Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
File: AS54133.roa (raw, json)
Hash identifier: Iw+qysXBZd/1TLFLtae3kF0nm/aD7EYmUgnObg9Nwek=
Subject key identifier: 3C:BA:E4:33:20:A2:DD:A2:5E:D1:5E:A3:BD:2E:28:A9:A7:8E:28:AD
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 9913CADBE6F24D424B5C7961FBC91090B9743B
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
Signing time: Sat 07 Jun 2025 16:46:03 +0000
ROA not before: Sat 07 Jun 2025 16:41:03 +0000
ROA not after: Sat 06 Jun 2026 16:46:03 +0000
asID: 54133
IP address blocks: 2a0f:9400:6104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
99:13:ca:db:e6:f2:4d:42:4b:5c:79:61:fb:c9:10:90:b9:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 7 16:41:03 2025 GMT
Not After : Jun 6 16:46:03 2026 GMT
Subject: CN=3CBAE43320A2DDA25ED15EA3BD2E28A9A78E28AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:1f:ee:ea:26:9f:6e:01:dd:c1:57:f0:ac:
f2:0f:4e:a2:d2:d7:89:a3:8e:63:f3:34:45:62:5e:
b5:8f:e6:32:14:e9:ff:8c:0b:27:18:c5:f8:b6:4f:
6f:12:c6:ac:88:30:49:54:22:29:cd:fd:31:78:ec:
aa:eb:f0:d1:a5:25:0b:31:fe:f9:ae:e7:ce:31:4d:
d7:0a:d9:99:2a:b6:be:c7:a6:60:26:c9:49:f2:f7:
29:df:42:3f:19:cf:2c:bd:26:28:60:ef:6e:e9:98:
31:13:0b:1c:d0:7e:ea:97:2d:e7:5c:27:ec:88:bd:
87:cb:9d:4c:5b:b8:5a:46:3e:ec:f0:33:58:6d:48:
bd:ee:10:79:22:da:ff:13:86:2f:bf:43:f0:53:9b:
0d:3f:95:2c:80:60:a6:3e:21:66:2f:81:ec:e3:b4:
ea:f6:d5:89:07:cd:79:57:06:8b:1d:0e:5d:ee:08:
d3:3b:0f:af:3f:c7:00:38:2b:3d:1a:6d:fb:0c:29:
2e:70:23:5b:00:6f:e8:6a:d9:b9:28:e7:f9:8a:09:
a8:91:d8:72:f2:06:38:d3:c1:5c:47:e1:cb:fa:46:
23:2b:81:e1:f4:d1:ed:1a:4c:bf:fc:49:c0:76:31:
2e:6c:d2:e3:64:a9:e2:04:15:e1:ac:e3:5a:70:52:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:E4:33:20:A2:DD:A2:5E:D1:5E:A3:BD:2E:28:A9:A7:8E:28:AD
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS54133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6104::/48
Signature Algorithm: sha256WithRSAEncryption
c3:bc:f6:b2:a0:96:0e:53:61:b7:cb:f5:3b:91:47:09:e8:c1:
16:d3:87:dc:b2:c1:bf:06:2d:c6:8d:e6:7d:d4:92:08:81:4e:
be:56:46:be:c3:26:61:8a:9a:de:b5:b8:e7:8b:7f:ee:5f:2e:
c6:29:b4:ef:2e:56:f5:41:e1:b8:04:b4:9a:a8:6c:5d:55:be:
88:77:bb:7d:c0:c1:5e:75:c6:9f:cd:6c:62:a3:2b:37:7b:9c:
55:c5:35:18:41:90:da:ae:39:a2:e5:fb:d4:5e:50:c9:fb:67:
d1:1e:1f:67:71:f5:55:09:ee:ba:7a:90:e9:b9:94:df:18:6c:
ce:46:93:34:96:bf:57:2f:30:b7:27:90:1b:df:a5:38:55:97:
53:97:f0:83:1b:d6:1a:ec:79:f9:5b:45:63:0f:7f:2d:26:2e:
eb:0e:b9:f9:06:45:66:08:06:5e:3b:42:f1:9a:be:10:60:a3:
fd:f3:c8:40:34:ac:ce:0d:f0:93:88:ec:ee:ee:ca:92:06:48:
28:68:87:f1:54:cc:36:34:0a:32:dd:66:ca:d4:ee:de:8e:f2:
fc:e2:9b:d3:0d:8e:51:68:8e:b2:f8:6d:54:6a:a0:7c:00:33:
1b:10:ad:8f:d7:e0:6b:09:d5:a1:7c:02:20:77:0a:e5:21:48:
60:93:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:25:01 2025 by rpki-client