Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213186.roa
File: AS213186.roa (raw, json)
Hash identifier: JAS/1kECyj3Y980xdWMJCaR+1NqWUoOjCgQiryNEJ+g=
Subject key identifier: 8C:3F:68:D2:44:C1:8A:BB:30:31:30:92:CD:B4:CF:38:D6:51:01:78
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3E92664EF1F94499B6946A9BDB5227B8B6D26ECC
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213186.roa
Signing time: Mon 28 Apr 2025 16:19:14 +0000
ROA not before: Mon 28 Apr 2025 16:14:14 +0000
ROA not after: Mon 27 Apr 2026 16:19:14 +0000
asID: 213186
IP address blocks: 2a0f:9400:6161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:92:66:4e:f1:f9:44:99:b6:94:6a:9b:db:52:27:b8:b6:d2:6e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 28 16:14:14 2025 GMT
Not After : Apr 27 16:19:14 2026 GMT
Subject: CN=8C3F68D244C18ABB30313092CDB4CF38D6510178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:c6:14:67:1d:97:d1:87:42:c0:5f:25:4c:
9e:7d:95:07:09:5e:e6:bf:27:1e:fe:f7:10:1e:6e:
64:33:79:7f:7c:bf:cb:36:0f:e4:ca:91:ce:c8:fe:
4c:54:d2:ff:de:a0:4f:ee:a3:d7:18:e9:c4:28:55:
c6:96:75:dc:2c:35:e6:60:50:32:5d:8d:bc:44:9d:
a0:0e:b6:ab:8b:66:11:b6:23:15:0e:11:43:50:a2:
d8:da:ce:0f:b6:26:08:e4:bd:de:ef:2b:22:3f:5b:
9a:e5:4b:ed:df:8e:79:ae:a2:6e:34:f5:71:c5:64:
68:e4:3c:47:d3:0e:dd:6c:d9:7c:c9:14:b6:5d:79:
65:e6:5a:20:f2:e4:85:cf:71:c0:70:c3:78:8a:7e:
e1:c7:16:23:4c:67:a0:34:f9:a2:b9:7b:aa:7e:28:
0a:d4:7c:5d:24:5c:24:65:a4:c7:e1:95:dc:12:84:
5e:03:21:6d:66:86:7f:e2:8d:7c:0e:45:28:ea:7b:
58:26:2c:2a:bf:78:fe:64:f4:0f:78:a7:30:83:e6:
e5:87:a8:35:72:91:93:fe:70:0f:38:59:56:bb:58:
11:94:cd:15:99:7b:df:bb:9d:10:97:6f:0d:24:3f:
18:bc:54:aa:df:2a:87:c6:67:bb:92:0e:e5:b9:d1:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:68:D2:44:C1:8A:BB:30:31:30:92:CD:B4:CF:38:D6:51:01:78
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS213186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6161::/48
Signature Algorithm: sha256WithRSAEncryption
05:e7:dd:1f:a5:69:e9:b4:dd:76:ed:44:c2:a7:5c:bf:bd:9c:
73:3d:47:6d:6d:cc:aa:71:23:24:7c:c1:25:00:84:7e:40:98:
3a:e6:93:a3:01:7c:38:17:64:51:1f:8e:e4:39:09:e3:58:96:
18:5e:6f:80:1e:25:53:a0:50:34:bd:1f:d4:8a:ed:02:ae:2f:
98:77:ae:23:91:5c:68:74:6b:85:40:7e:d8:7f:64:f6:3a:3d:
38:e7:68:f5:9e:20:86:65:df:68:8a:8c:95:04:4e:cf:24:82:
cb:99:23:a6:27:d4:54:0a:17:da:60:df:ef:de:19:63:88:36:
73:a3:96:ac:04:2b:4c:4c:0c:d8:1b:1a:06:fc:67:18:a1:9e:
0c:24:70:5d:3c:c5:5c:6d:06:94:55:65:83:80:35:6d:51:dc:
44:8a:12:ba:ac:cb:e1:19:8b:9d:d4:33:2b:c4:fb:28:cf:0b:
5d:34:ee:3a:54:53:10:99:cd:52:10:24:9c:2e:a2:c3:84:01:
6c:bd:6d:6d:59:e9:b5:cc:21:9c:68:a1:36:0c:c8:10:9b:a7:
a4:ad:15:10:35:0a:8b:f4:41:b7:e3:e8:39:73:16:1b:85:0e:
0b:40:29:6a:8d:39:6e:ed:4c:21:aa:65:26:01:fb:19:c9:01:
61:65:2c:d6
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUPpJmTvH5RJm2lGqb21InuLbSbswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA0MjgxNjE0MTRaFw0yNjA0MjcxNjE5MTRaMDMxMTAvBgNV
BAMTKDhDM0Y2OEQyNDRDMThBQkIzMDMxMzA5MkNEQjRDRjM4RDY1MTAxNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVcYUZx2X0YdCwF8lTJ59lQcJ
Xua/Jx7+9xAebmQzeX98v8s2D+TKkc7I/kxU0v/eoE/uo9cY6cQoVcaWddwsNeZg
UDJdjbxEnaAOtquLZhG2IxUOEUNQotjazg+2Jgjkvd7vKyI/W5rlS+3fjnmuom40
9XHFZGjkPEfTDt1s2XzJFLZdeWXmWiDy5IXPccBww3iKfuHHFiNMZ6A0+aK5e6p+
KArUfF0kXCRlpMfhldwShF4DIW1mhn/ijXwORSjqe1gmLCq/eP5k9A94pzCD5uWH
qDVykZP+cA84WVa7WBGUzRWZe9+7nRCXbw0kPxi8VKrfKofGZ7uSDuW50WhPAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUjD9o0kTBirswMTCSzbTPONZRAXgwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIxMzE4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhYTANBgkqhkiG9w0BAQsFAAOC
AQEABefdH6Vp6bTddu1Ewqdcv72ccz1HbW3MqnEjJHzBJQCEfkCYOuaTowF8OBdk
UR+O5DkJ41iWGF5vgB4lU6BQNL0f1IrtAq4vmHeuI5FcaHRrhUB+2H9k9jo9OOdo
9Z4ghmXfaIqMlQROzySCy5kjpifUVAoX2mDf794ZY4g2c6OWrAQrTEwM2BsaBvxn
GKGeDCRwXTzFXG0GlFVlg4A1bVHcRIoSuqzL4RmLndQzK8T7KM8LXTTuOlRTEJnN
UhAknC6iw4QBbL1tbVnptcwhnGihNgzIEJunpK0VEDUKi/RBt+PoOXMWG4UOC0Ap
ao05bu1MIaplJgH7GckBYWUs1g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:13 2025 by rpki-client