Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
File: AS215026.roa (raw, json)
Hash identifier: tv/B35/rOpanp7ld9Gzv0mRCK/BaacAr6TRBCzO97+o=
Subject key identifier: 0E:ED:5F:C3:02:CA:FA:2A:84:57:01:6A:05:C3:52:23:53:65:70:98
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C1FFA3E8FB6644B6D264D792D0EA9900B35B51E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
Signing time: Sat 05 Jul 2025 22:30:20 +0000
ROA not before: Sat 05 Jul 2025 22:25:20 +0000
ROA not after: Sat 04 Jul 2026 22:30:20 +0000
asID: 215026
IP address blocks: 2a0f:9400:6109::/48 maxlen: 48
2a0f:9400:6118::/48 maxlen: 48
2a0f:9400:611c::/48 maxlen: 48
2a0f:9400:6146::/48 maxlen: 48
2a0f:9400:6149::/48 maxlen: 48
2a0f:9400:614f::/48 maxlen: 48
2a0f:9400:6905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1f:fa:3e:8f:b6:64:4b:6d:26:4d:79:2d:0e:a9:90:0b:35:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 5 22:25:20 2025 GMT
Not After : Jul 4 22:30:20 2026 GMT
Subject: CN=0EED5FC302CAFA2A8457016A05C3522353657098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:4e:f1:08:81:7b:89:c5:52:d7:b8:2c:e2:
60:09:33:3a:35:86:70:ae:aa:86:03:20:91:16:7c:
ea:89:38:05:62:79:95:70:0e:dd:eb:79:54:fb:f3:
60:c6:f7:c8:61:da:75:ca:56:ac:05:dc:ac:11:31:
06:6a:2c:30:b8:84:45:c5:41:18:15:db:ad:ae:9e:
0f:48:97:cd:44:7b:80:4c:60:f3:0a:b9:bf:42:b7:
65:e7:73:4f:d3:7a:17:e8:b5:87:91:ef:36:03:99:
64:50:50:e8:8c:8e:57:ed:12:01:73:77:3a:18:52:
f4:89:b4:0f:45:ce:96:8a:81:55:85:44:db:5b:6d:
24:bd:8d:35:8b:fe:84:11:35:6c:2a:f7:b9:3c:6b:
ce:09:1d:81:3a:f2:09:aa:f5:81:28:25:2a:f5:77:
1b:f9:a2:ee:53:82:61:8f:48:1c:c7:20:19:f7:64:
ff:7d:f5:56:de:a6:f0:44:0c:42:b4:66:4a:e0:d8:
7f:1d:0c:55:59:89:28:ba:31:7f:5c:a4:a2:68:c9:
db:ea:85:b8:95:53:4f:df:c8:39:67:6a:4c:e3:5f:
de:f2:45:45:86:f8:72:ad:76:e0:0c:a2:c1:28:72:
d9:32:3b:a5:9b:16:0b:e0:66:0b:8b:31:32:f7:8b:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:5F:C3:02:CA:FA:2A:84:57:01:6A:05:C3:52:23:53:65:70:98
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215026.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6109::/48
2a0f:9400:6118::/48
2a0f:9400:611c::/48
2a0f:9400:6146::/48
2a0f:9400:6149::/48
2a0f:9400:614f::/48
2a0f:9400:6905::/48
Signature Algorithm: sha256WithRSAEncryption
1c:5a:2b:df:15:7b:9a:64:6c:91:dc:80:73:85:e6:34:85:b9:
30:56:4f:e2:e9:57:fc:8b:1e:53:68:1c:d3:fc:85:a1:c1:7d:
2d:7b:91:c7:f4:a5:c4:76:52:ea:09:69:31:ff:90:e2:a2:5e:
4e:f8:fc:bd:ed:94:c2:cf:c1:d2:14:ac:51:d5:f5:c4:49:42:
97:d8:60:40:06:f2:bf:de:f2:a8:58:35:88:7f:ea:b2:df:f9:
16:3f:ab:92:ca:a8:44:42:cf:7d:3c:1e:df:f9:24:74:47:07:
6e:93:92:1b:70:ff:16:a4:0d:6d:a7:a5:2f:d6:dd:c0:3a:da:
07:9f:f3:c4:e4:8b:ba:a9:10:ae:79:44:16:1b:21:2e:84:59:
fb:2a:e6:f0:2a:d6:2a:19:fa:56:24:3c:43:da:70:74:15:f0:
13:8d:d3:c3:73:49:f9:32:ba:c8:79:9a:8a:a5:ae:07:63:6a:
de:d5:74:1b:61:14:13:58:f0:e2:0c:3b:5c:22:fa:08:77:14:
af:50:17:62:7b:34:45:92:13:cb:8d:ba:42:77:53:fe:3c:c4:
6e:fc:9e:91:fb:73:5a:bb:7d:f6:7e:ef:d5:ab:94:12:a1:67:
ee:af:64:bf:e7:08:f9:f4:4c:ee:f9:ce:a0:e8:bb:33:25:04:
7a:80:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:08:03 2025 by rpki-client