Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205941.roa
File: AS205941.roa (raw, json)
Hash identifier: dqX0aAg0Yg9PHCr9P+6f8BY8xlEbt5XI8yfJypbS56o=
Subject key identifier: 5D:0A:60:8A:C4:19:28:0C:D2:E3:B4:83:53:11:79:C4:AC:2B:07:EE
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 10BCAA09B81DC8F0BF8FC10BABBB93244D6AC7C9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205941.roa
Signing time: Wed 17 Sep 2025 11:11:02 +0000
ROA not before: Wed 17 Sep 2025 11:06:02 +0000
ROA not after: Wed 16 Sep 2026 11:11:02 +0000
asID: 205941
IP address blocks: 2a0f:9400:6119::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 15:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bc:aa:09:b8:1d:c8:f0:bf:8f:c1:0b:ab:bb:93:24:4d:6a:c7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 17 11:06:02 2025 GMT
Not After : Sep 16 11:11:02 2026 GMT
Subject: CN=5D0A608AC419280CD2E3B483531179C4AC2B07EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:6c:90:f6:4e:13:b0:03:65:6b:a1:ee:94:
3b:3d:3c:d4:39:62:f2:0c:6d:be:86:c6:59:71:17:
14:7f:bd:41:03:64:74:75:82:f8:93:88:b3:ef:fd:
c4:a3:72:de:dd:1f:78:99:69:e7:1a:6f:b3:fa:86:
0e:c5:4b:8c:ab:2f:fe:ea:95:46:9d:e8:66:8c:6e:
4c:bd:c4:91:32:34:1b:00:c9:54:43:cb:1b:12:82:
4b:bb:0e:5d:89:7f:ac:42:b9:6d:bf:6b:42:08:9e:
06:53:d8:76:82:8a:8f:3a:45:e4:a8:e7:74:bb:67:
ce:5b:a0:02:de:47:b0:93:5c:74:1d:17:77:37:f4:
59:52:70:69:f8:3c:93:6a:48:ea:43:7b:8f:8e:83:
6d:9a:ab:1e:32:2d:79:bf:82:55:65:65:77:df:2f:
fb:19:65:76:7b:cc:e9:bb:4c:05:8b:ab:b9:82:9a:
8f:89:90:4e:f2:9c:65:21:34:45:5a:52:60:8a:91:
52:7d:18:c9:9a:98:9f:57:8d:1c:bc:df:88:b8:c2:
c6:3b:b8:9c:3e:6a:fb:a5:62:c8:b3:b8:19:85:ef:
c6:88:f4:ad:3d:19:54:e6:42:79:e4:c2:30:34:3a:
69:c0:d5:af:7c:35:a6:5a:29:f0:22:ed:d1:51:41:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:60:8A:C4:19:28:0C:D2:E3:B4:83:53:11:79:C4:AC:2B:07:EE
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS205941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6119::/48
Signature Algorithm: sha256WithRSAEncryption
c3:41:c8:08:03:6f:2f:07:c8:32:01:e9:2a:b9:96:01:95:67:
fd:9f:10:81:4a:3c:3e:fb:76:df:b4:7b:ca:22:b5:0c:94:f7:
66:b0:71:e6:01:5a:c0:3b:bf:8b:a8:79:f3:db:7d:a0:a8:cc:
59:fb:4f:5b:26:72:fd:b4:ab:a7:64:b8:4c:3d:0d:77:f8:43:
c4:90:21:c9:ce:f1:a7:2b:05:94:63:82:96:19:03:26:4d:02:
df:e3:ba:6b:a7:03:ee:03:7e:1f:e6:aa:1a:06:a2:60:39:c7:
bf:07:b1:5c:05:35:4c:a4:e7:ea:be:ce:03:f8:6d:bf:bb:98:
9c:c3:cd:be:0c:3e:b4:9a:81:00:00:6c:d1:42:f0:20:79:d9:
68:24:dc:df:39:fe:3e:80:b4:ac:53:e5:78:17:b6:06:94:b5:
3e:32:0e:ca:0d:4f:91:75:3e:67:6f:a4:38:e2:d4:26:75:af:
77:0a:29:e9:90:b9:6b:1f:5a:24:56:a8:6d:ef:1d:fd:8e:8a:
8d:d0:86:3a:ba:60:be:ad:c5:99:a2:93:44:58:d9:18:29:3b:
2e:04:4c:79:dd:14:24:0f:fd:0a:a8:dd:0f:62:32:0e:dc:a2:
49:e5:c7:6c:e5:51:b8:65:97:d7:cc:28:05:c0:5f:aa:34:d8:
d4:17:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 07:45:12 2025 by rpki-client