Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214630.roa
File: AS214630.roa (raw, json)
Hash identifier: Lsxygm8kq+jK4v0204GQONgtXqgaTXPiuCmX7Qez/jI=
Subject key identifier: 3A:74:44:EB:E9:B2:03:94:D1:64:92:DC:39:12:E3:17:11:8E:21:D4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6E4D9FDF21D2EA6AB0B36C1CA2373911CB51176C
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214630.roa
Signing time: Wed 24 Sep 2025 00:15:13 +0000
ROA not before: Wed 24 Sep 2025 00:10:13 +0000
ROA not after: Wed 23 Sep 2026 00:15:13 +0000
asID: 214630
IP address blocks: 2a0f:9400:6300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4d:9f:df:21:d2:ea:6a:b0:b3:6c:1c:a2:37:39:11:cb:51:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 24 00:10:13 2025 GMT
Not After : Sep 23 00:15:13 2026 GMT
Subject: CN=3A7444EBE9B20394D16492DC3912E317118E21D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:ce:7f:cf:6e:b8:63:a8:ed:1b:47:4c:87:
11:f6:89:2d:e1:11:2c:44:76:90:46:68:ef:f3:08:
63:f2:04:33:83:14:40:e6:a1:e6:76:26:cf:1b:a9:
d3:bf:b5:93:d7:63:98:db:d8:f1:ca:eb:53:23:9d:
12:de:9d:8e:bb:83:fd:e7:bc:cc:60:85:55:40:b3:
39:4f:1e:5f:d1:65:f4:df:cf:d4:c6:8f:e0:a7:5a:
3e:d0:75:b1:6f:5e:4f:a5:2d:b5:ee:58:91:a7:2a:
ec:f4:38:f4:72:bf:1e:92:17:6e:0b:70:37:d2:07:
5d:51:c0:1b:d0:3e:bb:70:ae:81:d2:61:31:d4:46:
f3:a6:9a:20:3b:86:13:15:ae:ce:8c:42:90:06:df:
bb:20:61:d2:68:64:b4:83:9b:cf:95:38:07:28:ef:
da:ee:80:5c:4d:85:fd:d4:03:fb:92:4c:33:90:0f:
c4:a2:cf:1b:02:00:ed:d0:6d:04:99:ce:7b:28:43:
19:e5:f9:b9:e3:e9:36:fd:26:2a:9c:8a:cd:99:36:
00:d8:b0:82:9b:e6:b8:3a:f1:54:b9:6a:d8:a2:28:
64:05:2f:e3:d0:66:29:84:35:40:bb:86:be:d5:7e:
b6:ea:8f:ab:0d:b5:96:5c:c4:92:09:59:67:8b:d2:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:74:44:EB:E9:B2:03:94:D1:64:92:DC:39:12:E3:17:11:8E:21:D4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6300::/40
Signature Algorithm: sha256WithRSAEncryption
29:83:72:2b:b1:10:6c:f9:5a:75:b4:6a:73:78:9d:03:82:11:
f0:4f:3d:26:b3:79:50:ef:35:da:ee:eb:49:83:60:d8:08:9a:
dc:a9:f0:86:7c:6b:c4:60:ed:09:40:14:64:35:d2:d0:24:49:
38:97:b4:77:cf:57:42:d5:d2:6d:d8:01:89:c5:3c:b6:2c:09:
4f:31:5c:58:93:a1:47:30:a9:a9:57:21:40:7b:97:b0:d3:03:
51:3a:f5:ac:4b:2e:cd:ca:f4:a4:b5:37:d4:a3:60:b1:b4:f2:
9c:85:0e:01:da:eb:4d:50:46:94:61:49:74:f8:9f:88:0a:17:
d1:c0:67:e5:c0:15:f9:af:35:ff:3f:ce:a0:5a:d9:17:cf:db:
4c:46:ff:66:e5:2f:fa:e1:fc:51:3a:8d:0d:a4:91:a5:ae:03:
a1:27:cc:b0:f8:da:fd:d0:f6:9b:22:9f:80:bb:b7:42:35:69:
1b:5a:77:6a:d7:3e:9c:c7:73:89:24:67:b3:bb:2e:7e:56:3d:
35:69:63:2a:00:4d:8a:21:66:3d:e4:07:42:77:da:8e:ed:0e:
f9:5c:06:24:e2:96:53:13:c4:37:dd:de:25:b9:41:10:e8:c8:
ae:07:eb:e9:1a:a6:41:0c:d8:3c:c0:2a:bf:47:02:ff:bc:c6:
24:e4:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:48:52 2025 by rpki-client