Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
File: AS150645.roa (raw, json)
Hash identifier: yUUDk5xSzupK0JY9Qi6vbH/gfwfvbucRbJqAxc5pOv8=
Subject key identifier: 8C:ED:CB:51:E1:3A:7E:0C:A2:06:E6:4F:C1:DA:6D:E2:90:E7:88:57
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 26CAC4E5D6C40A1604AAB2381FC4B08B964932EE
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
Signing time: Sat 29 Mar 2025 12:41:55 +0000
ROA not before: Sat 29 Mar 2025 12:36:55 +0000
ROA not after: Sat 28 Mar 2026 12:41:55 +0000
asID: 150645
IP address blocks: 2a0f:9400:691d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ca:c4:e5:d6:c4:0a:16:04:aa:b2:38:1f:c4:b0:8b:96:49:32:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 29 12:36:55 2025 GMT
Not After : Mar 28 12:41:55 2026 GMT
Subject: CN=8CEDCB51E13A7E0CA206E64FC1DA6DE290E78857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:2f:1b:5b:a2:4e:5d:ec:06:3b:61:0c:f8:
d7:8b:bb:7a:d1:d6:a4:15:63:e6:14:f6:eb:25:48:
c4:40:be:82:31:42:bd:a8:54:68:c2:49:3f:d4:17:
01:80:48:72:e1:69:e6:0e:11:56:06:d5:d0:72:58:
e0:38:a9:6c:3c:33:c6:b7:ad:9f:d0:85:76:04:14:
21:44:04:6d:7d:a8:11:e8:a3:20:f1:ac:49:01:46:
e9:15:13:5f:62:75:d2:bf:85:48:f4:27:0f:ad:67:
16:0e:44:bc:64:a8:82:ef:77:e3:17:51:e9:a4:74:
85:07:98:28:8f:0f:4c:c5:45:be:cf:17:dc:89:44:
fb:0d:1b:64:38:56:3b:99:87:2e:f5:df:b8:b7:21:
91:fa:e1:85:94:a9:48:dc:9b:40:bc:47:e0:05:cb:
0b:ef:56:2b:c5:28:9a:e3:da:ea:1c:9a:af:74:ac:
85:b8:da:e8:1a:01:bb:06:99:59:c1:fc:65:a5:a0:
c6:79:ee:ae:b4:e8:5e:04:6d:93:fd:d9:a8:92:33:
91:e4:df:cd:70:68:5a:c8:19:4e:ab:4b:ea:3b:fd:
f9:cb:ff:2a:4d:09:dd:6b:39:46:e1:3c:ce:20:d9:
07:f1:81:25:ac:97:f7:f3:2c:4d:b4:27:19:de:f7:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:ED:CB:51:E1:3A:7E:0C:A2:06:E6:4F:C1:DA:6D:E2:90:E7:88:57
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS150645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691d::/48
Signature Algorithm: sha256WithRSAEncryption
91:19:35:56:6d:21:a9:be:86:e3:49:d7:4f:a6:df:a3:08:a9:
4b:fd:2b:59:94:b3:f8:b8:2a:12:cb:45:22:1c:03:84:c4:a6:
e1:a6:a4:7b:c1:12:73:e4:6b:68:f5:db:00:c9:f4:33:c6:94:
e2:e8:77:e2:2b:39:44:46:55:89:96:cd:8a:96:f4:84:46:14:
5c:af:b8:d2:18:42:e9:61:51:dd:23:ad:6c:95:63:51:29:d3:
00:53:c4:d1:bc:1d:d9:ef:34:7d:61:c6:22:08:4e:b9:95:f6:
4d:a5:84:43:5e:52:29:6c:f1:2a:61:5a:29:6b:8e:4b:73:4d:
33:6a:8b:43:61:9d:d0:e8:9e:ea:be:85:0b:e9:e3:dc:d6:d3:
66:61:83:7a:33:21:a9:c2:05:07:42:2f:3f:45:d9:5d:23:30:
b4:c7:c1:cc:c1:9b:28:01:2a:d3:b9:c8:f8:f2:c1:b8:a9:4a:
27:d1:e6:c3:ba:2c:b5:b8:36:40:8a:be:e3:93:67:ef:bf:92:
cb:7e:71:0c:ee:0d:b1:61:db:5c:d6:68:3f:8c:53:ad:bb:78:
91:dc:02:f3:f2:0d:c9:a5:a4:68:43:3b:24:05:01:f9:03:b9:
3e:e1:a4:cb:b6:75:bc:ba:32:78:48:c6:c0:5f:2f:48:55:a7:
71:76:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:08:35 2025 by rpki-client