Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205692.roa
File: AS205692.roa (raw, json)
Hash identifier: Kd04kSZqezjOWiTWyN0P1cw8ti1YZegO+QC5bKoC0PU=
Subject key identifier: 2A:A3:12:7B:AD:C5:3B:AF:94:6B:0F:10:BE:E7:CF:33:3B:23:47:E5
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 505F477ACE5E817C8F6BBEFB3BD13CFF092E43E5
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205692.roa
Signing time: Thu 22 May 2025 10:38:10 +0000
ROA not before: Thu 22 May 2025 10:33:10 +0000
ROA not after: Thu 21 May 2026 10:38:10 +0000
asID: 205692
IP address blocks: 2a0f:9400:6170::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5f:47:7a:ce:5e:81:7c:8f:6b:be:fb:3b:d1:3c:ff:09:2e:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 22 10:33:10 2025 GMT
Not After : May 21 10:38:10 2026 GMT
Subject: CN=2AA3127BADC53BAF946B0F10BEE7CF333B2347E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:5a:ff:f7:cd:d9:27:26:0c:46:2b:fa:58:
6d:6e:56:bb:ff:18:59:4c:a3:d6:69:5e:19:66:71:
45:c2:f9:88:d7:45:4f:f0:0c:15:48:12:b4:bc:d7:
13:ce:77:0c:fe:ca:21:ff:99:68:f2:e6:eb:c2:ff:
a2:5a:e9:a6:62:18:fa:cc:e1:b3:90:9f:a3:7a:06:
85:4f:ab:43:0c:28:8d:51:73:8a:bb:31:da:2d:16:
5b:51:83:95:57:f7:b1:03:e7:ea:77:7b:d0:13:cf:
0b:50:a0:db:3c:2d:5b:97:46:0f:2a:3d:f5:6a:b7:
01:7d:0d:b4:be:0b:0e:7c:53:61:fc:ec:2b:72:ec:
45:c7:69:13:89:48:fa:96:bf:37:37:fd:29:9f:43:
f9:53:69:76:50:c1:d3:d6:e0:4d:b5:cd:a9:41:8b:
d6:13:a2:0a:c4:df:b1:6b:85:d7:ee:2a:5a:c3:69:
c4:99:3f:83:56:4d:26:fb:19:c3:f6:79:36:5c:c5:
56:9b:0b:65:37:a7:a6:60:59:92:0a:c7:1a:70:f9:
2c:5d:0f:a2:76:30:ee:f1:65:2b:3c:24:71:90:ba:
8a:22:da:04:af:bf:19:c1:75:d7:cb:1d:5d:c0:94:
9d:e5:a4:f4:e2:c0:e2:26:6c:d7:c3:69:94:84:35:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A3:12:7B:AD:C5:3B:AF:94:6B:0F:10:BE:E7:CF:33:3B:23:47:E5
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205692.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6170::/44
Signature Algorithm: sha256WithRSAEncryption
54:c3:6d:c1:20:ab:77:3d:99:99:8a:7c:c6:e7:61:39:f5:ae:
8b:69:c7:c4:a7:af:70:17:43:94:74:36:18:bb:7a:b2:74:28:
dc:b5:48:b5:06:86:f2:92:15:70:2d:a6:ea:58:d9:0b:7e:c0:
68:ba:08:fc:56:86:d6:c8:37:47:77:84:45:18:b7:95:c3:e2:
4d:ff:d6:64:6d:0b:24:d6:93:ea:82:b8:a7:6a:2e:69:dd:ad:
96:53:66:0a:e4:c4:18:ef:6d:8c:b5:40:0e:37:08:0d:dd:71:
df:c4:26:53:38:d2:0a:b1:bb:bc:ee:39:b9:60:cd:c8:9f:71:
19:0a:f2:0e:0e:72:7e:97:d5:7e:b2:5d:1f:03:f4:9e:a2:71:
3b:4b:a2:45:68:2b:30:64:0b:d8:98:cb:a2:a1:a2:21:6e:56:
41:9a:06:1e:37:14:50:31:e7:7f:dd:6b:15:63:04:f7:35:7a:
0e:5f:11:be:b3:11:2b:44:b5:7d:10:46:35:a3:53:3c:aa:7a:
84:ec:ec:26:04:61:09:3c:be:eb:5e:d1:01:d6:95:32:cd:82:
43:fe:71:eb:0a:50:03:50:2d:7a:fa:f5:8c:ec:2b:8b:d9:ef:
e5:16:2e:06:8c:e5:b5:95:b9:ee:90:0b:10:61:e7:47:9c:3e:
18:ac:10:f2
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUUF9Hes5egXyPa777O9E8/wkuQ+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA1MjIxMDMzMTBaFw0yNjA1MjExMDM4MTBaMDMxMTAvBgNV
BAMTKDJBQTMxMjdCQURDNTNCQUY5NDZCMEYxMEJFRTdDRjMzM0IyMzQ3RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVq1r/983ZJyYMRiv6WG1uVrv/
GFlMo9ZpXhlmcUXC+YjXRU/wDBVIErS81xPOdwz+yiH/mWjy5uvC/6Ja6aZiGPrM
4bOQn6N6BoVPq0MMKI1Rc4q7MdotFltRg5VX97ED5+p3e9ATzwtQoNs8LVuXRg8q
PfVqtwF9DbS+Cw58U2H87Cty7EXHaROJSPqWvzc3/SmfQ/lTaXZQwdPW4E21zalB
i9YTogrE37FrhdfuKlrDacSZP4NWTSb7GcP2eTZcxVabC2U3p6ZgWZIKxxpw+Sxd
D6J2MO7xZSs8JHGQuooi2gSvvxnBddfLHV3AlJ3lpPTiwOImbNfDaZSENcV3AgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUKqMSe63FO6+Uaw8QvufPMzsjR+UwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNTY5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPlABhcDANBgkqhkiG9w0BAQsFAAOC
AQEAVMNtwSCrdz2ZmYp8xudhOfWui2nHxKevcBdDlHQ2GLt6snQo3LVItQaG8pIV
cC2m6ljZC37AaLoI/FaG1sg3R3eERRi3lcPiTf/WZG0LJNaT6oK4p2ouad2tllNm
CuTEGO9tjLVADjcIDd1x38QmUzjSCrG7vO45uWDNyJ9xGQryDg5yfpfVfrJdHwP0
nqJxO0uiRWgrMGQL2JjLoqGiIW5WQZoGHjcUUDHnf91rFWME9zV6Dl8RvrMRK0S1
fRBGNaNTPKp6hOzsJgRhCTy+617RAdaVMs2CQ/5x6wpQA1Atevr1jOwri9nv5RYu
BozltZW57pALEGHnR5w+GKwQ8g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:03 2025 by rpki-client