Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
File: AS214910.roa (raw, json)
Hash identifier: bpnIwMRBeLGTh9XWHr4CcQnOTYM1J7JB6pMESn/QK98=
Subject key identifier: E9:CB:94:65:7E:72:7B:77:57:DB:07:6A:E6:64:EA:36:4B:6B:73:2A
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 20D29009C19A0B5C24CD56582BD7CDA6465634A8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
Signing time: Thu 08 May 2025 02:58:20 +0000
ROA not before: Thu 08 May 2025 02:53:20 +0000
ROA not after: Thu 07 May 2026 02:58:20 +0000
asID: 214910
IP address blocks: 2a0f:9400:6115::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d2:90:09:c1:9a:0b:5c:24:cd:56:58:2b:d7:cd:a6:46:56:34:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: May 8 02:53:20 2025 GMT
Not After : May 7 02:58:20 2026 GMT
Subject: CN=E9CB94657E727B7757DB076AE664EA364B6B732A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:65:43:44:e1:de:00:ae:b4:fb:56:b0:67:
51:d2:8c:e1:10:e4:3a:2f:34:94:6c:ed:3a:32:0a:
d9:83:1d:dc:d7:9f:7a:51:b0:e3:2b:fa:b2:88:6c:
74:21:5d:f3:f9:cc:f1:16:8a:b7:ce:23:5a:13:7f:
bf:ed:e5:fb:a9:a4:95:a5:a8:12:ae:92:e9:2f:43:
82:a5:32:c2:56:b6:76:cc:b4:f1:d8:38:4d:10:7d:
e8:e5:1e:6a:28:e9:f3:1f:8a:91:e0:02:a3:02:b8:
9f:3a:b6:4b:51:4d:1d:f7:f5:a6:c1:ac:f5:ce:33:
fb:47:93:7e:dc:32:10:af:d2:f5:b9:8c:ed:23:e9:
12:7e:6c:ac:fc:98:7f:48:ed:a9:99:2a:b5:31:32:
ef:b3:3b:f1:05:35:7b:1f:b5:dc:14:68:16:5b:a3:
8b:07:65:5f:e6:6a:d9:f8:12:56:91:16:53:50:46:
8d:31:a2:01:68:f1:76:f7:9c:ac:a8:78:77:b4:0b:
98:6f:4e:ea:b7:1b:00:73:81:53:8e:79:8c:2f:0f:
d8:c2:c3:11:f2:04:af:c2:9e:4a:e2:9d:06:be:fb:
eb:83:34:80:f0:65:05:80:ff:ed:14:f9:53:88:f0:
cf:2e:09:bc:db:1e:bc:34:c4:95:3a:b7:2e:ac:e0:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CB:94:65:7E:72:7B:77:57:DB:07:6A:E6:64:EA:36:4B:6B:73:2A
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS214910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6115::/48
Signature Algorithm: sha256WithRSAEncryption
73:7e:70:f4:30:43:49:bf:7f:c1:80:d0:cf:9c:a1:35:66:be:
5f:f0:06:eb:4c:f6:8a:4c:eb:a2:00:90:62:17:06:98:8c:96:
f4:5a:73:b1:46:f8:30:c0:c4:7c:05:58:74:67:45:19:27:41:
60:b1:9a:33:16:d6:c8:d0:bf:8a:d3:df:e6:f6:33:fb:ae:69:
4e:67:22:66:3d:6a:6d:55:b8:1e:dd:24:7c:1d:ef:52:8a:87:
aa:f4:60:5b:20:80:7e:7e:98:b2:47:8b:9b:ef:88:4d:a1:31:
96:0f:51:be:ff:7f:0a:e6:3d:e0:2e:d4:d6:91:5f:c1:bc:39:
0f:2e:60:5a:07:96:65:eb:92:9a:04:26:87:2d:bf:bd:98:eb:
03:ae:36:75:6a:88:f2:fc:25:20:e1:cd:6e:08:01:96:73:5a:
ff:26:5d:e6:74:84:1d:b9:18:24:d5:6c:89:4d:a8:6b:35:27:
b0:ea:ca:3e:3c:78:02:ae:9d:af:1e:54:41:22:97:2d:c2:c8:
14:1f:53:fb:fc:f2:ad:de:b0:73:83:af:47:75:3e:b2:f5:88:
3e:14:01:de:34:79:f3:ee:8c:9d:d2:6a:16:aa:26:b4:70:ba:
60:71:3e:98:fc:69:02:f5:4e:b7:03:4c:be:e2:10:46:71:f9:
6a:12:59:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:54:05 2025 by rpki-client