Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
File: AS200021.roa (raw, json)
Hash identifier: IslSLqx3S5sRNXGqDaKkt2n3xKWqOoKouKgmo2WnBCo=
Subject key identifier: A6:54:30:1F:AA:14:F6:52:9C:F4:B5:E1:DC:C4:10:94:C1:1B:91:38
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 0521CB2CCAE7D796275E3EC6ED164B0304CA8E87
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
Signing time: Tue 13 May 2025 04:00:27 +0000
ROA not before: Tue 13 May 2025 03:55:27 +0000
ROA not after: Tue 12 May 2026 04:00:27 +0000
asID: 200021
IP address blocks: 2a0f:9400:6f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:21:cb:2c:ca:e7:d7:96:27:5e:3e:c6:ed:16:4b:03:04:ca:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 13 03:55:27 2025 GMT
Not After : May 12 04:00:27 2026 GMT
Subject: CN=A654301FAA14F6529CF4B5E1DCC41094C11B9138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:bb:86:9f:cb:a6:f2:ac:d6:96:a9:ab:3b:
1b:83:e7:da:5d:5d:a0:2a:2a:4e:5d:e1:e6:50:36:
03:90:cd:c6:44:5d:0b:fa:d2:ae:3d:c7:9a:43:bf:
99:25:53:4c:ec:bd:bb:98:dd:7f:da:c3:74:71:6b:
42:db:8b:6a:b9:c6:ee:da:b6:3c:f9:11:a9:10:bf:
0a:35:d6:29:4d:c3:80:93:c6:df:f1:83:6b:2b:0d:
3f:b6:34:74:e3:40:5f:c8:9f:64:1e:39:df:c6:82:
ec:f8:78:ee:d5:21:d0:70:4e:d5:d1:0e:8f:4c:40:
66:d4:91:eb:c8:5c:32:f9:79:99:e9:1f:18:ae:42:
69:26:69:f3:07:d5:d1:5e:4a:19:d3:68:ae:9e:0e:
49:15:ea:46:3a:48:19:6e:f5:9f:f1:52:7f:3e:6e:
9e:03:21:cc:a3:90:25:0e:63:52:82:d4:2b:ab:ef:
f0:e5:3c:8c:20:8d:09:ee:1a:9b:21:10:c5:86:17:
81:d2:ce:c3:9a:47:6a:be:58:97:88:05:92:bc:0f:
09:77:93:52:b5:e5:44:13:8a:6a:77:cd:d7:9f:78:
20:f7:87:af:b2:9f:77:5c:54:75:71:bf:9f:03:ba:
7c:2f:17:a2:08:cf:e7:a7:4a:1a:13:14:02:22:60:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:30:1F:AA:14:F6:52:9C:F4:B5:E1:DC:C4:10:94:C1:1B:91:38
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
bf:95:7a:5e:3e:b1:5a:83:62:ae:47:73:c8:4e:f0:46:10:e9:
19:26:56:73:51:12:6c:1a:5b:9a:96:49:8f:d1:a2:6b:f1:6e:
38:ea:f1:bf:ba:71:4f:15:4e:e1:b5:a2:f2:02:2d:d3:97:79:
27:66:d9:31:94:ce:da:c9:ac:37:c4:8f:a0:17:c3:98:68:3c:
ac:b1:c9:58:b8:62:e2:19:c1:b3:b8:f8:21:3f:ae:6a:da:d7:
6e:88:74:b1:8c:6b:e0:3c:e9:02:fb:31:7b:7e:10:60:2e:c9:
52:f4:16:57:89:1d:d7:b4:6a:0b:4a:2e:b7:b5:73:aa:b8:57:
2d:86:5b:7e:b5:dc:29:f3:f8:ef:9f:26:79:c7:27:75:ef:1b:
ba:80:f8:5f:71:78:e7:cc:1b:b8:b6:81:32:bd:74:96:8a:56:
55:56:e4:b8:2f:33:f7:6e:f8:fa:07:12:e1:62:3f:02:84:34:
c1:e2:ca:59:85:e8:f1:e9:06:57:94:28:17:41:b7:2c:1c:28:
63:85:08:3f:4d:df:a4:7a:22:14:ba:19:f8:dd:bd:2a:d6:c6:
78:3e:60:ee:b3:18:b3:2e:3c:0b:cc:e2:d2:38:59:60:06:71:
4f:d4:04:b7:ac:9d:8d:35:24:eb:81:ab:a7:3a:de:33:99:5b:
e2:78:7c:5e
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUBSHLLMrn15YnXj7G7RZLAwTKjocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA1MTMwMzU1MjdaFw0yNjA1MTIwNDAwMjdaMDMxMTAvBgNV
BAMTKEE2NTQzMDFGQUExNEY2NTI5Q0Y0QjVFMURDQzQxMDk0QzExQjkxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrU7uGn8um8qzWlqmrOxuD59pd
XaAqKk5d4eZQNgOQzcZEXQv60q49x5pDv5klU0zsvbuY3X/aw3Rxa0Lbi2q5xu7a
tjz5EakQvwo11ilNw4CTxt/xg2srDT+2NHTjQF/In2QeOd/Gguz4eO7VIdBwTtXR
Do9MQGbUkevIXDL5eZnpHxiuQmkmafMH1dFeShnTaK6eDkkV6kY6SBlu9Z/xUn8+
bp4DIcyjkCUOY1KC1Cur7/DlPIwgjQnuGpshEMWGF4HSzsOaR2q+WJeIBZK8Dwl3
k1K15UQTimp3zdefeCD3h6+yn3dcVHVxv58DunwvF6IIz+enShoTFAIiYIS9AgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUplQwH6oU9lKc9LXh3MQQlMEbkTgwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwMDAyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoPlABvMA0GCSqGSIb3DQEBCwUAA4IB
AQC/lXpePrFag2KuR3PITvBGEOkZJlZzURJsGlualkmP0aJr8W446vG/unFPFU7h
taLyAi3Tl3knZtkxlM7ayaw3xI+gF8OYaDyssclYuGLiGcGzuPghP65q2tduiHSx
jGvgPOkC+zF7fhBgLslS9BZXiR3XtGoLSi63tXOquFcthlt+tdwp8/jvnyZ5xyd1
7xu6gPhfcXjnzBu4toEyvXSWilZVVuS4LzP3bvj6BxLhYj8ChDTB4spZhejx6QZX
lCgXQbcsHChjhQg/Td+keiIUuhn43b0q1sZ4PmDusxizLjwLzOLSOFlgBnFP1AS3
rJ2NNSTrgaunOt4zmVvieHxe
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:34:56 2025 by rpki-client