Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19624.roa
File: AS19624.roa (raw, json)
Hash identifier: IvYrInQfgZXEnVJO5huzYLEhsAM9NLRvGZCG3RrJBSw=
Subject key identifier: 21:25:C4:32:11:10:0C:6B:AA:C0:A1:3B:AF:8D:01:CF:18:42:F3:27
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0C64CBB00E9BC903EF3FDB4A61F3A7B224D37ED4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19624.roa
Signing time: Fri 29 Aug 2025 18:45:57 +0000
ROA not before: Fri 29 Aug 2025 18:40:57 +0000
ROA not after: Fri 28 Aug 2026 18:45:57 +0000
asID: 19624
IP address blocks: 2a0f:9400:690f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 17:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:64:cb:b0:0e:9b:c9:03:ef:3f:db:4a:61:f3:a7:b2:24:d3:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 29 18:40:57 2025 GMT
Not After : Aug 28 18:45:57 2026 GMT
Subject: CN=2125C43211100C6BAAC0A13BAF8D01CF1842F327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:44:23:46:f2:44:e1:2f:2b:de:04:26:67:78:
f4:1f:03:fc:8e:74:43:18:56:40:6a:f1:e2:99:36:
ff:75:cb:33:b5:45:7b:76:ad:bf:9c:c3:4d:7d:28:
7c:39:64:58:ae:1b:c1:f8:c2:5e:67:e3:54:0a:24:
d5:25:52:ea:d7:b2:65:73:ff:7c:9b:7d:6b:e2:a4:
e8:1d:c7:4b:18:b2:39:07:29:a7:2d:59:96:88:26:
89:90:2e:38:35:f0:b8:41:c8:36:d6:7e:2c:9b:9c:
5e:46:8d:22:15:c8:02:ff:02:40:e4:59:d4:fa:26:
b8:db:07:42:e7:27:71:4b:a9:bb:ef:79:cc:32:f3:
a6:10:b6:5a:a8:1e:82:6e:b9:74:47:8c:fa:d9:02:
d7:14:81:d1:3e:05:d1:31:63:7e:d5:f3:3c:af:27:
59:3f:d2:7c:45:c3:e8:62:b9:91:31:8e:03:fd:16:
eb:01:8c:bf:af:04:5c:c6:b1:f3:48:f8:6b:d9:14:
1e:d0:3d:db:66:4b:f4:78:e3:4a:ac:18:43:66:2c:
93:a8:ac:42:6e:42:62:da:0a:93:b4:fc:d4:b0:7c:
83:d2:43:34:fc:3a:4f:57:7d:0b:9f:03:f5:6c:32:
d5:eb:94:34:b9:a1:ac:c4:c3:f1:b5:97:6b:f0:54:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:25:C4:32:11:10:0C:6B:AA:C0:A1:3B:AF:8D:01:CF:18:42:F3:27
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS19624.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:690f::/48
Signature Algorithm: sha256WithRSAEncryption
6d:b5:a1:8c:3e:30:20:d5:84:45:c2:93:d6:ff:ce:5a:da:79:
77:98:1a:16:f9:c9:67:06:77:20:df:71:f4:33:ca:dd:b1:34:
66:4a:d8:82:20:69:48:a2:a4:71:39:1c:86:37:e9:3f:0c:58:
92:dd:df:51:e7:45:02:40:e1:66:13:24:d1:e5:00:d6:df:a7:
e1:1c:25:07:4b:e9:f1:a5:1f:fb:de:96:d3:03:e4:b1:ab:d3:
c9:ce:46:46:63:a0:46:75:68:bd:e5:61:00:55:a7:be:a1:18:
3b:cd:b4:b6:6c:e5:57:3c:74:97:df:e1:d8:1e:ab:94:7f:16:
af:80:c5:50:c9:2d:1a:ef:32:41:89:79:b1:ef:31:ad:1e:3f:
38:99:13:31:ff:c8:a4:41:42:81:8b:26:b1:b5:38:1d:f7:83:
5d:0c:09:ec:69:a4:bf:0e:48:71:33:ec:3b:a5:63:99:4a:60:
54:45:22:29:97:25:cf:f0:cc:f8:d4:c9:63:2c:ee:f9:f8:cf:
6c:ed:34:fb:eb:4a:e3:d0:73:9e:d3:29:4a:6a:71:b9:a1:56:
bf:80:60:46:95:ab:a5:0f:34:2f:38:62:82:9a:ee:48:f0:ca:
1a:8c:05:8f:bd:18:f0:e7:dd:49:2f:fb:a9:12:91:7b:72:72:
b5:d2:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 04:50:56 2025 by rpki-client