Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
File: AS207445.roa (raw, json)
Hash identifier: /FVTUnfi8QvhAaqGEHDNE4YRjhNg08+JXsCGuJWiRig=
Subject key identifier: B8:C6:23:89:F4:B0:1C:E0:83:75:57:42:82:B2:0E:33:3B:23:2A:1B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 28147AC89326B32557138209BEA804BE9F8FDA9F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
Signing time: Wed 02 Apr 2025 02:43:31 +0000
ROA not before: Wed 02 Apr 2025 02:38:31 +0000
ROA not after: Wed 01 Apr 2026 02:43:31 +0000
asID: 207445
IP address blocks: 2a0f:9400:8011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:14:7a:c8:93:26:b3:25:57:13:82:09:be:a8:04:be:9f:8f:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 2 02:38:31 2025 GMT
Not After : Apr 1 02:43:31 2026 GMT
Subject: CN=B8C62389F4B01CE08375574282B20E333B232A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:89:d4:80:b7:89:75:75:42:bf:86:5c:4f:
aa:61:0c:93:34:3e:de:6c:39:39:31:0a:26:c1:28:
3f:07:af:3b:09:46:14:20:c4:4a:29:36:a7:90:8a:
56:f2:a9:51:96:11:ae:3b:94:5a:66:0c:ee:2d:5d:
57:02:f3:b7:fa:05:13:91:6c:11:87:ed:4d:c1:3a:
e2:e1:c0:57:55:6c:41:50:a6:43:37:65:8f:1c:c7:
a4:e8:80:ce:84:d5:18:af:d7:79:fa:ff:33:c3:21:
e0:52:c7:b7:9d:25:50:a4:ce:46:48:02:6c:75:8e:
c2:c0:11:ce:97:48:50:f7:10:88:7b:63:9a:19:ea:
5b:6e:6c:09:62:30:6d:fa:ce:e2:90:03:48:bf:4a:
15:ce:40:47:93:85:d6:77:07:2f:2d:3e:ef:1a:7e:
18:b8:04:78:a9:1a:19:c0:3c:bf:3a:54:c4:24:b4:
2b:1b:c1:99:64:97:5a:91:8c:e5:e3:64:86:76:8b:
48:29:1c:4d:80:d5:e9:95:f8:8c:4f:6b:d3:02:e8:
e6:a8:04:de:4b:49:f5:3d:0e:06:1d:30:55:6d:45:
69:13:f8:b6:62:9d:02:e3:01:97:35:5b:98:cc:ed:
71:88:6f:ed:5b:cb:af:c5:72:33:1d:17:1c:2e:ce:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:23:89:F4:B0:1C:E0:83:75:57:42:82:B2:0E:33:3B:23:2A:1B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS207445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:8011::/48
Signature Algorithm: sha256WithRSAEncryption
42:2a:1f:96:87:6f:16:30:fc:c4:a5:83:52:b1:13:44:1c:fb:
a4:85:87:5f:56:e0:8c:66:ef:b4:0c:0a:0c:03:f0:d0:d8:9a:
c4:58:7f:1f:fa:46:95:23:ed:d9:d3:9e:ee:6b:93:dd:71:36:
2a:e5:33:99:b8:57:c8:72:ab:fe:f6:fd:90:62:c1:c4:fe:2f:
de:e9:e9:0e:7d:78:76:6f:0b:0d:16:9d:42:4d:ac:b8:19:d6:
f0:dc:5c:88:aa:b0:2b:65:1c:fa:28:61:84:58:e1:02:5d:42:
d2:f6:c2:94:ec:98:71:52:4c:2a:73:cb:bb:1a:6d:b3:a5:ba:
c1:2f:fc:cd:79:f6:47:0d:14:df:c7:79:c6:e9:c6:ef:bb:d1:
d7:61:c9:d3:70:f7:70:6e:63:61:f3:f5:73:9c:4a:78:3b:4c:
57:1c:10:69:da:1f:e2:df:99:82:56:4f:54:9d:49:48:65:ea:
99:25:11:1d:dd:13:e7:e8:05:1b:bb:e0:11:6c:79:b0:c3:64:
cf:51:60:56:f4:d6:7c:2c:95:d0:2c:08:cc:f2:b1:04:17:4c:
23:a8:3c:2e:6a:23:6f:83:67:91:c4:b0:ab:bc:28:f7:05:0c:
75:f5:4c:a6:c7:4c:8c:20:b6:c7:e3:82:0d:37:37:48:14:e8:
45:d1:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:09:59 2025 by rpki-client