Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS10104.roa
File: AS10104.roa (raw, json)
Hash identifier: gpQ18+RBhF9ZDO88p13Yqj5yrdr3P7I1MZyefqoR9xI=
Subject key identifier: 6A:A5:2F:A5:06:F2:F0:3C:24:28:50:39:FC:41:60:E5:80:1E:40:C4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 7F3CEBC2405BE2A5F7B8BB82648A6676F7FDBA12
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS10104.roa
Signing time: Fri 02 May 2025 04:55:49 +0000
ROA not before: Fri 02 May 2025 04:50:49 +0000
ROA not after: Fri 01 May 2026 04:55:49 +0000
asID: 10104
IP address blocks: 2a0f:9400:770a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3c:eb:c2:40:5b:e2:a5:f7:b8:bb:82:64:8a:66:76:f7:fd:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 2 04:50:49 2025 GMT
Not After : May 1 04:55:49 2026 GMT
Subject: CN=6AA52FA506F2F03C24285039FC4160E5801E40C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:4d:02:ba:77:fb:01:9a:11:1e:6c:e0:54:
4d:5d:58:07:b9:3a:c4:c8:90:f3:1f:75:06:ee:99:
21:94:b8:48:06:73:16:78:0c:46:67:5d:bf:ec:f2:
26:96:e1:c7:6d:c1:7c:36:41:8f:6e:80:23:ef:1c:
ad:94:88:93:a2:c4:77:9f:1e:c6:c6:88:db:61:bd:
e5:33:89:8e:3d:7c:61:e9:62:f5:f6:aa:97:a5:67:
90:10:c3:d6:0f:e2:23:c6:6e:13:23:4f:a1:e6:48:
a0:c1:df:a3:2b:99:b9:71:a3:ef:8d:e0:b3:66:80:
a5:32:b8:ea:cd:d9:77:af:04:be:5f:61:b9:10:b7:
03:0a:13:8b:9e:31:97:14:0e:1d:3a:ad:91:28:d2:
be:dc:fa:16:55:d9:a4:92:48:78:3d:55:28:cc:70:
06:0d:b1:de:7f:80:08:f2:71:2b:ba:d0:35:80:0b:
22:e6:bf:59:b9:8e:ea:47:d7:05:3b:85:dd:2c:b7:
1c:7c:ac:80:4a:b0:d9:ec:f1:ea:4d:0c:89:12:1e:
b5:77:46:17:2f:68:b1:3f:cf:a2:6c:d5:09:ab:1c:
75:ae:9b:2f:4c:6c:98:ef:2e:f1:9f:a8:10:62:00:
a5:13:36:ce:42:06:a4:f8:61:1c:0f:f3:bd:67:3a:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A5:2F:A5:06:F2:F0:3C:24:28:50:39:FC:41:60:E5:80:1E:40:C4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS10104.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:770a::/48
Signature Algorithm: sha256WithRSAEncryption
65:c7:d3:9c:de:ed:7b:0d:6a:49:7b:27:5c:36:66:a6:74:f9:
bb:5b:2e:44:23:1b:72:4d:b8:f9:d8:8d:fa:9e:9f:30:e4:62:
35:76:bd:57:fc:a1:da:14:08:ba:e6:49:5b:e5:91:c8:6e:0d:
6a:ae:91:b5:84:0b:5d:98:6b:52:53:05:9c:37:20:72:c9:83:
97:42:2a:71:1b:b4:5a:b8:89:a0:d9:35:48:34:31:9b:a0:3b:
cf:14:f4:78:49:9b:b2:1b:4c:72:72:91:b4:97:03:1d:53:d9:
1c:b5:65:12:1c:06:ad:a0:19:66:ec:1c:f2:ca:86:3d:02:94:
fd:33:61:2e:cd:98:bf:5e:04:50:da:b7:8d:58:af:39:1e:14:
a9:0a:19:be:0c:69:25:16:13:b3:89:02:67:a5:b1:72:0e:ae:
db:e6:ed:60:32:3f:bd:fa:5c:fc:b7:76:73:49:57:21:22:b6:
b7:41:2b:23:06:fa:d2:4f:60:13:93:df:f2:3a:80:64:c8:f4:
0f:61:f4:7f:de:de:c7:d2:c2:f7:dc:89:51:cf:bb:79:44:83:
98:2c:aa:c7:80:1e:aa:77:7d:85:23:dd:de:7e:47:69:c2:ed:
f4:e9:71:55:56:cf:77:0f:51:be:cb:53:9f:d5:69:21:b9:e8:
c6:52:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:33:16 2025 by rpki-client