Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
File: AS203040.roa (raw, json)
Hash identifier: QuVMGgnwWSTarWAgtgY8MVV5O0fzuKj6HFjjJz507AI=
Subject key identifier: 99:2B:57:ED:38:F2:F4:D4:D4:E9:D9:AC:C3:96:31:64:AB:C0:E0:74
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 440BEDFD996D7735A19C8EB9947F51CA6A9D7BFB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
Signing time: Wed 09 Jul 2025 19:24:27 +0000
ROA not before: Wed 09 Jul 2025 19:19:27 +0000
ROA not after: Wed 08 Jul 2026 19:24:27 +0000
asID: 203040
IP address blocks: 2a0f:9400:6114::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0b:ed:fd:99:6d:77:35:a1:9c:8e:b9:94:7f:51:ca:6a:9d:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jul 9 19:19:27 2025 GMT
Not After : Jul 8 19:24:27 2026 GMT
Subject: CN=992B57ED38F2F4D4D4E9D9ACC3963164ABC0E074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:e7:fe:5a:95:2b:17:e4:e8:1b:c6:75:39:
5b:0d:9b:94:b0:c2:5d:c5:bc:84:b9:9c:1e:2f:6a:
51:73:c5:b0:74:40:1e:20:18:ad:37:65:dd:3c:f0:
e4:df:69:ba:79:9c:c2:16:6a:44:9a:41:e7:d6:a4:
b1:c8:63:0a:a4:38:29:99:aa:3d:db:e7:7e:df:49:
80:de:49:79:e8:47:3c:eb:c7:48:ce:51:70:5b:43:
e4:31:8b:cd:b3:37:af:6d:bb:30:2f:53:76:5a:7b:
cb:ef:a3:4b:dc:10:34:d4:6b:8d:71:66:d2:3e:b9:
34:87:23:c3:39:27:0d:86:b6:69:32:81:68:3b:a5:
d3:1c:87:7d:bc:4c:06:c0:b0:64:5c:fa:8f:84:b5:
7b:4a:11:4f:c0:5d:f5:7b:29:d9:30:3e:b7:28:5c:
2b:c8:73:44:94:82:b1:7c:fc:63:b8:11:e2:86:ad:
a6:1d:10:52:92:c1:ac:70:08:f9:59:50:e4:22:1a:
c6:c6:f9:7f:c3:86:83:01:ef:11:73:45:d2:dd:d5:
c0:b7:0d:b0:8e:58:f8:33:4a:9c:25:d1:01:c1:36:
08:81:31:a9:af:4a:6e:1a:99:28:93:ae:7e:b3:bd:
b7:b8:86:f0:d1:00:62:a4:96:93:57:3b:89:d8:ba:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:57:ED:38:F2:F4:D4:D4:E9:D9:AC:C3:96:31:64:AB:C0:E0:74
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS203040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6114::/48
Signature Algorithm: sha256WithRSAEncryption
ba:59:6b:a1:e6:84:a8:11:91:7c:0a:58:6f:ef:12:15:97:fe:
ee:b0:1e:21:e7:3a:ac:af:96:2a:87:6a:0c:cc:5c:40:8b:8f:
19:42:84:9e:b6:20:d6:31:99:1a:0f:68:e8:45:e6:fb:66:37:
c4:75:20:7e:76:ce:cd:ae:7b:ef:fa:74:c0:4f:3f:21:16:9b:
06:04:55:2b:68:95:6d:45:65:7f:f5:4f:08:27:f8:2c:d1:25:
27:70:e6:48:41:ee:e2:66:10:d3:6e:3b:9c:0c:e9:82:28:cd:
c1:34:d3:9f:50:37:04:26:6a:c3:f9:84:fa:27:58:81:88:91:
84:cb:cf:9b:27:2a:1d:2a:69:17:26:34:24:36:65:aa:e4:60:
88:3c:43:98:3d:89:89:ff:95:7d:a1:d2:74:bb:ef:72:dc:da:
7b:66:9e:ce:c6:f2:c0:6d:33:21:4b:81:d1:b6:b2:37:de:13:
28:9c:f1:fc:88:7b:66:a3:10:57:92:01:3f:f1:b2:09:76:78:
83:61:b6:e1:51:4e:ff:ff:13:44:42:3c:19:d3:69:fd:b6:8c:
9f:bc:e2:b7:eb:71:17:52:bc:16:77:00:d1:94:55:50:8b:d3:
31:70:52:6e:88:99:6c:48:c4:55:fa:26:ba:36:71:9a:75:82:
66:bd:0b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:57:17 2025 by rpki-client