Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
File: AS48741.roa (raw, json)
Hash identifier: XXB/IYd4SLIqczJSb+cXg1Y7MnaUE6e5SCEt7IO1tkw=
Subject key identifier: 2A:AC:B7:BF:74:F1:ED:54:EA:8A:D3:54:CD:C5:7D:4C:29:D2:97:C3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 43642178D8602DE5323D2E1E35672D6784207B63
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
Signing time: Thu 27 Feb 2025 21:26:25 +0000
ROA not before: Thu 27 Feb 2025 21:21:25 +0000
ROA not after: Thu 26 Feb 2026 21:26:25 +0000
asID: 48741
IP address blocks: 2a0f:9400:6210::/48 maxlen: 48
2a0f:9400:6225::/48 maxlen: 48
2a0f:9400:6228::/48 maxlen: 48
2a0f:9400:6230::/47 maxlen: 48
2a0f:9400:6249::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:64:21:78:d8:60:2d:e5:32:3d:2e:1e:35:67:2d:67:84:20:7b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Feb 27 21:21:25 2025 GMT
Not After : Feb 26 21:26:25 2026 GMT
Subject: CN=2AACB7BF74F1ED54EA8AD354CDC57D4C29D297C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:96:18:7e:ce:ff:c2:72:1a:3f:59:fe:2d:
0c:94:d8:e2:6a:cd:98:2b:2a:31:fa:95:69:ab:f9:
0f:13:9b:ba:bb:d4:0f:d8:0a:a3:10:9b:5b:d0:c5:
64:30:63:81:8f:0c:47:87:d2:99:5d:59:b8:ca:e1:
56:bf:3a:26:89:8e:f5:e8:b4:3e:39:3c:2c:2e:39:
73:c8:dc:7d:b8:05:24:2f:ea:a5:7b:83:ee:9f:80:
79:6f:f3:e5:a1:68:4d:f7:d9:55:0a:69:41:dd:6d:
1c:65:29:bd:d1:af:1d:0d:fe:6d:b6:6c:b6:78:21:
f5:19:f9:4e:88:d4:98:d1:28:2c:f2:8d:eb:14:dc:
db:7a:a0:a0:4e:c3:c7:ec:07:53:44:1b:11:b6:fb:
33:f2:a3:00:67:37:6d:1e:9b:89:0a:3d:4a:46:91:
a4:1f:8b:0f:26:b6:a4:00:b6:eb:cf:7b:b8:00:3e:
36:01:98:fc:82:c0:ae:0e:9d:39:54:b3:10:39:d0:
c8:5a:91:7b:50:f4:53:24:b2:56:de:65:4f:4e:c7:
18:7f:df:f5:64:91:36:31:8d:88:ff:86:c3:74:34:
99:e3:50:a5:db:7b:3a:98:3c:57:ee:93:6b:97:80:
5a:9a:e1:e6:ed:9c:79:08:56:ae:96:45:7e:91:c7:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:B7:BF:74:F1:ED:54:EA:8A:D3:54:CD:C5:7D:4C:29:D2:97:C3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS48741.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6210::/48
2a0f:9400:6225::/48
2a0f:9400:6228::/48
2a0f:9400:6230::/47
2a0f:9400:6249::/48
Signature Algorithm: sha256WithRSAEncryption
60:de:6e:ee:a0:ea:fa:e3:42:0c:6f:1a:c7:4f:bb:48:e1:f3:
e9:e6:b5:19:6e:7f:56:42:4b:a6:d3:78:ce:ac:93:bf:d1:95:
93:80:83:7d:ca:fa:d4:32:ff:cd:45:7e:18:98:dd:71:dd:54:
6b:96:63:f5:93:af:29:07:30:58:01:81:96:87:67:95:5d:f9:
cd:d5:47:31:db:82:e0:c8:de:f8:61:69:51:9b:73:23:c7:24:
6f:d4:60:73:78:f4:74:33:35:2a:a9:e1:bb:d4:fd:3a:0a:28:
ac:e3:75:de:62:06:f4:2e:9f:2d:8b:49:46:71:8b:dc:e0:70:
91:19:0a:3e:8f:49:73:fa:d6:1a:02:23:43:83:07:6c:46:86:
0e:0f:96:be:e7:3b:fd:ee:19:21:ce:cc:16:a0:7a:b4:6f:73:
c9:d0:33:f2:0a:9f:86:36:7a:1e:f5:b9:1b:a3:d6:7b:ce:54:
33:45:36:eb:f2:04:df:62:70:10:20:25:37:fd:a4:27:8c:4d:
68:1b:20:70:0b:16:0f:33:39:8c:01:cf:7c:f3:1b:4b:58:ee:
7a:c4:1b:48:a3:41:67:9b:2d:23:b6:4e:27:eb:7c:be:4a:3a:
10:62:fa:ce:9f:4b:2c:72:ed:fc:99:79:b1:ca:fd:5e:2c:81:
c6:9c:ec:80
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUQ2QheNhgLeUyPS4eNWctZ4Qge2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTAyMjcyMTIxMjVaFw0yNjAyMjYyMTI2MjVaMDMxMTAvBgNV
BAMTKDJBQUNCN0JGNzRGMUVENTRFQThBRDM1NENEQzU3RDRDMjlEMjk3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3JYYfs7/wnIaP1n+LQyU2OJq
zZgrKjH6lWmr+Q8Tm7q71A/YCqMQm1vQxWQwY4GPDEeH0pldWbjK4Va/OiaJjvXo
tD45PCwuOXPI3H24BSQv6qV7g+6fgHlv8+WhaE332VUKaUHdbRxlKb3Rrx0N/m22
bLZ4IfUZ+U6I1JjRKCzyjesU3Nt6oKBOw8fsB1NEGxG2+zPyowBnN20em4kKPUpG
kaQfiw8mtqQAtuvPe7gAPjYBmPyCwK4OnTlUsxA50MhakXtQ9FMkslbeZU9Oxxh/
3/VkkTYxjYj/hsN0NJnjUKXbezqYPFfuk2uXgFqa4ebtnHkIVq6WRX6Rx/PRAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUKqy3v3Tx7VTqitNUzcV9TCnSl8MwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzQ4NzQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsG
AQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKg+UAGIQAwcAKg+UAGIlAwcAKg+UAGIo
AwcBKg+UAGIwAwcAKg+UAGJJMA0GCSqGSIb3DQEBCwUAA4IBAQBg3m7uoOr640IM
bxrHT7tI4fPp5rUZbn9WQkum03jOrJO/0ZWTgIN9yvrUMv/NRX4YmN1x3VRrlmP1
k68pBzBYAYGWh2eVXfnN1Ucx24LgyN74YWlRm3MjxyRv1GBzePR0MzUqqeG71P06
Ciis43XeYgb0Lp8ti0lGcYvc4HCRGQo+j0lz+tYaAiNDgwdsRoYOD5a+5zv97hkh
zswWoHq0b3PJ0DPyCp+GNnoe9bkbo9Z7zlQzRTbr8gTfYnAQICU3/aQnjE1oGyBw
CxYPMzmMAc988xtLWO56xBtIo0Fnmy0jtk4n63y+SjoQYvrOn0sscu38mXmxyv1e
LIHGnOyA
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:16 2025 by rpki-client