Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
File: AS200182.roa (raw, json)
Hash identifier: ENi8msfw64QDG7SAbZ7GDueLQ0m+O8TTFw1iK8Ib5p0=
Subject key identifier: 05:11:37:86:05:4C:E3:AA:A7:D0:CC:25:5A:C4:CD:84:58:D7:EB:AB
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 19A76AF949E70894DB06387839157D25C3E3651A
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
Signing time: Sun 15 Jun 2025 12:14:13 +0000
ROA not before: Sun 15 Jun 2025 12:09:13 +0000
ROA not after: Sun 14 Jun 2026 12:14:13 +0000
asID: 200182
IP address blocks: 2a0f:9400:6120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a7:6a:f9:49:e7:08:94:db:06:38:78:39:15:7d:25:c3:e3:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 15 12:09:13 2025 GMT
Not After : Jun 14 12:14:13 2026 GMT
Subject: CN=05113786054CE3AAA7D0CC255AC4CD8458D7EBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:13:4b:d3:7f:d5:b0:62:d6:fd:fa:67:7d:
55:cc:c5:df:2f:f3:52:82:dc:7e:63:fd:f8:f9:82:
ac:eb:80:67:06:df:83:80:94:7b:08:8f:e8:87:0e:
83:0d:23:75:32:71:ff:ef:8b:a0:ed:74:e9:59:d1:
da:ad:94:b8:89:ed:93:0f:2f:11:91:8b:79:2e:dd:
9a:e2:0f:2b:2e:b1:c0:e3:ca:d9:03:bd:f8:0e:f7:
eb:45:f1:11:74:67:f7:99:bd:c4:a5:00:7b:17:62:
4f:96:97:1d:a2:c3:81:19:ea:8a:3f:32:f7:a3:c6:
d6:3c:35:a6:25:c3:90:30:59:3c:44:59:0c:82:5a:
ff:35:c8:62:ef:7f:f0:f6:88:83:dd:50:74:0e:46:
e2:6d:91:01:a1:fd:e2:e0:50:ae:48:5d:ca:d7:39:
99:50:4b:e5:70:24:62:57:f7:07:25:52:9b:f2:dd:
c9:f9:b4:03:cf:5a:82:fc:45:1f:f6:d8:5a:28:03:
f5:6e:6b:b5:90:83:20:78:6c:f2:3f:52:a5:e4:1c:
10:65:c6:8e:9f:14:0c:95:46:85:24:f6:63:e2:61:
9d:f6:b2:96:76:a1:b6:05:ed:59:4c:90:3c:0d:3c:
49:c1:8f:b5:24:55:57:e5:2a:a0:c4:a1:0e:dd:85:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:37:86:05:4C:E3:AA:A7:D0:CC:25:5A:C4:CD:84:58:D7:EB:AB
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS200182.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6120::/44
Signature Algorithm: sha256WithRSAEncryption
84:58:64:46:01:01:af:55:94:f0:2c:b3:46:aa:2e:49:ea:16:
83:37:b3:3b:31:7a:a7:40:12:34:8e:80:9b:f0:96:52:a4:77:
96:29:9a:05:d8:ff:0c:3e:33:1b:f5:e5:43:26:7a:cd:ec:c6:
9c:e6:1b:28:a3:50:28:18:e7:cb:2f:c4:39:4f:38:4a:6c:02:
e4:d9:f1:eb:f3:66:23:88:8e:af:22:22:af:a9:2c:3e:1a:cb:
fd:06:82:d7:0c:af:fb:44:8a:a3:3e:32:c6:0a:68:b6:cb:6d:
c9:03:e1:d2:81:21:bc:0f:6f:fc:8f:78:42:a9:da:93:8d:06:
ac:60:53:44:24:23:0d:47:6a:ca:34:6e:8b:cf:0d:5d:e5:ba:
06:70:16:9a:14:71:ac:53:3b:41:96:f7:f5:f4:6c:06:d7:ed:
cf:b4:63:77:e0:5c:4e:5f:6c:0a:a7:f7:ab:1c:b5:e6:3f:66:
4a:8f:cc:1a:b5:4e:cd:13:ad:a0:5a:da:cb:c8:d4:38:5c:cb:
35:96:e7:58:c7:c0:3e:84:b2:8a:11:cc:3d:f0:2c:b2:ff:13:
d9:35:c9:5f:83:e6:0a:e0:62:08:34:28:2f:7d:57:2c:c0:d8:
65:41:96:90:9b:bb:50:09:2d:43:a7:89:05:42:6b:b0:70:75:
45:a4:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 15:42:50 2025 by rpki-client