Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51087.roa
File: AS51087.roa (raw, json)
Hash identifier: 5t/D0+eDBw5kQkqzAzRDFfBxyJvBAlb6Q6K3QB9lP+g=
Subject key identifier: 0C:7A:A8:6A:E5:BB:73:3F:15:47:1E:96:50:2D:E5:E1:3C:B4:D1:A7
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1C6BBBD03A727C2EB36611B484137EAC6BC461BB
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51087.roa
Signing time: Tue 02 Sep 2025 01:07:18 +0000
ROA not before: Tue 02 Sep 2025 01:02:18 +0000
ROA not after: Tue 01 Sep 2026 01:07:18 +0000
asID: 51087
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:6b:bb:d0:3a:72:7c:2e:b3:66:11:b4:84:13:7e:ac:6b:c4:61:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Sep 2 01:02:18 2025 GMT
Not After : Sep 1 01:07:18 2026 GMT
Subject: CN=0C7AA86AE5BB733F15471E96502DE5E13CB4D1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:d6:cb:0a:11:15:97:e2:31:6b:51:8a:9a:
c7:01:68:6d:71:07:0d:b4:3e:ba:fb:f2:80:f8:a3:
f9:26:c8:75:e2:be:2b:90:11:59:7c:4f:4c:d7:24:
e2:0c:8a:83:fb:89:6c:08:56:e6:9c:2e:2a:38:b0:
1e:c8:a7:a9:9c:4b:80:aa:19:70:79:bd:ba:da:cc:
b7:ca:77:8b:48:83:31:77:ae:1c:f0:c6:9e:f8:4d:
15:a1:bf:d4:15:f5:a9:c2:4f:b0:87:05:96:50:74:
53:ad:ac:d6:0d:15:d4:c1:ab:fc:15:bd:34:7a:dd:
bb:a7:16:e3:ac:d7:cc:b5:56:e8:8c:09:6a:4d:5c:
e4:6f:12:92:84:19:87:32:82:71:81:c0:a8:c8:ea:
ed:53:b5:76:0c:24:fe:71:f9:11:59:57:e9:2b:e9:
05:35:28:db:4c:a4:fa:da:02:66:4a:32:4f:09:9a:
6d:f6:6e:c3:d3:7f:f0:fe:e6:57:19:d3:7a:21:9c:
6e:9e:a8:90:e7:c8:39:25:86:fc:d0:5a:15:ea:32:
91:b0:a7:c6:3a:6e:05:8f:1b:cd:11:b1:7f:fd:40:
ac:48:21:1d:68:b7:60:9a:0f:49:14:49:30:84:a7:
64:07:78:86:05:a2:7e:cc:c1:d2:df:49:43:34:59:
b2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7A:A8:6A:E5:BB:73:3F:15:47:1E:96:50:2D:E5:E1:3C:B4:D1:A7
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS51087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
02:74:54:4e:fe:e1:a6:12:74:e8:c0:59:c5:95:30:e0:49:41:
18:b1:1c:3c:78:5a:90:28:bf:f8:32:c3:cb:a6:9c:2b:d9:45:
cd:6c:c2:14:60:f4:f2:dd:f3:63:f0:51:ac:3f:b2:25:5c:68:
76:1f:0d:07:f2:2c:ad:56:e5:a8:24:f7:45:98:ff:be:e0:fb:
e9:b1:d4:8c:de:f5:79:85:7b:42:43:90:b6:70:a3:2a:c8:2a:
c7:f9:97:8a:ba:d5:62:47:7f:5c:b7:1d:0c:fc:3a:9f:51:33:
58:f2:3d:3c:2d:ab:c8:1a:41:f4:34:3a:cf:c5:33:9b:db:0d:
55:35:67:f9:3f:79:1f:c7:bd:01:61:be:63:71:07:ce:27:d0:
73:7f:52:25:2d:1b:8b:bc:45:23:d5:98:b5:64:bf:4f:7d:cf:
50:89:a3:c8:2e:d0:13:fd:ee:93:b8:c9:ee:0f:21:bb:93:4a:
98:2f:3b:04:93:aa:0c:d1:94:75:1d:33:85:5e:f7:60:f2:1f:
db:b6:93:1c:51:9b:b9:bb:fc:9b:15:9d:13:17:81:f8:fe:93:
57:67:0f:d9:3e:49:ac:07:86:94:12:c5:fb:0e:a4:91:bd:d1:
a4:fb:50:2d:09:2c:3e:c8:08:bf:76:97:57:92:fc:7d:2d:d6:
8a:6a:f5:18
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIUHGu70DpyfC6zZhG0hBN+rGvEYbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA5MDIwMTAyMThaFw0yNjA5MDEwMTA3MThaMDMxMTAvBgNV
BAMTKDBDN0FBODZBRTVCQjczM0YxNTQ3MUU5NjUwMkRFNUUxM0NCNEQxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1NbLChEVl+Ixa1GKmscBaG1x
Bw20Prr78oD4o/kmyHXiviuQEVl8T0zXJOIMioP7iWwIVuacLio4sB7Ip6mcS4Cq
GXB5vbrazLfKd4tIgzF3rhzwxp74TRWhv9QV9anCT7CHBZZQdFOtrNYNFdTBq/wV
vTR63bunFuOs18y1VuiMCWpNXORvEpKEGYcygnGBwKjI6u1TtXYMJP5x+RFZV+kr
6QU1KNtMpPraAmZKMk8Jmm32bsPTf/D+5lcZ03ohnG6eqJDnyDklhvzQWhXqMpGw
p8Y6bgWPG80RsX/9QKxIIR1ot2CaD0kUSTCEp2QHeIYFon7MwdLfSUM0WbKFAgMB
AAGjggHIMIIBxDAdBgNVHQ4EFgQUDHqoauW7cz8VRx6WUC3l4Ty00acwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzUxMDg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+UAGEQMA0GCSqGSIb3DQEBCwUAA4IB
AQACdFRO/uGmEnTowFnFlTDgSUEYsRw8eFqQKL/4MsPLppwr2UXNbMIUYPTy3fNj
8FGsP7IlXGh2Hw0H8iytVuWoJPdFmP++4PvpsdSM3vV5hXtCQ5C2cKMqyCrH+ZeK
utViR39ctx0M/DqfUTNY8j08LavIGkH0NDrPxTOb2w1VNWf5P3kfx70BYb5jcQfO
J9Bzf1IlLRuLvEUj1Zi1ZL9Pfc9QiaPILtAT/e6TuMnuDyG7k0qYLzsEk6oM0ZR1
HTOFXvdg8h/btpMcUZu5u/ybFZ0TF4H4/pNXZw/ZPkmsB4aUEsX7DqSRvdGk+1At
CSw+yAi/dpdXkvx9LdaKavUY
-----END CERTIFICATE-----
Generated at Mon Sep 8 06:18:06 2025 by rpki-client