Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS142586.roa
File: AS142586.roa (raw, json)
Hash identifier: Oy9daOwrEy+RAU6NqeJ14/1xzAZsz3MptW60NMxhOH0=
Subject key identifier: 42:39:E0:24:1A:A8:72:5E:A1:09:72:B2:37:E5:BC:0E:0C:6C:D7:02
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4C99610E242CDC2BE0578F9F5ED347B8058BAD2E
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS142586.roa
Signing time: Tue 17 Jun 2025 03:14:58 +0000
ROA not before: Tue 17 Jun 2025 03:09:58 +0000
ROA not after: Tue 16 Jun 2026 03:14:58 +0000
asID: 142586
IP address blocks: 2a0f:9400:7870::/48 maxlen: 48
2a0f:9400:7871::/48 maxlen: 48
2a0f:9400:7872::/48 maxlen: 48
2a0f:9400:7873::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:99:61:0e:24:2c:dc:2b:e0:57:8f:9f:5e:d3:47:b8:05:8b:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:58 2025 GMT
Not After : Jun 16 03:14:58 2026 GMT
Subject: CN=4239E0241AA8725EA10972B237E5BC0E0C6CD702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:47:da:67:08:17:23:26:81:b3:a7:cb:fc:
5a:fd:9c:e2:03:f0:e9:87:a1:10:71:35:5d:33:4a:
3d:3f:5e:13:2e:61:31:8f:21:73:08:f9:e4:20:a1:
8a:0d:44:e2:c0:e2:38:1f:12:9d:7c:73:0c:f5:40:
6b:dd:d3:ee:79:f3:49:7b:a6:10:b5:8c:c1:d2:e6:
2a:94:e1:ea:34:46:08:e1:8f:26:60:18:24:94:2c:
33:1a:b7:3b:6d:db:27:be:76:e2:9e:54:98:fa:44:
2b:5b:b0:56:f2:b7:9b:d5:6f:3a:ff:c2:45:44:5a:
c0:08:04:82:ce:9c:b7:98:79:54:cf:79:cf:a6:fc:
ba:6d:16:42:4b:d2:f2:1f:d2:12:b0:36:4f:cc:52:
37:52:f9:1c:8e:fa:80:a3:28:81:0f:e5:1d:46:65:
8d:38:a2:89:8d:cd:7c:b2:71:a2:f5:64:62:48:a6:
1d:b1:2a:c5:9b:79:5a:d9:dd:ba:4f:b0:a4:af:15:
85:cc:8f:5f:cb:3b:d1:41:18:14:5b:4f:a6:69:72:
6c:44:68:38:95:dd:82:81:b0:a0:71:fa:99:81:43:
12:a7:20:46:ba:ac:07:8d:fa:78:03:d9:42:5c:42:
bb:7c:af:40:cc:59:0b:0b:a2:9f:21:12:d9:21:f9:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:39:E0:24:1A:A8:72:5E:A1:09:72:B2:37:E5:BC:0E:0C:6C:D7:02
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS142586.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7870::/46
Signature Algorithm: sha256WithRSAEncryption
74:6b:dd:c7:1c:1e:50:59:3e:2d:b7:de:24:24:30:ef:d9:c3:
f8:57:64:ed:c4:fa:f7:9e:86:32:63:10:e4:ba:bf:20:4e:65:
52:e1:5f:36:5a:34:bb:fe:ee:9c:74:a0:0a:a7:e3:ab:23:ec:
0b:39:22:c8:f8:4d:da:0f:4d:c2:29:2f:ea:bb:92:3c:bb:e9:
b7:3c:b9:c0:d3:7e:04:f5:53:22:cf:fd:7a:75:84:e8:35:d1:
29:a8:70:1c:d1:1b:ec:1f:71:29:45:bd:df:49:3a:af:47:d9:
72:7b:38:75:98:e2:f4:f5:dc:bb:09:c5:ee:eb:92:74:b6:52:
e1:eb:67:ca:d0:fa:c1:eb:4d:62:47:35:eb:88:c4:9a:91:e6:
a8:98:f5:95:49:0b:7b:74:ad:50:db:11:12:5d:40:5b:32:67:
38:d8:f7:8e:a5:7a:aa:05:a4:2d:43:f8:c8:f6:98:9d:c7:de:
e0:5f:a9:d0:11:1b:60:62:50:fd:c9:d3:64:54:6d:af:d2:01:
1f:93:ad:ae:3f:26:ec:27:0b:b0:07:c6:34:ce:b5:a5:eb:ae:
f4:4c:d9:2b:b0:65:7e:d0:88:c5:cc:82:7b:53:43:5d:50:d5:
a9:ff:c2:4c:f7:b8:ea:80:92:0f:bc:6e:a1:80:e8:61:8c:82:
cb:eb:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:36:02 2025 by rpki-client