Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e203533333536.roa
File: 32332e3135322e3232352e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: e2P2tox/kAjI9yyxOAn3PkweYZyDVbTd2RZJbP38esY=
Subject key identifier: 91:83:E5:F7:06:F9:E3:1E:3E:2E:94:18:84:D4:26:BA:8D:FE:BD:05
Certificate issuer: /CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Certificate serial: 6939C24254A7A4FFBAC1FB10D6AC01B4955F4F1A
Authority key identifier: 75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e203533333536.roa
Signing time: Wed 05 Feb 2025 02:09:49 +0000
ROA not before: Wed 05 Feb 2025 02:04:49 +0000
ROA not after: Wed 04 Feb 2026 02:09:49 +0000
asID: 53356
IP address blocks: 23.152.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:39:c2:42:54:a7:a4:ff:ba:c1:fb:10:d6:ac:01:b4:95:5f:4f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454
Validity
Not Before: Feb 5 02:04:49 2025 GMT
Not After : Feb 4 02:09:49 2026 GMT
Subject: CN=9183E5F706F9E31E3E2E941884D426BA8DFEBD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:15:98:06:1f:04:d8:a6:26:c5:58:99:1e:
fd:62:7a:ff:65:f3:3b:80:9e:a1:af:58:2a:d1:00:
1b:5d:9d:f0:79:cc:2c:2e:6b:59:be:2a:40:db:d8:
f7:42:38:e1:73:b4:fa:24:b1:a6:e5:5a:ef:78:7c:
11:29:a4:e4:ba:c1:33:6f:3f:3e:da:72:40:55:c4:
c4:ba:52:d7:da:80:19:1b:ec:9e:c7:d7:dc:e2:e7:
06:d5:27:fd:94:d2:8c:1c:3b:1f:ab:6b:0b:e3:f2:
a9:cc:fa:35:45:4c:f5:b6:58:dd:68:87:19:0c:c9:
9d:4a:56:aa:3a:1f:26:c8:4a:48:31:b0:b8:14:45:
52:06:bc:31:e8:22:ec:70:27:89:41:28:bd:97:83:
6a:6a:7b:db:90:12:d5:7c:b0:6b:f5:88:8f:99:4d:
8a:54:1f:74:7f:9f:11:6a:7e:43:e7:ee:62:fe:d6:
f5:bb:af:b4:90:54:e9:15:b7:e5:a9:a6:91:07:71:
9f:d6:d7:3d:0f:6c:23:98:c0:47:1b:6c:7b:a8:2f:
5c:bb:04:f6:a0:59:5c:f2:47:cf:8a:ee:73:e4:2e:
4a:c8:b1:2c:f7:6b:5b:e1:27:da:f3:ee:cb:db:9b:
91:9f:b9:72:dd:20:8a:36:64:64:dc:63:a4:2c:34:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:83:E5:F7:06:F9:E3:1E:3E:2E:94:18:84:D4:26:BA:8D:FE:BD:05
X509v3 Authority Key Identifier:
keyid:75:E8:A0:27:E9:2C:15:B9:41:4A:59:AC:09:6B:D4:63:4B:90:69:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/75E8A027E92C15B9414A59AC096BD4634B906914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9aeaefa1-9009-4d41-9090-b27ec04ef7ef/a928fd66fc0487f5bba93f4ce32eee8bebaefff5aea95e8454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/6/32332e3135322e3232352e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.152.225.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a5:7f:26:bc:98:a1:3d:c5:ea:86:9c:25:ab:50:9c:05:6b:
7c:90:9b:3e:9f:87:2b:f2:3e:95:1d:d7:39:6e:ef:d5:e0:4e:
ad:00:19:e9:c4:d2:8f:e5:98:75:8a:8c:36:19:17:87:0c:2a:
53:aa:9a:3f:90:51:81:4b:e3:c0:c1:a5:95:cc:98:6a:2b:58:
b1:91:db:1f:8c:0b:50:50:77:1a:e0:d3:04:76:0c:db:16:b4:
a1:6a:b0:9f:b0:b9:ae:c0:d0:87:6d:f1:6f:f6:67:70:e3:e3:
f8:a6:53:e5:40:5c:c6:ed:30:a9:20:d0:5b:34:3b:31:33:31:
ac:6a:e3:76:83:97:3d:52:08:65:4c:de:32:56:fe:ef:5d:54:
d9:7f:25:b6:fd:d4:df:83:ea:7a:e2:8f:4e:4c:fb:24:30:c6:
df:e9:91:13:ae:0e:82:b9:bf:17:cf:4c:41:44:9b:1d:b7:ef:
55:f7:94:d1:2f:88:f0:de:31:d7:dd:f1:8b:0b:39:f1:ae:1a:
30:02:7d:58:77:a5:09:19:36:6a:bf:e9:26:a7:38:4e:bd:8a:
c1:b0:51:ae:ce:6f:f8:36:fb:1e:e3:b5:44:07:0b:35:1a:87:
e1:79:48:1e:74:6c:cc:c7:12:9f:3b:da:a6:70:77:ed:75:b2:
da:d9:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:50 2025 by rpki-client on console.sobornost.net