Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147001.roa
File: AS147001.roa (raw, json)
Hash identifier: 6cWVhwudkX8NMRCLugOwCpnEhNGMBDK82C42Ji+p2WE=
Subject key identifier: 2B:40:0A:D7:05:77:D8:E2:4C:50:59:32:15:38:9D:E4:40:BB:04:47
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 29BC339978DE8306A406380C9AEAC7AF24B79A83
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147001.roa
Signing time: Tue 17 Jun 2025 03:14:56 +0000
ROA not before: Tue 17 Jun 2025 03:09:56 +0000
ROA not after: Tue 16 Jun 2026 03:14:56 +0000
asID: 147001
IP address blocks: 2a0f:9400:787c::/48 maxlen: 48
2a0f:9400:787d::/48 maxlen: 48
2a0f:9400:787e::/48 maxlen: 48
2a0f:9400:787f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:bc:33:99:78:de:83:06:a4:06:38:0c:9a:ea:c7:af:24:b7:9a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:56 2025 GMT
Not After : Jun 16 03:14:56 2026 GMT
Subject: CN=2B400AD70577D8E24C50593215389DE440BB0447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:82:47:a2:7f:c7:83:a0:e3:f0:ef:3d:8b:
1d:5d:e7:b5:4a:78:21:9e:8a:e2:e8:2f:40:bb:4b:
97:af:4b:22:a8:99:c9:2e:d8:7c:f1:eb:fe:80:a8:
85:10:95:b1:77:e5:f4:e9:4e:b8:7b:42:b5:a3:5e:
cc:c0:e5:7d:f2:37:5d:37:61:76:12:c1:0c:fb:39:
86:36:ac:ab:29:25:75:7d:80:2a:63:1c:67:6a:a7:
bb:12:e0:0c:20:e6:6e:c7:52:ec:de:e2:1d:ea:27:
90:c2:67:f1:79:a0:15:02:aa:3e:76:56:ad:69:68:
50:c9:51:94:13:2e:ba:46:8c:c8:4a:ee:d8:33:11:
0a:cf:d8:c6:c6:4a:58:f2:8e:01:83:97:bc:9e:07:
92:47:fd:ea:a0:1c:04:74:a1:25:4c:9d:b4:02:3d:
c8:65:39:df:bb:39:94:5d:8f:77:e5:9a:74:37:7a:
d5:4f:1b:60:35:42:48:0d:e0:90:74:db:1c:9f:4c:
b2:7e:c0:8d:31:e2:6c:0a:87:3e:83:eb:a7:8e:10:
25:a8:cd:f7:3a:28:d7:de:96:a0:b7:11:a5:6d:cb:
2b:8e:94:33:61:92:11:1f:30:31:6f:f3:77:9c:1f:
d9:ac:30:4a:c4:8f:4e:ba:4b:0d:62:58:cb:fa:12:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:40:0A:D7:05:77:D8:E2:4C:50:59:32:15:38:9D:E4:40:BB:04:47
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147001.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:787c::/46
Signature Algorithm: sha256WithRSAEncryption
2c:e0:44:23:ca:7e:c9:c5:7b:79:d9:81:89:38:b0:fa:31:bd:
2a:a4:0a:14:64:a6:ae:f2:da:73:39:74:d8:9d:2f:7e:2b:2f:
22:77:da:2b:3c:b0:78:ab:07:57:a1:78:59:f3:b4:b0:00:cc:
d3:8f:9e:f2:64:ed:fc:66:2f:a8:8a:77:71:41:55:71:8b:55:
19:01:80:d6:bb:c8:8f:53:d8:12:c0:8e:a0:47:f3:c1:3d:89:
56:e8:ff:95:45:6a:4f:6d:2c:31:e5:01:91:1a:06:b2:c2:d7:
dd:9f:cf:d6:dc:74:7e:05:25:a0:6a:34:c6:14:7a:da:59:4f:
79:40:f2:1c:82:47:0c:3d:cd:3b:db:90:63:b2:b0:95:df:0f:
83:63:b0:1a:e2:db:df:01:39:ff:c4:01:fa:ed:7e:5c:05:07:
c5:e8:e8:98:a5:59:91:a5:b5:0d:3e:75:d7:05:2f:60:b2:54:
64:99:dd:a2:81:ce:ef:df:55:13:a5:e1:e0:a5:b8:e7:48:2c:
8d:f8:5a:19:35:7f:0c:a8:78:b6:e1:96:74:31:8d:87:cc:19:
89:d3:c7:38:86:fb:8f:f6:f5:cf:ae:f2:b5:1f:2e:08:ec:62:
7d:0b:13:10:92:c1:10:ff:ca:86:21:9b:23:f0:1f:94:43:a8:
81:c7:16:a9
-----BEGIN CERTIFICATE-----
MIIEvzCCA6egAwIBAgIUKbwzmXjegwakBjgMmurHryS3moMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA2MTcwMzA5NTZaFw0yNjA2MTYwMzE0NTZaMDMxMTAvBgNV
BAMTKDJCNDAwQUQ3MDU3N0Q4RTI0QzUwNTkzMjE1Mzg5REU0NDBCQjA0NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1W4JHon/Hg6Dj8O89ix1d57VK
eCGeiuLoL0C7S5evSyKomcku2Hzx6/6AqIUQlbF35fTpTrh7QrWjXszA5X3yN103
YXYSwQz7OYY2rKspJXV9gCpjHGdqp7sS4Awg5m7HUuze4h3qJ5DCZ/F5oBUCqj52
Vq1paFDJUZQTLrpGjMhK7tgzEQrP2MbGSljyjgGDl7yeB5JH/eqgHAR0oSVMnbQC
PchlOd+7OZRdj3flmnQ3etVPG2A1QkgN4JB02xyfTLJ+wI0x4mwKhz6D66eOECWo
zfc6KNfelqC3EaVtyyuOlDNhkhEfMDFv83ecH9msMErEj066Sw1iWMv6EkunAgMB
AAGjggHJMIIBxTAdBgNVHQ4EFgQUK0AK1wV32OJMUFkyFTid5EC7BEcwHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUHMAuG
QHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzE0NzAwMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioPlAB4fDANBgkqhkiG9w0BAQsFAAOC
AQEALOBEI8p+ycV7edmBiTiw+jG9KqQKFGSmrvLaczl02J0vfisvInfaKzyweKsH
V6F4WfO0sADM04+e8mTt/GYvqIp3cUFVcYtVGQGA1rvIj1PYEsCOoEfzwT2JVuj/
lUVqT20sMeUBkRoGssLX3Z/P1tx0fgUloGo0xhR62llPeUDyHIJHDD3NO9uQY7Kw
ld8Pg2OwGuLb3wE5/8QB+u1+XAUHxejomKVZkaW1DT511wUvYLJUZJndooHO799V
E6Xh4KW450gsjfhaGTV/DKh4tuGWdDGNh8wZidPHOIb7j/b1z67ytR8uCOxifQsT
EJLBEP/KhiGbI/AflEOogccWqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:40:38 2025 by rpki-client