Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: 95TPWZ6ibARkiaxRCwdzaiukiYeuY2pgVm+UgJAFvVM=
Subject key identifier: 59:96:28:E7:08:9D:B6:B1:33:46:0E:4D:91:7C:59:7F:7A:B0:22:9B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 6E6D5C4DC7B38F4493ACA53A4729A1C750EF37F9
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
Signing time: Fri 22 Aug 2025 00:59:33 +0000
ROA not before: Fri 22 Aug 2025 00:54:33 +0000
ROA not after: Fri 21 Aug 2026 00:59:33 +0000
asID: 20473
IP address blocks: 2a0f:9400:610e::/48 maxlen: 48
2a0f:9400:6167::/48 maxlen: 48
2a0f:9400:690a::/48 maxlen: 48
2a0f:9400:690b::/48 maxlen: 48
2a0f:9400:693e::/48 maxlen: 48
2a0f:9400:7386::/48 maxlen: 48
2a0f:9400:750a::/48 maxlen: 48
2a0f:9400:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:6d:5c:4d:c7:b3:8f:44:93:ac:a5:3a:47:29:a1:c7:50:ef:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Aug 22 00:54:33 2025 GMT
Not After : Aug 21 00:59:33 2026 GMT
Subject: CN=599628E7089DB6B133460E4D917C597F7AB0229B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:81:0d:af:10:69:91:f2:a6:e7:f4:5c:d1:
56:8d:fc:34:de:21:8a:07:20:1d:ba:bd:a7:21:e7:
07:c8:2a:38:b4:89:4e:e2:81:48:c0:4d:b3:37:5b:
cf:b9:68:0e:36:38:a8:5d:b3:60:d3:32:59:14:dd:
ec:62:6e:c9:4a:a7:54:25:c9:47:df:4c:0d:45:72:
6d:a6:32:76:96:50:63:f4:b8:5a:d0:dd:56:0b:23:
8b:b1:ef:26:50:e7:f1:5f:5e:44:86:2a:34:31:6e:
08:d4:b6:b9:48:6f:be:6e:61:cb:15:c1:81:a2:22:
54:5c:d2:9e:32:99:1c:7a:d5:b1:48:a4:e5:2e:71:
a5:36:e6:18:b7:37:06:f5:e1:35:45:e5:b2:91:c5:
d3:2b:a0:bb:33:b1:cd:a9:04:37:5c:5b:89:de:75:
d8:e4:d2:a3:98:38:80:38:f4:8d:b5:56:6e:48:00:
fb:6a:66:7e:dd:35:0a:31:bf:b8:d3:ca:da:cb:55:
7b:ec:73:29:10:76:ab:c0:d4:a8:0f:90:f9:48:11:
97:10:ce:04:17:dc:73:93:51:23:30:2c:e8:bf:d4:
12:01:5b:d3:3c:02:0f:db:fb:7c:94:9c:f3:93:b2:
73:3b:99:9d:3a:53:7d:50:1a:b1:13:9c:4d:96:45:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:96:28:E7:08:9D:B6:B1:33:46:0E:4D:91:7C:59:7F:7A:B0:22:9B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610e::/48
2a0f:9400:6167::/48
2a0f:9400:690a::/47
2a0f:9400:693e::/48
2a0f:9400:7386::/48
2a0f:9400:750a::/48
2a0f:9400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
99:85:89:ac:0e:b0:26:21:b0:b0:08:8c:6f:31:88:f8:a1:d3:
4d:38:30:d3:60:bd:f9:c5:ce:07:62:ff:8f:d6:c5:5a:a5:cb:
fd:72:d5:08:4f:d1:2b:14:98:d2:16:aa:1f:8e:33:9f:8b:66:
9e:9c:ae:a5:47:5f:57:e8:3f:7e:52:12:f8:84:82:0d:8a:40:
6a:c2:d8:20:eb:e3:83:fb:00:99:56:7a:cc:d2:cd:b5:e0:12:
51:c8:1d:2d:e4:af:28:9e:df:7b:33:55:8d:79:17:81:6d:7f:
e7:ea:71:19:b3:64:30:ac:29:52:c1:9c:b7:fc:4c:91:ac:b9:
eb:db:01:8d:53:61:89:ca:c0:3c:ea:4a:6b:a9:60:d7:43:18:
04:c7:d2:f4:e4:95:53:9f:3a:5d:94:a0:45:ec:b0:50:6b:a5:
18:3e:9c:18:3a:32:f2:e3:4f:ef:76:c4:36:3a:38:39:13:85:
66:b5:73:a6:b5:eb:2f:55:19:fd:cc:53:95:ab:f0:06:b5:38:
d7:0c:1a:48:14:11:91:54:52:05:d1:b1:dc:ac:f7:15:2f:1f:
6f:fd:b4:f6:8c:f1:67:3b:79:65:74:11:f3:8a:33:1b:15:7a:
60:f7:2a:7e:d8:00:6d:c9:ee:34:41:f2:5c:dd:f9:fd:b9:5d:
bd:0a:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:26 2025 by rpki-client