Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140915.roa
File: AS140915.roa (raw, json)
Hash identifier: JUeTc7+cPDipGJxvXKFysr4OZJG8XO8BciVRx8Ztq+Y=
Subject key identifier: D6:58:FE:8F:6B:7F:F7:FA:28:8C:A1:EF:FC:D4:14:9D:BC:01:31:B6
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1CA75DAE713131F88E9D4807114DC13578FC2E97
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140915.roa
Signing time: Wed 13 Aug 2025 13:48:49 +0000
ROA not before: Wed 13 Aug 2025 13:43:49 +0000
ROA not after: Wed 12 Aug 2026 13:48:49 +0000
asID: 140915
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a7:5d:ae:71:31:31:f8:8e:9d:48:07:11:4d:c1:35:78:fc:2e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 13:43:49 2025 GMT
Not After : Aug 12 13:48:49 2026 GMT
Subject: CN=D658FE8F6B7FF7FA288CA1EFFCD4149DBC0131B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:31:c9:c2:3e:69:2e:82:d7:fd:69:8e:05:
01:6a:3c:40:f0:21:23:cd:20:1e:c8:5e:df:17:3e:
f4:92:61:5a:51:bc:3d:0d:05:84:fe:af:44:98:0c:
66:98:a7:7d:f1:1e:9b:9b:57:88:03:b1:e0:c6:65:
79:df:f5:00:98:48:7c:b1:78:0b:fd:32:cf:ab:da:
b6:e8:3a:19:f1:2a:7c:4f:5b:2b:f6:29:c9:04:ec:
16:0c:c1:cf:de:57:63:bc:66:9e:0a:b5:79:43:ff:
08:84:23:72:c0:60:c4:d4:af:f9:f8:f4:73:49:c6:
23:59:21:fe:2e:bc:10:bc:a5:db:ac:be:1b:5a:24:
2c:22:20:c9:61:1a:06:ca:ba:77:e3:88:50:3a:7f:
09:54:f0:81:e2:19:1e:3e:8c:f7:3d:32:fc:76:d9:
65:29:d7:88:34:ab:c8:82:52:34:a0:d1:6a:71:86:
18:6b:7d:2f:e8:17:ab:0e:49:f0:2d:82:a2:3f:c5:
70:52:ea:56:e3:b8:04:2a:28:0c:39:3a:a9:ae:9e:
a8:10:1c:6a:ec:8a:d0:93:b5:ae:44:77:1d:6e:50:
7f:dd:af:d2:7c:0f:b7:d1:9b:02:1e:80:0e:69:cc:
48:88:0a:df:dd:9c:6a:45:1c:cf:13:50:2a:6e:f7:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:FE:8F:6B:7F:F7:FA:28:8C:A1:EF:FC:D4:14:9D:BC:01:31:B6
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS140915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
43:7f:1a:da:29:93:56:68:21:0f:64:26:8d:d0:b3:c4:ae:2a:
53:d0:da:18:c5:cc:39:6a:60:75:89:69:46:b0:43:c2:f7:fd:
cf:76:a1:1e:68:90:c4:86:78:34:ed:20:cc:f7:ab:9b:b2:b5:
69:e9:dd:5c:a0:e8:86:aa:42:0d:97:a8:c8:bb:13:68:24:ff:
f2:3a:d3:04:3a:dd:2f:0e:f9:46:dc:28:60:98:68:e5:39:a5:
82:01:20:e5:b6:ef:e4:11:e7:7c:ca:4f:82:d0:f7:2f:5f:04:
61:20:37:f2:e1:b8:62:12:48:6b:46:77:a3:f6:ba:29:6e:73:
78:46:c1:e6:92:2c:22:09:32:5d:95:b1:e7:60:8c:b2:a5:c9:
86:f8:b8:9e:5c:3d:6c:a8:aa:2e:2b:53:16:07:13:6a:3b:e6:
c0:06:6e:ab:45:30:ae:c9:1e:82:28:5b:1f:ec:be:17:bd:6c:
85:14:06:9d:64:f2:f2:76:27:ff:ff:dd:29:af:b4:f1:9a:72:
71:39:9d:98:06:a7:e2:2a:71:a2:76:b1:dc:72:ed:ff:1a:5b:
c5:1b:fb:59:1f:72:74:45:44:e5:57:88:eb:1d:06:7c:1c:e2:
20:1a:f9:25:a6:98:7a:7d:9d:6a:ac:f6:f9:f1:76:6d:79:db:
e9:2c:10:e1
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUHKddrnExMfiOnUgHEU3BNXj8LpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA4MTMxMzQzNDlaFw0yNjA4MTIxMzQ4NDlaMDMxMTAvBgNV
BAMTKEQ2NThGRThGNkI3RkY3RkEyODhDQTFFRkZDRDQxNDlEQkMwMTMxQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8DHJwj5pLoLX/WmOBQFqPEDw
ISPNIB7IXt8XPvSSYVpRvD0NBYT+r0SYDGaYp33xHpubV4gDseDGZXnf9QCYSHyx
eAv9Ms+r2rboOhnxKnxPWyv2KckE7BYMwc/eV2O8Zp4KtXlD/wiEI3LAYMTUr/n4
9HNJxiNZIf4uvBC8pdusvhtaJCwiIMlhGgbKunfjiFA6fwlU8IHiGR4+jPc9Mvx2
2WUp14g0q8iCUjSg0WpxhhhrfS/oF6sOSfAtgqI/xXBS6lbjuAQqKAw5OqmunqgQ
HGrsitCTta5Edx1uUH/dr9J8D7fRmwIegA5pzEiICt/dnGpFHM8TUCpu99PTAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQU1lj+j2t/9/oojKHv/NQUnbwBMbYwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE0MDkxNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPlABhEDANBgkqhkiG9w0BAQsFAAOC
AQEAQ38a2imTVmghD2QmjdCzxK4qU9DaGMXMOWpgdYlpRrBDwvf9z3ahHmiQxIZ4
NO0gzPerm7K1aendXKDohqpCDZeoyLsTaCT/8jrTBDrdLw75RtwoYJho5TmlggEg
5bbv5BHnfMpPgtD3L18EYSA38uG4YhJIa0Z3o/a6KW5zeEbB5pIsIgkyXZWx52CM
sqXJhvi4nlw9bKiqLitTFgcTajvmwAZuq0UwrskegihbH+y+F71shRQGnWTy8nYn
///dKa+08ZpycTmdmAan4ipxonax3HLt/xpbxRv7WR9ydEVE5VeI6x0GfBziIBr5
JaaYen2daqz2+fF2bXnb6SwQ4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:48:24 2025 by rpki-client