Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS30581.roa
File: AS30581.roa (raw, json)
Hash identifier: S4WSVIdNgy6UU3BE4xmHsPZkZNcMnGj1n1ftAg2hevU=
Subject key identifier: 57:11:6B:D6:5E:52:9D:B7:5F:F8:A2:6E:14:3F:A2:4B:9A:2F:8F:02
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6C5F96112E5BB30049458FA76D91B4182614D153
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS30581.roa
Signing time: Sat 06 Sep 2025 15:56:54 +0000
ROA not before: Sat 06 Sep 2025 15:51:54 +0000
ROA not after: Sat 05 Sep 2026 15:56:54 +0000
asID: 30581
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5f:96:11:2e:5b:b3:00:49:45:8f:a7:6d:91:b4:18:26:14:d1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 6 15:51:54 2025 GMT
Not After : Sep 5 15:56:54 2026 GMT
Subject: CN=57116BD65E529DB75FF8A26E143FA24B9A2F8F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:df:3b:e0:40:bf:05:42:0f:bf:ef:13:44:
cd:98:ff:ca:eb:17:98:5f:ca:7a:c6:84:67:ab:42:
11:bf:c1:20:cc:f6:0c:2f:c2:88:76:0b:9c:f4:41:
fb:05:fe:47:eb:c0:50:57:63:4d:a3:4d:ec:a8:c5:
2a:5d:f2:ff:9d:c7:ae:9c:ff:92:08:d2:45:51:b5:
9a:34:da:57:cd:24:53:62:bf:b7:15:62:a6:0a:81:
83:a7:c4:c2:f2:ca:e2:83:10:a6:5b:26:f5:1a:43:
47:a1:b9:4e:d4:86:56:b2:3d:d0:73:02:81:6b:f6:
c7:f5:b2:15:13:81:fc:74:51:3a:24:96:0c:29:3e:
11:98:a2:bc:72:02:22:c7:a0:f7:a5:7d:5d:f3:a5:
4c:e3:43:aa:3c:93:c2:a5:4e:5d:bb:9f:43:20:c2:
6c:b4:58:5e:52:54:96:48:83:c8:eb:5d:f3:61:d3:
96:54:9f:7f:dd:7e:82:27:43:1b:1f:16:60:c9:c9:
f7:f2:03:88:fc:f2:5b:69:93:47:0e:de:43:df:f3:
98:61:2c:8d:7b:c7:da:00:cd:8f:d9:68:ce:a2:b4:
d5:d5:74:ba:eb:c9:07:37:a0:fe:4e:8c:f5:af:1e:
8d:55:bb:70:82:2d:bf:5c:e6:4c:a6:9c:61:d2:d7:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:6B:D6:5E:52:9D:B7:5F:F8:A2:6E:14:3F:A2:4B:9A:2F:8F:02
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS30581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
1e:03:54:ae:b6:99:27:90:4c:92:e3:9d:43:87:18:d0:6f:ac:
85:41:ed:7a:5a:b5:1e:0c:cd:de:ea:ba:e0:a7:56:da:8c:a9:
4f:a7:4d:dc:0d:68:a5:03:75:e0:49:e6:db:18:ca:9a:1f:6f:
49:c4:23:ab:b4:6c:32:93:ac:26:08:84:af:06:b0:56:1f:8f:
fd:2a:11:08:2e:4b:ad:e1:ff:2c:28:78:8b:01:c0:42:02:4e:
c5:87:8b:7e:96:1b:c2:da:bf:3e:04:83:80:03:59:b2:5e:c9:
98:38:ee:76:0a:9a:bb:5b:42:b6:12:4d:4f:7c:32:35:90:30:
38:e1:3d:d1:9d:3c:8f:18:bd:95:aa:68:4c:3c:db:2c:bf:74:
d1:e5:1d:7a:1d:de:97:74:99:dd:01:80:50:a4:85:ae:a4:6a:
62:6c:fe:88:d6:77:14:41:32:07:8c:b4:28:a4:c5:f5:e0:1e:
6b:76:56:89:35:17:b5:81:22:e5:0c:74:39:46:cc:a0:5e:fc:
27:9a:62:fc:34:81:18:05:9e:cc:3e:f7:38:2e:32:f7:da:fc:
c7:af:db:70:f9:66:8c:c8:cc:d1:bd:07:46:95:c9:db:43:ce:
b5:41:28:87:81:c6:ac:c2:05:e8:28:cd:9c:35:ab:2e:08:19:
0e:2d:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 06:18:09 2025 by rpki-client