Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198304.roa
File: AS198304.roa (raw, json)
Hash identifier: bSQJAZ3+q0xyfIRcaweKZjDujfx7Ev5Bq87Ncyo77KY=
Subject key identifier: 03:17:2E:13:6D:F4:BD:AC:8F:3E:6F:D9:6E:ED:7F:24:B9:54:A2:3B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 1314F085F59CDCBF94EE0AA9E497E349A78B526A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198304.roa
Signing time: Thu 14 Aug 2025 10:40:16 +0000
ROA not before: Thu 14 Aug 2025 10:35:16 +0000
ROA not after: Thu 13 Aug 2026 10:40:16 +0000
asID: 198304
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:14:f0:85:f5:9c:dc:bf:94:ee:0a:a9:e4:97:e3:49:a7:8b:52:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 10:35:16 2025 GMT
Not After : Aug 13 10:40:16 2026 GMT
Subject: CN=03172E136DF4BDAC8F3E6FD96EED7F24B954A23B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:de:30:87:c7:a8:39:44:14:41:73:b0:e6:
60:b2:7e:f4:03:f7:1d:35:93:08:08:c1:44:f6:e8:
79:d5:14:5b:2d:ae:cb:70:e3:07:82:14:a1:d5:04:
4d:09:8f:f2:1e:2a:8f:f3:93:82:5f:48:91:f0:eb:
30:2f:18:7b:fe:74:e5:63:54:f1:1a:7b:b1:33:ef:
6e:29:d3:34:4f:b2:69:ff:a5:cd:66:c7:a8:6a:20:
fa:f0:12:40:48:97:34:d0:88:a8:fa:32:78:58:88:
7f:4d:ef:94:ee:4d:cc:82:ad:f2:1d:dd:da:04:6e:
1f:5a:31:96:30:90:5f:4b:12:b1:33:aa:9f:0e:73:
1c:cb:4f:22:82:8d:1f:6c:34:96:bd:8b:b4:00:c0:
2b:ee:ae:c3:77:ab:ee:d4:36:2b:4b:97:e6:f2:a1:
2a:9b:01:e6:34:ed:d4:a3:ff:d0:31:60:14:1e:29:
7f:ee:46:eb:07:e6:48:4d:95:d0:95:11:ae:1b:b3:
85:a1:5b:5b:2f:91:51:7c:25:18:74:9e:64:bc:01:
84:f0:b0:07:5a:bf:9c:f2:b9:bd:39:32:48:22:2d:
6d:6d:74:4d:d3:62:db:50:d4:57:07:66:33:52:55:
20:f4:e0:96:99:14:76:e6:7a:d1:f1:0e:e6:5c:43:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:2E:13:6D:F4:BD:AC:8F:3E:6F:D9:6E:ED:7F:24:B9:54:A2:3B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS198304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
78:79:fe:8a:0e:54:a9:f9:b4:e3:e7:88:75:7f:e9:a4:ca:33:
73:9b:79:6b:d0:45:81:16:ef:57:ed:57:32:56:5b:e3:ff:2c:
86:12:31:73:c3:ca:72:68:48:51:4f:ca:c9:b3:de:68:bc:44:
70:5f:a6:76:91:b8:1f:90:ed:4d:76:f7:5f:f3:31:50:a8:ec:
89:02:ee:f4:17:9c:23:e7:30:54:12:68:12:a0:d0:65:92:fc:
f8:d4:78:94:44:a3:dd:5f:4f:bd:cf:fb:bd:fc:53:c7:da:a0:
cd:f3:d5:84:24:83:4f:6c:7a:ab:be:66:d6:1e:67:f1:78:9a:
d7:52:de:76:9d:6c:64:66:99:3b:de:a7:d5:82:00:ed:b9:ae:
9c:7e:a5:dc:13:84:40:82:4b:de:81:ff:85:0f:c7:1b:84:c9:
70:8f:02:52:ca:f6:76:4d:73:da:f1:b2:df:2f:7a:4c:2f:05:
82:a1:bd:09:c2:ba:3d:de:d7:26:a2:a5:d4:42:79:24:d5:d0:
93:9a:d7:39:9b:02:9b:15:00:56:00:4d:59:6b:b7:a3:4b:7c:
30:77:2b:bc:f3:98:15:54:87:b7:3a:f6:a4:11:49:82:6c:91:
6a:4e:a0:cc:4f:72:90:1b:22:46:33:6b:8b:73:94:48:12:f8:
c3:b0:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:51:47 2025 by rpki-client