Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS201386.roa
File: AS201386.roa (raw, json)
Hash identifier: VLnvgtHW9HB2+OeCP8sJ4iV7EI942oDWUFV+N1eXJSc=
Subject key identifier: E9:01:D4:02:DF:AF:AF:B0:B3:45:AC:29:6A:B1:82:2B:7B:2D:19:69
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2D70B993812A54C5DB5AE62370B58A45BB165710
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS201386.roa
Signing time: Thu 14 Aug 2025 10:40:52 +0000
ROA not before: Thu 14 Aug 2025 10:35:52 +0000
ROA not after: Thu 13 Aug 2026 10:40:52 +0000
asID: 201386
IP address blocks: 2a0f:9400:6110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:70:b9:93:81:2a:54:c5:db:5a:e6:23:70:b5:8a:45:bb:16:57:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 14 10:35:52 2025 GMT
Not After : Aug 13 10:40:52 2026 GMT
Subject: CN=E901D402DFAFAFB0B345AC296AB1822B7B2D1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:f9:57:30:60:84:37:c4:ad:89:86:cb:fd:
5e:f0:15:ba:c7:34:33:1d:82:2c:c6:4b:b1:ce:f3:
4b:77:a3:cc:1b:df:91:25:4a:42:83:4b:53:fb:18:
95:eb:3b:09:6d:d7:51:d5:71:25:3d:4c:ed:79:6b:
4a:ad:b0:d9:a7:35:f7:28:f2:c8:f2:d9:2b:2e:b7:
b3:9c:22:90:62:a7:86:15:c5:aa:ab:a4:ed:ba:98:
5d:30:d9:7c:36:e7:32:61:e6:a0:1e:f2:84:ca:75:
c7:57:72:8c:93:4c:ee:18:b0:e4:44:b2:9b:5f:a3:
47:9c:cf:45:95:93:9c:da:e2:84:88:48:3d:4a:f4:
db:5a:01:8d:84:f0:55:88:b5:76:e9:f8:2a:5c:0a:
6b:6c:af:c0:4c:80:30:56:ca:66:2a:3a:ed:eb:02:
f7:3c:7e:33:dc:c1:ca:bd:bc:e9:23:6d:2c:4e:2e:
36:ab:af:54:49:bd:bd:61:07:47:a2:24:08:b2:ca:
2c:76:ac:93:9d:10:4b:3f:66:ff:8c:4d:78:2e:94:
5b:74:ca:8f:4b:03:50:9d:ff:1b:a4:5a:c7:89:69:
68:73:45:25:8b:6c:44:f9:b9:d9:98:09:5d:71:19:
10:92:b4:35:24:8c:2d:eb:96:38:f8:09:c6:ea:48:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:01:D4:02:DF:AF:AF:B0:B3:45:AC:29:6A:B1:82:2B:7B:2D:19:69
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS201386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6110::/48
Signature Algorithm: sha256WithRSAEncryption
0e:67:03:b5:c9:99:7c:8f:1a:75:1f:fb:f0:4a:5f:39:33:86:
10:c5:c2:f0:05:20:67:86:12:98:5e:8e:b8:1a:40:fa:f4:43:
40:02:76:18:65:00:69:a7:e0:63:ea:3f:f5:29:3d:79:28:b6:
1e:28:c2:5b:f6:2f:8b:64:98:4c:4f:36:e7:c8:91:5d:e9:2b:
93:8e:04:06:8a:96:e1:5e:d9:7d:c0:4e:36:ff:07:cc:44:78:
33:e2:d2:b5:ca:3a:b1:29:21:3e:9c:0e:ba:cb:a9:02:87:ef:
30:a6:66:e7:06:45:58:e9:c5:16:09:d7:b3:09:79:49:fd:89:
ea:5d:d6:86:62:0c:f4:ac:dc:cf:9c:20:59:b4:e0:b5:87:0c:
15:7d:0c:64:51:33:d8:db:43:53:a3:e0:51:74:65:b4:e9:3b:
a4:4c:a0:95:c1:6c:1c:75:a3:df:01:4c:f2:30:1c:1c:62:3d:
e1:74:db:ff:16:fc:7b:11:1a:e7:97:f4:c2:b1:ee:0b:1c:62:
f7:79:da:07:5d:d4:a9:67:35:78:ae:cb:6a:05:eb:29:3f:62:
02:31:be:fc:b4:b5:fb:fa:07:38:c4:3d:96:1c:4d:5a:b5:a6:
55:ad:b9:0b:46:58:bb:8e:ee:6b:08:95:1d:85:8b:84:cf:d0:
14:9c:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:11:45 2025 by rpki-client