Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215716.roa
File: AS215716.roa (raw, json)
Hash identifier: WX53cOGkbBz4/6bRT/joZbQbJVP9kDzFQkgP4OyeXjQ=
Subject key identifier: B0:E8:17:54:84:45:3D:F7:36:F3:24:3E:A9:26:C4:DD:20:9D:BD:05
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2A91343838BBADFA451E29C73DEA6A7B822D76EC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215716.roa
Signing time: Mon 16 Dec 2024 17:47:31 +0000
ROA not before: Mon 16 Dec 2024 17:42:31 +0000
ROA not after: Mon 15 Dec 2025 17:47:31 +0000
asID: 215716
IP address blocks: 2a0f:9400:6117::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:91:34:38:38:bb:ad:fa:45:1e:29:c7:3d:ea:6a:7b:82:2d:76:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Dec 16 17:42:31 2024 GMT
Not After : Dec 15 17:47:31 2025 GMT
Subject: CN=B0E8175484453DF736F3243EA926C4DD209DBD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:e5:e2:5b:eb:eb:80:eb:3e:b1:b7:e4:d4:
ef:fb:c6:5b:f5:40:79:19:3c:fb:d3:0f:05:bf:2c:
bc:e2:6a:53:fc:0a:9b:db:7c:37:82:8f:6b:bb:70:
69:7e:17:ed:b1:4b:74:f8:4f:6e:c6:a2:1c:99:c0:
b1:d3:d4:53:d6:e8:b1:8e:b0:58:02:77:e0:3f:20:
05:63:9d:45:e2:89:1f:09:7b:20:33:e0:36:1f:50:
4e:e4:cb:76:24:9b:26:fa:9e:62:5f:3f:a3:b2:00:
92:58:76:66:c9:82:14:19:c0:21:12:49:e5:93:fa:
40:bc:ec:d3:00:76:35:5b:a0:af:5d:22:d2:b3:b5:
f1:d2:56:21:fe:f2:9c:0b:58:73:46:f3:9c:ac:43:
e9:b2:61:2c:2a:3b:e9:6a:6f:99:0d:8c:2a:7c:27:
c8:b8:5c:d0:43:6c:58:cf:a0:24:74:0e:31:b1:09:
87:d3:59:7a:54:f7:91:b2:41:fb:a0:a8:75:c4:86:
43:84:e7:59:78:92:c4:26:fc:aa:7e:9e:df:72:64:
7b:41:6c:d2:f1:89:3b:a6:31:4c:8d:9a:90:6c:68:
5f:a2:8d:73:b7:f9:a9:1a:26:7b:9c:3c:0d:d8:e8:
c3:8b:cd:d8:44:ca:0d:97:ff:72:6f:e6:57:a8:87:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:17:54:84:45:3D:F7:36:F3:24:3E:A9:26:C4:DD:20:9D:BD:05
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6117::/48
Signature Algorithm: sha256WithRSAEncryption
15:3d:f4:cd:d0:bb:74:84:2c:f0:e1:d4:69:5e:ad:7d:9b:25:
53:08:21:32:ba:61:cd:ec:83:24:8b:fc:29:67:69:96:fe:d9:
af:1d:af:e2:c6:c5:dd:d7:92:9f:7f:5b:37:6c:00:c0:5f:d2:
bc:54:c1:4d:a3:5f:a3:aa:c5:4c:b7:89:ec:da:7b:d3:a3:fc:
52:7f:6f:61:3d:e9:8c:13:68:aa:33:4d:2f:16:ba:d6:e1:c7:
e1:f4:1e:0f:38:79:62:5f:e1:b9:61:67:d3:14:54:5c:78:e3:
dc:3c:b9:3b:5a:a2:95:dd:61:43:18:1c:ed:1c:9b:48:99:38:
d2:af:b1:4f:3d:3e:4f:0b:8f:5e:ff:a9:63:11:79:69:ea:28:
82:8e:51:45:c4:a8:1a:0e:b8:cf:ab:cb:b1:1e:88:4e:41:c3:
91:5a:7c:3b:07:23:9f:31:9b:33:3f:df:8a:d5:05:9c:5b:fc:
e2:30:b8:02:41:e9:4d:60:49:99:4c:ac:41:aa:a5:6f:bf:eb:
b3:87:bf:0c:75:83:23:19:c8:15:6e:c8:37:15:f0:c3:d7:e7:
27:4f:77:02:e9:a5:61:23:42:87:9d:36:58:76:78:27:3e:7d:
fa:b5:ac:a9:dc:af:36:87:b0:66:aa:8a:6e:64:bf:f5:3c:20:
3f:6d:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:47:25 2025 by rpki-client