Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
File: AS197715.roa (raw, json)
Hash identifier: HQzewSNTMOKtLWvHhXs+z7L5QfFCwwYZkOJGjgGHVKU=
Subject key identifier: DF:56:88:74:DB:44:17:EF:5B:FD:2C:FF:68:85:9B:F3:E2:DC:FB:CA
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5555723D766DACCEF7BFCF4ED7BCC1F833D88DD0
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
Signing time: Wed 02 Jul 2025 09:21:15 +0000
ROA not before: Wed 02 Jul 2025 09:16:15 +0000
ROA not after: Wed 01 Jul 2026 09:21:15 +0000
asID: 197715
IP address blocks: 2a0f:9400:610d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:55:72:3d:76:6d:ac:ce:f7:bf:cf:4e:d7:bc:c1:f8:33:d8:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 2 09:16:15 2025 GMT
Not After : Jul 1 09:21:15 2026 GMT
Subject: CN=DF568874DB4417EF5BFD2CFF68859BF3E2DCFBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:4f:bd:73:b0:cd:44:d6:fc:05:94:cf:a1:
7b:6b:21:dc:de:52:cd:35:af:1e:75:f0:6a:31:dc:
9a:b2:9f:14:64:e7:c3:6f:2a:82:84:e0:99:cd:f5:
f1:87:a7:f1:dc:fa:d0:87:49:32:fb:7f:a4:f5:c5:
de:0a:1a:b8:22:3b:1b:1f:c2:68:35:00:76:de:72:
ec:fe:a7:51:32:9e:2d:b7:df:f4:0e:88:23:82:af:
ee:44:7e:bb:04:a5:b8:0e:15:e2:23:fb:e4:ee:8d:
62:32:52:52:b1:50:49:15:b8:47:cf:22:64:56:91:
ed:01:3e:64:f2:5f:99:87:11:a8:8f:6c:21:93:09:
47:b4:41:ad:3a:9a:a3:2e:f5:40:d8:c1:3f:c1:37:
17:c0:f5:1a:bb:84:51:48:e5:b9:e8:6f:62:06:e9:
81:f1:17:9f:b4:49:a3:45:31:93:20:e1:ec:dc:2a:
53:1b:95:8b:5c:9b:41:33:c2:c4:f3:61:75:d8:a4:
c6:7f:3f:20:04:d9:b1:48:45:7a:db:ba:d3:04:68:
5b:5e:1e:fd:0b:bc:3d:ef:fd:d9:98:91:55:a5:97:
a3:9b:cf:8c:df:36:51:32:4f:96:c4:61:c8:51:35:
fd:84:27:a6:33:59:aa:a3:56:3c:2d:48:bb:60:1e:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:56:88:74:DB:44:17:EF:5B:FD:2C:FF:68:85:9B:F3:E2:DC:FB:CA
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610d::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fe:62:7e:da:6e:63:1c:36:31:df:89:fd:c8:d6:a7:6c:c5:
2a:47:f2:11:26:a5:75:6c:8a:86:c0:d5:dd:c9:7c:eb:91:af:
4b:62:2c:d8:8d:58:f8:84:ac:0a:3e:a1:65:88:4d:53:d7:6f:
e5:33:2a:69:84:2a:9b:a3:3d:17:ef:05:8e:3a:a5:20:bc:02:
19:ba:01:a6:64:2c:e2:29:9c:c5:4d:84:ff:3e:49:32:2e:82:
35:6e:fa:6c:ea:e3:f8:5e:dd:45:fa:e6:bc:7b:1f:ef:a0:de:
16:a4:3a:88:32:97:e8:65:1e:ac:82:d0:92:04:b5:ce:58:65:
41:ef:a9:93:38:0d:93:22:9e:20:c0:ce:34:ed:0e:16:3a:87:
37:25:73:6d:f1:55:46:12:41:61:4d:1b:de:df:6a:77:36:09:
ef:f3:36:db:ab:8c:c9:45:95:22:92:d8:5e:5d:ff:65:94:60:
3c:77:e7:82:a1:0e:50:d0:0c:b0:34:d0:81:43:18:b3:56:ad:
80:ad:3e:b1:bb:59:98:9b:79:a7:b2:98:9c:ea:86:0d:b8:51:
97:d8:65:40:b2:cc:01:78:50:e7:c8:f7:8c:12:df:0b:8b:23:
86:9a:f7:5e:76:fb:a3:81:db:d8:59:fd:3c:70:f7:cc:30:83:
52:50:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:48:49 2025 by rpki-client