Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
File: AS151194.roa (raw, json)
Hash identifier: r6zSh8hF7ZWOFXNQWHs1jOIeWI5CDAiaukWBmvgW1Ak=
Subject key identifier: 54:AC:7B:84:E6:81:EE:3D:AA:E1:E7:D7:25:FF:3D:D2:1A:46:6F:D4
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 36E403C64D61AE962F86716CC5A9282CA4A305A8
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
Signing time: Wed 13 Aug 2025 05:39:05 +0000
ROA not before: Wed 13 Aug 2025 05:34:05 +0000
ROA not after: Wed 12 Aug 2026 05:39:05 +0000
asID: 151194
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e4:03:c6:4d:61:ae:96:2f:86:71:6c:c5:a9:28:2c:a4:a3:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 05:34:05 2025 GMT
Not After : Aug 12 05:39:05 2026 GMT
Subject: CN=54AC7B84E681EE3DAAE1E7D725FF3DD21A466FD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:4a:02:8c:20:45:b0:a3:49:2d:98:03:b1:
1e:6d:81:81:4f:aa:9c:b0:0c:81:d2:b7:13:47:9d:
20:6e:e2:e6:79:91:73:58:7d:37:bf:92:66:a2:79:
ce:eb:ab:95:7a:c1:53:58:bc:e6:fd:84:c5:01:e2:
e5:77:69:ac:ba:05:60:69:82:5e:9d:43:d3:c7:aa:
d2:39:37:2c:25:b4:da:f7:0c:42:5d:4c:5b:cb:f4:
e4:3d:7b:1d:04:b5:cc:b7:ae:9a:ac:b2:72:bf:92:
43:fe:8a:9e:84:93:8c:53:b4:f8:0f:0f:e1:87:38:
67:6f:37:e6:cd:b0:3e:30:ff:03:d4:90:65:e7:80:
48:22:cb:9e:35:ab:a6:7d:d8:d2:25:a0:70:b9:26:
62:da:83:d3:1d:60:fe:ab:b0:04:21:48:9d:73:d3:
b2:7a:be:db:6d:b9:f7:c0:96:bf:eb:6d:d6:de:48:
70:6c:46:ba:d5:e1:87:51:58:3f:74:8f:18:3e:3f:
7b:68:55:59:33:ee:91:a7:11:11:1d:05:b5:3f:1d:
40:3b:87:23:a5:66:3b:61:31:df:7e:cd:81:5c:f0:
2b:00:fe:0a:68:dd:44:dc:55:61:5c:5c:46:de:fb:
32:35:df:bd:48:e7:a3:2f:84:3a:bf:62:43:38:fc:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AC:7B:84:E6:81:EE:3D:AA:E1:E7:D7:25:FF:3D:D2:1A:46:6F:D4
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS151194.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
96:1a:bb:68:6d:ef:e7:b4:f7:cc:5d:a4:05:38:bf:eb:87:1e:
5a:7e:c3:36:a1:27:18:9d:62:77:bb:39:c8:1b:6f:77:a9:56:
3c:d4:b6:f1:dd:9a:9e:fe:53:6c:da:1a:47:d8:18:a0:26:a8:
7c:cc:8f:f6:d2:b8:46:5f:32:a5:9c:fe:96:f8:86:93:be:a6:
5a:4c:76:fc:61:20:8c:1f:f0:3c:0e:4c:a8:3b:0a:6d:1c:26:
c1:36:e0:cb:1b:17:c0:5e:4e:d7:6e:87:b7:60:81:1b:9c:e0:
d7:0c:ee:9c:a3:71:43:9e:8e:ba:b2:6f:9a:26:c6:1e:52:37:
e5:c8:2a:fc:e1:8b:66:0a:20:12:7a:03:59:f4:04:9f:0e:9b:
87:a5:cd:0d:23:f5:c0:1a:c7:b0:d6:39:67:40:7f:29:59:1a:
2a:0c:04:70:d3:66:0b:e8:e4:e0:03:44:5f:79:8a:c2:c9:41:
da:71:c6:8d:b3:4f:47:9f:17:19:ca:87:62:7d:24:d5:ff:9a:
f4:5c:fc:cc:e4:71:47:80:d8:43:fb:a8:ce:7e:62:c6:68:25:
81:29:04:47:52:8d:92:78:cf:61:c3:fd:8b:78:59:be:77:b4:
2b:85:ab:7a:e0:13:82:0a:33:33:e4:4f:23:31:a4:2c:4c:d3:
5d:29:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:51:09 2025 by rpki-client