Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
File: AS198025.roa (raw, json)
Hash identifier: YEfx0bcNdJZXqq+Kj8PHa90wlxMi99AQ6Ah4bsoW9So=
Subject key identifier: 2E:8E:B1:D0:38:38:87:D8:D0:78:C0:A9:C2:F1:37:A1:F1:52:4F:18
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 3866BA089EBCCBBCE5E278EEC8F1A546F1B40F3D
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
Signing time: Wed 13 Aug 2025 11:39:13 +0000
ROA not before: Wed 13 Aug 2025 11:34:13 +0000
ROA not after: Wed 12 Aug 2026 11:39:13 +0000
asID: 198025
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:66:ba:08:9e:bc:cb:bc:e5:e2:78:ee:c8:f1:a5:46:f1:b4:0f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 13 11:34:13 2025 GMT
Not After : Aug 12 11:39:13 2026 GMT
Subject: CN=2E8EB1D0383887D8D078C0A9C2F137A1F1524F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e2:97:e3:50:d0:2f:ac:68:1d:37:9a:fe:d7:
c3:83:0a:b7:ad:3b:94:93:0a:fe:1e:6c:21:2e:53:
85:ae:a8:9c:bb:e1:af:ca:34:37:7a:3a:76:cc:60:
67:af:fc:5a:5f:6d:1e:b9:df:e0:a8:c3:ae:f5:0d:
b5:ef:74:a2:a0:47:69:ec:7e:4a:c4:b3:d4:72:b1:
e2:b8:ac:74:cc:24:0d:da:fb:bc:c1:11:63:ac:bd:
e0:f5:c0:67:ef:2d:c5:5c:fa:2e:89:c6:db:fd:52:
36:ba:ab:67:a6:d0:e0:dc:84:3b:0a:de:ba:59:6e:
9d:ed:fd:09:a9:db:4f:54:58:ab:1f:bd:c8:cb:61:
52:1d:9e:eb:37:b0:72:c3:6e:31:3f:1c:56:c5:a5:
fc:9a:56:07:3a:4c:dc:5a:2b:25:bd:16:37:e7:f7:
4c:73:8f:1d:37:20:a5:36:5e:d9:93:0b:fa:e6:5a:
de:60:98:fb:c6:1f:b8:18:a4:99:71:19:0d:f1:bf:
e2:b1:73:31:a2:48:4b:11:91:2f:f3:3f:9d:56:38:
ab:61:31:93:81:61:7d:62:1d:e3:ac:db:56:28:0a:
3b:d9:2e:af:41:e7:94:9c:82:02:e9:06:f0:3f:9b:
e2:a6:71:31:1d:be:54:b3:d0:d1:a4:c7:d4:8c:d7:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:B1:D0:38:38:87:D8:D0:78:C0:A9:C2:F1:37:A1:F1:52:4F:18
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
95:00:46:ff:1f:ad:0e:1d:39:c2:e9:a8:d8:cf:3f:d1:40:48:
17:60:db:7f:83:0c:ec:dd:20:ae:cc:ff:62:06:9e:08:d0:be:
84:f9:32:f6:91:57:ee:a5:9e:57:88:02:90:e1:22:b1:64:b6:
ad:f9:7c:1b:65:15:84:0d:65:db:b0:32:80:ed:2d:98:75:c8:
67:13:65:a2:c4:2e:e2:6f:da:30:51:1c:15:f3:a3:c2:fd:4f:
de:e8:f5:64:31:18:46:eb:8e:02:39:ec:87:db:62:40:3a:dd:
f1:7d:90:e7:4b:9b:ad:c8:e3:a8:2f:3d:36:97:85:b8:7c:bb:
43:d4:96:25:a2:f4:f0:9c:6b:d9:33:04:4e:25:5f:29:6e:fa:
aa:10:18:a4:80:4a:f7:ab:69:de:48:b1:1c:e4:75:12:1c:81:
0f:f1:8d:aa:90:0a:b1:d4:b4:f2:55:65:d2:11:fa:1c:da:ee:
24:16:50:82:b5:71:8f:49:56:95:82:c2:a1:cd:e5:09:ba:8f:
46:0a:00:a5:40:80:bb:07:5d:fa:9b:e4:cd:b0:f9:4c:69:32:
6a:a8:51:34:1b:ef:2a:76:01:52:70:a9:58:54:9b:89:6a:44:
f4:7c:3c:6f:37:a5:02:0b:fa:c2:ed:97:fe:9f:6d:c8:00:68:
7a:39:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:14 2025 by rpki-client