Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
File: AS150506.roa (raw, json)
Hash identifier: UcDZJP5oP10Sbci5c5dGpzaJGKGX3c8aY6V6eeRIyY0=
Subject key identifier: EC:0C:53:0D:77:5A:AD:CE:91:1D:1E:98:34:AC:93:D0:D6:C6:C0:0D
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1178CDA900F969E857A1055F650C718004ACEAE4
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
Signing time: Sat 29 Mar 2025 12:41:55 +0000
ROA not before: Sat 29 Mar 2025 12:36:55 +0000
ROA not after: Sat 28 Mar 2026 12:41:55 +0000
asID: 150506
IP address blocks: 2a0f:9400:691c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:78:cd:a9:00:f9:69:e8:57:a1:05:5f:65:0c:71:80:04:ac:ea:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 29 12:36:55 2025 GMT
Not After : Mar 28 12:41:55 2026 GMT
Subject: CN=EC0C530D775AADCE911D1E9834AC93D0D6C6C00D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:39:19:91:c1:bb:e4:38:08:5a:1b:64:dd:
f8:2f:6c:23:d5:96:50:b4:15:31:11:56:5a:04:2e:
0e:d6:3e:2c:0c:8c:d6:17:c4:d0:44:03:c5:52:1c:
6a:74:9f:72:93:9b:f9:c2:87:00:44:82:fb:0f:1d:
22:cf:e8:6c:c1:c2:d9:90:c4:79:41:94:3a:73:d9:
85:6f:1b:49:8f:14:be:37:7a:b5:ce:7d:7c:45:6c:
b9:75:d7:66:61:ed:ce:16:02:05:ad:fb:70:d4:23:
13:e3:4e:4f:ab:3e:80:4a:79:1d:b3:76:0e:76:6e:
55:c2:eb:75:6a:0a:dc:88:4a:6e:d7:0c:18:47:1f:
97:e7:9b:27:17:b8:97:c0:19:02:d2:80:63:21:65:
06:43:c9:c9:0e:b9:a2:09:12:39:70:98:4f:32:ca:
a4:8f:6b:31:a4:90:62:70:89:00:83:c1:d1:7c:8b:
b0:78:c2:8e:f4:e5:dc:f2:f2:43:6c:2f:22:b1:75:
ea:f4:0b:da:33:06:ea:53:5d:84:7d:12:54:fd:cf:
26:31:67:11:27:1d:c2:5f:97:7f:38:97:aa:10:ba:
00:38:ba:3c:c1:09:ca:64:a7:6f:d1:3f:da:d4:f5:
bc:aa:d5:b1:f1:86:23:aa:69:ef:13:52:cf:4c:d6:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:53:0D:77:5A:AD:CE:91:1D:1E:98:34:AC:93:D0:D6:C6:C0:0D
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691c::/48
Signature Algorithm: sha256WithRSAEncryption
22:72:1a:3f:ee:c8:10:de:3b:fd:85:92:fa:e4:a9:01:7c:a5:
04:70:66:af:2b:e8:80:25:31:fd:e2:cb:c9:f1:f3:44:e8:61:
13:89:94:01:6d:b1:ba:97:86:c9:8e:e6:dc:fb:a6:c4:d0:5f:
57:74:ad:14:ba:30:39:54:05:ef:b3:c8:8e:3f:0e:c6:dd:14:
b4:dc:1f:d3:65:de:b6:97:97:3e:18:04:67:ca:fc:a6:7b:0c:
54:ee:c6:89:50:b9:58:e5:df:55:20:fa:89:2d:83:cf:33:1f:
0d:6a:ab:de:85:90:c8:71:9c:42:b7:6e:93:12:1f:75:55:f8:
11:6f:da:95:fd:42:30:bb:16:ac:33:d1:7a:34:74:25:31:9b:
78:c0:b8:85:07:fc:20:1a:3e:21:57:39:b2:d8:d2:f6:c8:dc:
6c:93:48:7d:ea:8d:c3:47:48:1d:12:c3:5a:9c:ff:83:6b:15:
78:ab:02:21:89:59:1e:73:4a:d5:14:a9:21:31:f5:9f:7a:1c:
7e:3a:2c:05:72:a7:01:fe:fd:6d:2e:e1:d3:b5:66:52:e3:de:
33:77:2d:a3:86:b0:a0:29:e7:ce:d0:62:0f:8d:a8:52:41:89:
99:bf:f9:fa:bd:fd:22:32:20:e7:0b:0c:ef:4b:be:ba:67:e3:
9a:2c:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:57 2025 by rpki-client