Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147028.roa
File: AS147028.roa (raw, json)
Hash identifier: MSJYR8/TfJWJJbXs3rf9r/rKEnrKG498F7v/BG+hMF0=
Subject key identifier: C5:B4:00:9A:50:42:DE:82:ED:7B:A5:96:0B:8E:93:5B:91:9B:77:B3
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6A62E36D07BB0D56D5BF39B0C83AB04D8FA196FD
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147028.roa
Signing time: Tue 17 Jun 2025 03:14:55 +0000
ROA not before: Tue 17 Jun 2025 03:09:55 +0000
ROA not after: Tue 16 Jun 2026 03:14:55 +0000
asID: 147028
IP address blocks: 2a0f:9400:7810::/44 maxlen: 48
2a0f:9400:7814::/47 maxlen: 48
2a0f:9400:7820::/44 maxlen: 48
2a0f:9400:7834::/47 maxlen: 47
2a0f:9400:7844::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:62:e3:6d:07:bb:0d:56:d5:bf:39:b0:c8:3a:b0:4d:8f:a1:96:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 17 03:09:55 2025 GMT
Not After : Jun 16 03:14:55 2026 GMT
Subject: CN=C5B4009A5042DE82ED7BA5960B8E935B919B77B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:cb:5c:9b:2a:ee:bc:75:b5:fd:3a:1b:bf:
0f:75:f3:4a:92:6f:24:41:c1:fa:24:d7:c0:fb:f5:
41:b6:70:91:a7:62:b9:4f:3b:82:01:da:6d:3b:47:
9a:0d:9b:82:3c:2a:f7:7e:d7:d2:27:eb:5a:25:9d:
c6:8b:24:c8:75:e5:b3:5a:ab:49:69:a5:1f:12:e7:
4a:92:f8:56:ae:1a:5a:a1:9c:ca:e4:77:57:b3:e5:
cb:48:a5:71:97:7e:33:b2:c4:65:4a:b0:0c:60:16:
5e:5d:fa:45:ad:ea:9c:60:0c:57:c4:c9:c2:3d:05:
87:3b:04:15:65:97:a2:e5:fe:08:12:c6:3c:04:a8:
c4:36:6d:72:07:d3:e1:c4:27:72:86:b9:4f:3c:6a:
14:37:32:13:35:3f:6e:d8:ce:02:0a:7d:97:a5:16:
f6:1b:56:83:50:49:78:46:a2:0d:3b:4b:f5:bb:45:
62:9d:2d:b2:91:9b:e3:c1:13:c0:d7:32:64:7a:a3:
22:2d:bf:a8:fd:ce:1a:80:0d:46:99:47:fa:3b:8a:
46:ed:d2:f3:3e:90:a6:9c:68:fc:e9:91:11:b2:85:
f3:d4:ba:67:31:dd:a9:ed:72:97:1d:43:69:44:46:
21:66:77:2f:fd:3c:4e:04:0f:fe:74:21:63:24:00:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B4:00:9A:50:42:DE:82:ED:7B:A5:96:0B:8E:93:5B:91:9B:77:B3
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS147028.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:7810::-2a0f:9400:782f:ffff:ffff:ffff:ffff:ffff
2a0f:9400:7834::/47
2a0f:9400:7844::/47
Signature Algorithm: sha256WithRSAEncryption
13:c7:eb:3d:de:0e:08:2f:63:64:03:93:f4:ab:20:6c:96:87:
0c:91:dd:bc:fb:1c:aa:57:2a:73:fe:f2:4d:1d:e8:88:56:8c:
62:e5:fa:b4:54:84:5d:50:9f:0d:2e:8d:d6:b9:4b:68:3e:c2:
f4:81:14:38:8e:2a:84:de:6d:31:06:5f:a0:6e:39:7b:f0:51:
1e:08:cb:4a:a6:19:65:55:66:76:41:70:d3:c8:db:46:26:d2:
3a:33:ea:a9:47:08:b7:c1:29:de:99:b7:f2:12:7b:3e:b4:78:
3e:b7:87:2d:79:3b:7e:48:f2:d1:00:17:dd:1f:5e:a8:8e:b0:
77:df:64:15:4f:2b:79:7c:71:1b:7a:9d:b4:87:32:d2:cc:6a:
be:d4:78:55:f9:d8:af:7f:ed:6c:af:3c:ac:b4:a4:16:b2:0e:
d3:76:da:21:61:57:e5:7e:97:b5:53:33:f2:b8:95:a3:8f:90:
13:55:ec:a6:59:0e:9c:6e:ef:5f:cd:cc:e3:2e:69:db:ff:b8:
0f:13:0e:57:ef:3d:7b:75:75:a0:61:6f:fd:b0:a6:19:18:f1:
b1:d3:d9:91:7a:3e:4c:87:c8:b8:65:44:d8:42:d8:4f:d3:f2:
62:28:e3:e0:1e:65:9e:b4:5a:08:4a:b3:f0:e9:47:b0:19:89:
1c:a1:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:07:19 2025 by rpki-client