Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212450.roa
File: AS212450.roa (raw, json)
Hash identifier: dpgRXIeRpicmBnY5iEWjUr4m9dUpMBVlTlVZEpm9gWI=
Subject key identifier: 60:9A:20:0D:7A:DC:AB:EB:31:0D:C2:F6:1E:68:D6:5B:8F:EF:46:23
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 68C5BFDF14EDD712E7224714D57D3AA4599A3B5F
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212450.roa
Signing time: Fri 02 May 2025 17:40:11 +0000
ROA not before: Fri 02 May 2025 17:35:11 +0000
ROA not after: Fri 01 May 2026 17:40:11 +0000
asID: 212450
IP address blocks: 2a0f:9400:693c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c5:bf:df:14:ed:d7:12:e7:22:47:14:d5:7d:3a:a4:59:9a:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 2 17:35:11 2025 GMT
Not After : May 1 17:40:11 2026 GMT
Subject: CN=609A200D7ADCABEB310DC2F61E68D65B8FEF4623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:40:bf:69:53:d0:ac:a8:e2:02:5c:2d:61:
80:b5:ec:fa:97:bb:5c:44:05:0e:55:19:d9:0a:a7:
aa:7d:a8:34:f8:21:af:96:75:bd:08:ae:82:e8:7f:
7c:fd:25:d6:fd:75:a8:f0:02:50:37:5e:e5:fe:34:
d5:8b:64:a8:8e:69:ee:b3:c6:58:ad:a2:67:17:5e:
c8:be:bc:75:47:d7:46:58:ea:11:f3:19:0e:67:11:
ea:55:4b:38:37:76:5a:3f:be:1d:74:c5:d6:4b:16:
c9:c1:28:f3:89:74:2f:a5:79:2e:f7:49:ad:68:66:
46:64:8c:05:c4:e8:f3:25:08:98:4c:ba:11:90:50:
34:16:48:3d:89:b2:96:4d:be:bf:55:50:14:a3:5c:
26:92:f9:e3:c7:c4:e0:4f:49:36:53:07:70:72:e6:
22:00:7f:73:ba:47:f4:91:ef:b1:50:f8:e5:bf:72:
8a:46:ee:59:f0:04:5d:3b:0f:ff:04:43:60:f1:fd:
cd:c4:10:bb:cb:82:f5:d9:95:d9:8a:02:d9:8d:b7:
f4:13:f5:98:e8:cc:6c:f4:b5:35:3e:a4:93:ae:83:
f3:fa:ce:00:06:02:ee:7b:5d:4a:c1:cf:8b:99:89:
df:8b:38:53:63:e5:12:ab:4a:38:af:7d:ea:27:0f:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:20:0D:7A:DC:AB:EB:31:0D:C2:F6:1E:68:D6:5B:8F:EF:46:23
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS212450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:693c::/48
Signature Algorithm: sha256WithRSAEncryption
67:53:fb:e8:39:af:60:be:31:1a:13:8c:85:f8:7b:3e:5c:7f:
1a:ca:b4:88:8b:9b:6d:e2:3e:f0:cf:c6:0e:31:b7:bf:90:40:
dc:9d:8b:e2:23:f4:4b:0b:ad:1e:0e:a0:62:73:8c:fa:11:6a:
41:84:e4:f3:8a:29:7d:b8:45:f5:f6:c2:2a:95:f3:c2:e1:d2:
67:3a:2d:83:dd:d7:f3:f2:7f:96:07:a7:58:f4:1b:4b:0c:b5:
cc:2d:df:71:85:bd:ed:8c:15:2a:4f:95:f8:37:88:6e:1b:cb:
ac:49:a6:81:58:03:c3:ce:f3:4b:81:5f:08:ac:ce:27:5b:d1:
50:7e:d3:4f:38:85:63:a4:7e:8e:95:54:4c:6b:d7:52:b7:8e:
4c:f1:db:86:3f:e5:bf:8f:06:bb:86:70:58:13:6c:d2:02:ac:
8f:98:01:c9:48:d7:0b:ec:1a:28:e6:e7:70:37:d2:64:b6:8e:
54:3b:b8:39:5e:04:dc:e5:96:06:80:24:cb:40:96:55:bd:35:
5b:40:a4:dc:67:6a:b0:d4:56:80:7c:ab:9a:8d:ab:8a:a6:4b:
56:38:e5:27:3b:18:b2:48:dc:a7:29:24:37:f2:ea:ff:d2:15:
6b:c7:ad:60:0f:b2:81:ef:6f:a1:be:09:b3:1c:a4:57:9e:20:
75:08:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:00:30 2025 by rpki-client