Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197103.roa
File: AS197103.roa (raw, json)
Hash identifier: qowIdsvJX1SNsZksGS26IxHavfDIz38NBuSBSBWHAnk=
Subject key identifier: 70:CD:E4:33:D4:8F:E6:72:F0:6C:E4:6B:AB:56:E6:EC:E8:CB:B3:94
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6DBF60D4375A85187BC6427157D35EB366CF6462
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197103.roa
Signing time: Fri 28 Mar 2025 23:41:40 +0000
ROA not before: Fri 28 Mar 2025 23:36:40 +0000
ROA not after: Fri 27 Mar 2026 23:41:40 +0000
asID: 197103
IP address blocks: 2a0f:9400:691e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:bf:60:d4:37:5a:85:18:7b:c6:42:71:57:d3:5e:b3:66:cf:64:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Mar 28 23:36:40 2025 GMT
Not After : Mar 27 23:41:40 2026 GMT
Subject: CN=70CDE433D48FE672F06CE46BAB56E6ECE8CBB394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:f8:e1:be:6c:93:5b:24:16:8f:88:63:b5:
b3:9f:61:c3:56:c2:28:3a:a2:1b:fb:32:32:a0:1b:
75:98:70:75:5c:ec:69:b0:7e:ef:9f:bf:08:b3:a8:
d0:0c:b2:99:e6:28:c7:eb:4d:ff:81:5f:97:0d:3c:
ab:ff:c4:2e:d3:77:02:72:ed:27:ef:aa:ff:6c:e4:
f0:72:7b:72:77:8c:1f:84:af:69:12:81:71:82:39:
1c:11:bb:11:de:2b:cd:be:fc:16:36:d3:80:bd:01:
53:6a:c1:89:4b:48:64:20:85:d9:30:76:d2:07:06:
21:92:1c:d3:b2:ce:20:d4:4c:3d:9a:37:5c:f4:16:
df:6c:30:90:0d:ec:ff:ea:dd:64:24:76:ed:65:df:
ab:f0:b3:d7:61:90:d4:5d:45:14:94:a8:08:73:68:
55:8c:c0:26:c4:f2:79:c4:b0:1b:4f:20:65:2a:b9:
38:f2:4d:1e:bd:62:82:bb:59:7a:cf:75:fe:11:b6:
07:64:43:67:47:1c:98:f4:a2:68:06:72:ff:9c:0f:
1c:43:1c:0f:4d:aa:a5:fe:fe:0b:db:e3:28:b5:52:
9e:61:e1:c3:64:f9:74:a2:da:1a:71:3f:21:2b:8a:
ef:6a:8a:97:b1:21:e9:7b:ae:3a:6f:14:6e:f7:7b:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:E4:33:D4:8F:E6:72:F0:6C:E4:6B:AB:56:E6:EC:E8:CB:B3:94
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS197103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:691e::/48
Signature Algorithm: sha256WithRSAEncryption
bb:25:c3:23:9f:76:83:04:69:6e:f7:04:e0:19:b9:06:f6:25:
e3:e3:e2:ef:3c:98:01:2e:0b:d7:68:81:94:6c:ce:31:16:33:
5e:a0:c8:09:7b:b7:74:50:c8:36:c5:1e:9e:10:43:8c:fe:02:
c8:37:17:22:2c:55:60:b3:ef:c4:d3:03:0c:86:cc:86:d9:d0:
bb:59:ce:1a:06:02:96:ed:e6:4f:8e:5c:14:5f:32:f9:c4:46:
8c:31:04:67:09:82:17:21:92:59:21:e2:9b:88:c8:3b:67:0f:
d7:a9:45:06:16:f9:78:9e:33:f5:46:42:f8:c6:c7:ac:1a:e2:
64:0b:c9:35:78:88:dd:e9:44:4b:8c:63:19:1e:bb:ef:3a:04:
23:e4:ba:fc:d0:30:b2:b9:f8:f9:3e:dc:7a:6f:9a:1b:48:32:
67:35:35:55:8c:3a:9a:a1:e9:0a:ec:6d:67:75:2d:4f:5f:fb:
ff:9d:eb:56:00:68:2c:d1:33:ae:1e:b1:a4:2f:cf:d7:19:5b:
25:40:36:5a:44:95:7c:b2:4c:b6:f1:2c:bf:91:40:e9:0a:8d:
96:8b:a7:52:4b:e6:64:94:7e:ab:28:b5:8f:f8:ed:80:44:c4:
55:5a:67:88:e0:17:3e:56:e7:37:52:87:e1:7a:ac:be:ad:b5:
7d:59:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:21:52 2025 by rpki-client