36:13 2025 GMT
Not After : Feb 9 20:41:13 2026 GMT
Subject: CN=0C1DA55A1494426488F0C9519F6B979EFD8F05E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:e3:3f:29:67:fc:7f:30:51:50:71:ec:1f:
e6:af:00:20:cc:1e:a7:7d:07:0f:c0:97:1a:6e:a7:
d0:f6:c2:5e:7c:a0:43:01:3a:3b:17:66:63:48:37:
1f:3c:d6:be:6a:f3:4a:f3:ce:e3:56:c0:bb:93:75:
aa:1c:78:5d:54:0f:39:21:07:72:e2:41:24:16:57:
65:6f:53:f1:b8:56:ed:eb:6e:ac:90:80:6a:f9:93:
c8:31:37:87:b3:90:6f:7d:a3:bb:b3:c0:ab:6a:f5:
04:a9:81:1c:87:76:19:f5:f6:7a:93:74:99:dc:ee:
39:36:63:8e:f7:26:73:c2:1d:34:9c:b4:ed:8d:c8:
d4:8d:79:9d:4b:28:19:a7:08:37:53:c0:8d:a2:72:
83:b7:c5:7f:21:e5:f2:9f:20:de:a3:33:d0:47:41:
88:ff:f9:9b:37:a2:f7:29:d3:0b:a6:ad:62:e5:31:
57:51:43:f4:3e:3a:bb:96:2d:f5:83:91:47:9f:ee:
c6:3d:8e:20:6f:c2:74:27:dc:7b:2b:44:62:20:0c:
13:71:3d:f0:1e:00:af:69:3f:3b:2e:3b:f6:c8:5e:
df:aa:03:41:02:40:ce:a0:cf:60:12:ad:be:c4:22:
9f:5c:9a:58:10:48:41:85:56:b2:56:0f:51:1c:4e:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1D:A5:5A:14:94:42:64:88:F0:C9:51:9F:6B:97:9E:FD:8F:05:E3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213891.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
3e:3e:61:b2:fe:85:cc:76:3f:97:27:f9:f7:e3:26:5a:dc:98:
61:11:d8:cd:d6:23:b0:32:b7:73:70:d5:69:7d:1b:a4:fe:ba:
ab:fb:df:7e:fc:5d:5d:cd:c1:cd:5b:52:f2:43:fb:1b:ad:1b:
7d:80:e1:42:32:56:b8:be:5c:5e:a6:2a:12:92:55:87:bd:cc:
26:55:a7:19:00:57:bb:6b:20:c4:15:f6:47:12:bd:d3:8b:b3:
73:1e:8e:e9:0c:32:ac:21:b4:6a:37:a8:2f:bd:ee:c8:73:c8:
63:fa:e3:d6:01:cf:5d:a7:2c:2d:29:d5:1b:01:1a:69:24:57:
5d:28:fc:15:58:d4:88:d2:c5:56:ab:cd:27:b2:a0:4f:ab:b2:
b8:de:df:af:c5:36:c0:13:0c:d0:4c:f5:96:8f:1d:41:71:30:
66:51:97:58:4e:e3:07:96:97:b3:99:9c:c5:cb:c9:50:9b:82:
91:1a:69:3d:60:7d:f1:58:b2:c9:98:31:ae:e0:7a:78:fa:eb:
d1:00:cd:fe:84:d8:c8:a0:74:34:50:8f:86:30:da:cb:e1:eb:
dc:05:17:a3:50:d7:fb:a3:a7:07:3b:10:f8:fc:63:13:79:3f:
c4:41:c9:9c:3a:df:9b:ec:52:ff:87:7a:e7:52:15:2d:d3:70:
fc:62:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:11 2025 by rpki-client