Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS154185.roa
File: AS154185.roa (raw, json)
Hash identifier: QtVWzlIOmDvLDuug8nY3yWHhpD+b4/LwbqsXKgnVMDc=
Subject key identifier: 76:06:38:F6:65:6E:7B:5D:8C:E3:C4:8E:4D:28:93:41:D3:1C:39:68
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2EA97DE84DB3F92A8AF5F07B655840625D2A5690
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS154185.roa
Signing time: Tue 02 Sep 2025 01:14:23 +0000
ROA not before: Tue 02 Sep 2025 01:09:23 +0000
ROA not after: Tue 01 Sep 2026 01:14:23 +0000
asID: 154185
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a9:7d:e8:4d:b3:f9:2a:8a:f5:f0:7b:65:58:40:62:5d:2a:56:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 2 01:09:23 2025 GMT
Not After : Sep 1 01:14:23 2026 GMT
Subject: CN=760638F6656E7B5D8CE3C48E4D289341D31C3968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:29:c2:06:4a:39:d8:1e:01:25:4d:0f:f9:2d:
61:ff:e8:31:e2:b4:e5:17:5d:69:d3:2a:f0:ef:64:
13:3e:59:59:b0:2a:9e:b9:3a:2d:d8:84:67:d0:39:
e8:80:47:65:d8:c6:22:01:ca:e5:58:2b:2b:8c:ca:
b1:14:4f:c9:ac:e6:b8:ab:e2:64:e0:61:93:59:20:
9f:3d:25:38:ec:43:cc:9d:1d:25:13:67:de:5f:6f:
07:de:8d:40:68:1c:f5:ff:4b:72:b7:0e:fe:28:21:
3a:b9:f2:0d:f9:81:88:49:66:d2:55:86:88:ef:d9:
46:84:b6:99:a7:5c:7d:20:92:3e:0b:86:31:ba:10:
44:c0:3d:9e:68:44:fd:12:f0:60:4e:e2:b2:dc:92:
a9:a5:33:74:05:87:e0:92:43:f0:d5:eb:ec:79:60:
38:6f:ed:60:0a:09:6a:2f:64:32:83:7e:55:3a:c3:
bc:9f:6f:bb:5d:e4:7a:40:97:26:d0:2b:75:01:06:
22:51:c2:65:15:35:57:8b:cd:b4:93:9d:46:78:38:
6d:6d:00:76:76:77:8e:9a:87:d9:07:77:1d:a4:fd:
cd:3f:f1:12:cc:f8:ae:aa:40:dd:e1:2e:3a:db:a2:
23:82:e0:10:d4:a3:03:cc:18:9e:57:64:48:e2:06:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:38:F6:65:6E:7B:5D:8C:E3:C4:8E:4D:28:93:41:D3:1C:39:68
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS154185.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
0b:21:05:6a:3c:5c:73:f4:ab:53:6c:4b:28:18:b1:c1:48:2d:
fc:23:0a:a4:18:a6:6b:d6:b0:57:7b:92:06:5f:dc:9b:0f:27:
3c:3e:a4:28:cd:8e:e1:c5:2d:43:49:02:b2:a1:97:9b:32:44:
3f:07:cb:b3:5a:53:1e:dc:45:14:ac:03:5a:0b:e9:55:8a:4b:
6c:b6:0f:38:1e:b8:e5:bc:9e:07:a4:79:14:a7:f3:ac:45:49:
7f:33:bd:9f:2e:6f:05:12:37:e6:9c:08:9c:f1:48:28:f1:f8:
b4:4e:e0:c7:e1:75:a8:ab:98:4e:6a:f2:17:5c:f8:f2:fd:f8:
09:6a:fe:70:1f:e3:ae:79:b2:d2:bd:13:af:0d:c8:2e:58:f5:
db:21:5f:09:b1:37:15:00:3d:72:2b:ba:16:02:6d:a5:bb:46:
9d:ca:98:0f:36:95:9a:7c:e0:77:db:8c:c1:66:20:e0:0e:09:
9e:88:11:16:38:5c:6f:82:4f:e0:47:b9:5c:f1:f2:6b:16:bf:
0a:fa:aa:ce:32:e0:f0:52:d3:0a:b9:76:7a:1c:56:20:74:28:
29:4f:03:49:c6:85:fa:be:84:c5:a3:d1:83:09:a4:38:a2:1f:
e8:a9:11:17:ad:22:41:bb:0a:e4:bf:94:18:7e:c9:23:a1:e8:
e0:2b:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:18:00 2025 by rpki-client