Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44324.roa
File: AS44324.roa (raw, json)
Hash identifier: DIPb0dwYGiKgy4b1Yd8o8t5fNqPc/kGqhFtA31mDgSg=
Subject key identifier: EC:E6:F6:0D:7E:FA:64:A7:AC:5E:B2:6A:D5:64:95:CD:47:43:1C:89
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 5B019F9FF193CFA8B96DFCE0586E79BA3CAA5952
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44324.roa
Signing time: Thu 14 Aug 2025 10:40:29 +0000
ROA not before: Thu 14 Aug 2025 10:35:29 +0000
ROA not after: Thu 13 Aug 2026 10:40:29 +0000
asID: 44324
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:01:9f:9f:f1:93:cf:a8:b9:6d:fc:e0:58:6e:79:ba:3c:aa:59:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 10:35:29 2025 GMT
Not After : Aug 13 10:40:29 2026 GMT
Subject: CN=ECE6F60D7EFA64A7AC5EB26AD56495CD47431C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:2e:c0:4a:da:7a:a8:a5:d5:1e:26:4d:ce:
2b:c7:26:d5:a9:c4:d4:78:2f:aa:a8:75:f0:f4:19:
d6:9f:5a:2b:5a:9a:e2:fd:67:e2:26:42:bf:d7:66:
f2:e4:e3:00:15:70:91:73:c2:c0:a2:73:be:82:75:
9a:30:24:a6:8c:52:31:07:57:b6:40:8e:ba:e7:64:
d6:b7:60:2f:8b:8d:df:fd:3c:69:10:d8:2f:98:a1:
e0:c9:f9:f8:e4:76:b2:6d:21:20:27:ab:81:d1:6d:
73:5b:bb:1a:e5:e0:0d:bf:f0:ab:b7:49:92:76:ba:
5e:c2:39:77:5c:cc:50:d2:82:3c:04:60:78:27:35:
cb:4c:df:77:86:d5:85:03:b2:24:81:64:36:ce:9a:
e2:b9:74:fc:8c:10:0e:3c:c7:39:55:98:0e:cc:55:
b0:ef:34:4d:4d:1d:87:a1:4b:9c:c6:4c:16:fa:8f:
82:f1:7a:8c:45:86:00:8c:ca:60:6e:12:cd:58:e8:
3a:5b:d2:09:9c:1f:d8:aa:ca:d9:8e:10:20:c9:12:
bf:90:c2:77:86:b6:0e:cc:cb:ac:47:bd:f3:ea:0e:
de:3c:52:ec:74:57:15:64:48:83:a9:4e:aa:a4:0e:
67:40:fa:85:66:e8:81:b0:da:33:e0:09:c7:6f:58:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E6:F6:0D:7E:FA:64:A7:AC:5E:B2:6A:D5:64:95:CD:47:43:1C:89
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS44324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
78:9a:b5:3b:76:47:28:d4:98:51:92:62:d2:3b:8d:56:4c:1b:
c7:72:20:a8:a6:25:8b:c6:e3:a8:a4:d6:ca:c8:21:6a:15:ab:
5c:a7:29:18:80:af:08:89:50:34:9a:fb:ce:a6:98:8a:9b:cd:
b5:d8:4f:96:2b:02:e3:6d:e7:d4:3a:3c:fa:fb:2a:dd:e5:7b:
2a:39:1d:5c:af:3b:d6:c5:32:b8:d5:45:d5:e4:b2:dc:b9:18:
7b:e7:9a:2d:1c:7b:a9:0a:f8:0e:10:7a:ee:76:39:3b:5f:68:
73:30:0c:a9:fd:bf:a1:c0:42:03:b1:bf:f6:1d:fb:14:9e:a4:
97:e5:32:4f:08:67:c4:40:45:67:24:36:eb:f7:d3:5c:45:3b:
e9:ea:7b:c7:5a:93:7b:02:d5:11:b1:9b:3a:f5:5d:7e:9d:7f:
a8:ca:7c:60:b8:ad:40:3d:39:22:0b:9c:b4:55:5c:b9:a6:03:
a2:83:d3:1d:85:a7:4b:e2:0f:89:14:15:d4:aa:df:95:b9:f3:
e2:33:34:6b:13:d6:e9:4f:bd:84:90:fd:60:ed:88:47:6b:e7:
3c:1a:86:24:50:e8:5f:c9:11:65:47:98:37:ef:83:91:a7:b9:
34:f0:62:f2:2c:20:f2:1a:6c:22:e2:d6:43:1f:75:2c:ff:46:
ca:1c:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:16:26 2025 by rpki-client