Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213126.roa
File: AS213126.roa (raw, json)
Hash identifier: yzKT00TbKjNg5nHyIvC7Rb9sA/nMACR3DGvfRj7E5rs=
Subject key identifier: 75:6D:A5:DE:3C:E4:80:F8:3D:BF:E5:4C:9A:52:82:94:29:D5:41:ED
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 775BA12D304CB801D0177482FFF710933D5FFE52
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213126.roa
Signing time: Sun 07 Sep 2025 18:05:30 +0000
ROA not before: Sun 07 Sep 2025 18:00:30 +0000
ROA not after: Sun 06 Sep 2026 18:05:30 +0000
asID: 213126
IP address blocks: 2a0f:9400:6102::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5b:a1:2d:30:4c:b8:01:d0:17:74:82:ff:f7:10:93:3d:5f:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 7 18:00:30 2025 GMT
Not After : Sep 6 18:05:30 2026 GMT
Subject: CN=756DA5DE3CE480F83DBFE54C9A52829429D541ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:e6:e4:92:6f:1e:78:03:2c:a5:16:3c:c4:
59:01:73:3f:9a:7b:a0:15:c2:db:fd:b7:37:8f:ec:
2c:16:77:c0:95:5f:65:6b:7f:ac:69:39:8a:dd:0e:
93:e9:0e:ee:2e:51:6a:04:f3:80:4a:a6:5b:48:1d:
3f:12:65:f5:b2:3c:e9:67:e2:2c:df:23:7f:43:91:
85:4c:4d:0a:29:c3:1d:5b:1f:43:fb:e3:75:c3:1a:
d5:48:75:b6:aa:33:b1:b0:f7:74:f0:eb:fa:46:d7:
54:a9:2b:81:c0:88:39:94:7c:b3:07:ee:a2:30:18:
d8:ee:fd:6f:04:f4:8c:df:55:63:cf:d3:04:2c:83:
20:1d:4e:e5:b2:cb:09:ab:6a:2e:2a:28:1e:44:d1:
7f:ea:34:01:48:77:f4:74:e9:45:0c:29:74:30:5b:
d7:78:1a:62:26:6a:8b:0c:1f:9e:a3:47:0e:dc:4e:
3c:c7:11:7e:88:9c:b5:df:85:a8:d8:f9:6d:8f:33:
0f:a1:90:18:c4:4b:cb:99:2b:20:a3:10:39:9a:dd:
3d:e0:ea:b5:df:4e:8b:b3:da:33:64:1d:a3:d1:3f:
4e:6d:b2:85:40:6a:8f:fb:f7:cc:d4:47:35:6a:74:
1e:6e:08:05:47:d7:7d:d8:9e:57:4f:b3:22:9c:dd:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:A5:DE:3C:E4:80:F8:3D:BF:E5:4C:9A:52:82:94:29:D5:41:ED
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6102::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c4:78:7f:c8:cb:f5:0c:85:bb:1f:06:08:89:05:42:92:63:
b4:e8:ac:16:2b:e3:bf:d3:d1:c2:2c:b2:78:02:db:48:3a:9c:
00:93:ef:66:2d:93:9d:70:07:16:70:fd:5a:da:54:da:42:0f:
ce:b4:52:72:68:30:83:08:de:61:30:c7:9b:50:c7:83:27:35:
41:85:e1:6c:9a:d5:1d:06:ae:68:f6:6e:4e:9c:ed:b5:1d:c9:
99:9b:41:64:66:3b:d2:78:4b:21:da:31:bf:54:40:eb:94:c6:
5a:68:ce:e4:6d:17:c2:07:4a:c2:de:9b:62:4e:8b:bc:45:f1:
5d:e7:8e:ec:09:45:f9:6b:dc:ed:e1:dc:c1:72:eb:ef:db:91:
fd:6a:93:ec:ea:e3:70:5c:d8:04:ce:0a:e4:a7:59:a8:fd:6f:
82:87:e6:e4:7e:3b:7b:c8:ef:2c:a4:0e:3a:fb:84:47:eb:d0:
f8:79:9c:79:c6:14:15:01:14:93:68:49:f8:a6:29:3b:e0:eb:
d5:e5:38:b3:29:e2:39:fc:fe:b2:51:fc:de:42:bb:41:93:9b:
22:da:a0:21:d2:a2:4c:71:43:39:60:b3:41:d0:f0:71:4a:e7:
40:d3:12:8c:54:a5:8d:35:b7:db:cf:16:3e:2d:95:e0:50:7b:
60:50:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 01:14:10 2025 by rpki-client