Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: szrgBibaHTpmTGQYoCcjxE2GbQXlrh6ISn9M++8alng=
Subject key identifier: B4:6E:52:B7:5B:A4:20:51:45:2B:2B:14:39:B3:1E:5A:A6:51:EB:6B
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 2BC744F69882316108CDA2251FFDD35DECC4C712
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
Signing time: Tue 24 Jun 2025 01:46:20 +0000
ROA not before: Tue 24 Jun 2025 01:41:20 +0000
ROA not after: Tue 23 Jun 2026 01:46:20 +0000
asID: 20473
IP address blocks: 2a0f:9400:6102::/48 maxlen: 48
2a0f:9400:610e::/48 maxlen: 48
2a0f:9400:6167::/48 maxlen: 48
2a0f:9400:690a::/48 maxlen: 48
2a0f:9400:690b::/48 maxlen: 48
2a0f:9400:693e::/48 maxlen: 48
2a0f:9400:7386::/48 maxlen: 48
2a0f:9400:750a::/48 maxlen: 48
2a0f:9400:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c7:44:f6:98:82:31:61:08:cd:a2:25:1f:fd:d3:5d:ec:c4:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Jun 24 01:41:20 2025 GMT
Not After : Jun 23 01:46:20 2026 GMT
Subject: CN=B46E52B75BA42051452B2B1439B31E5AA651EB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:58:6f:80:37:e5:92:38:ea:28:90:81:1d:
ee:40:60:09:8c:a1:5b:f4:94:7d:9e:e3:7f:13:b6:
67:9b:4d:3e:f4:49:1c:d0:be:6b:b8:bb:ca:3f:6e:
b8:38:bb:d5:b8:b6:9f:d1:51:12:20:5d:05:a2:32:
cf:51:17:98:43:ca:f5:f3:a1:12:2a:8d:16:da:09:
f6:e9:53:a9:1d:2f:14:ec:eb:18:2c:72:88:b9:9c:
6c:49:98:10:29:8e:23:c0:02:cf:49:87:e9:11:df:
01:b8:12:e6:fa:fb:a8:94:3a:f1:c5:3d:ca:a5:0b:
15:2f:23:8e:47:65:fa:d8:29:f9:ef:31:64:49:7d:
cd:67:51:ba:58:a5:78:7a:3c:32:bc:5d:f9:2c:b0:
2d:4f:83:bd:df:6b:f1:dc:58:5a:92:c0:34:5e:a7:
ad:69:96:ac:46:87:64:4e:1a:68:ad:6b:1f:65:04:
ff:c1:f0:ff:a2:6b:a5:e5:85:5b:1e:a3:75:03:cc:
49:c6:74:ce:1b:d4:15:25:31:98:f7:bf:97:7d:3c:
90:d7:c6:ff:e2:e5:82:91:57:3a:ec:58:b8:df:b9:
b5:8e:9a:27:9f:6a:97:d5:dc:0a:b4:e1:cb:d3:8c:
17:99:09:00:5a:31:27:74:39:1a:76:30:f7:eb:81:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6E:52:B7:5B:A4:20:51:45:2B:2B:14:39:B3:1E:5A:A6:51:EB:6B
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6102::/48
2a0f:9400:610e::/48
2a0f:9400:6167::/48
2a0f:9400:690a::/47
2a0f:9400:693e::/48
2a0f:9400:7386::/48
2a0f:9400:750a::/48
2a0f:9400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
91:20:29:24:d9:9f:9a:64:23:af:f2:08:9a:d7:8e:b6:31:a9:
aa:6d:24:cd:19:f3:b1:e9:5b:5d:d3:5b:61:b5:b3:1b:a7:8f:
96:b6:5a:20:dd:ff:9a:42:10:37:cb:c7:24:8c:ff:46:a8:71:
e9:78:b9:34:46:5d:00:6c:51:23:6b:ad:73:74:bc:c0:c6:f8:
41:12:bb:ea:e7:6c:7e:7a:1d:e3:19:3a:6d:7d:9b:33:9f:13:
1c:be:e2:a9:93:54:1d:08:70:74:82:90:a0:5e:0f:60:ee:2d:
81:9c:31:3d:17:81:44:66:68:92:4b:a3:a7:0b:8b:6d:b1:c4:
b4:e8:41:1a:df:9b:f2:52:d0:c3:0b:1a:45:19:16:51:79:97:
2d:ad:56:66:58:9b:8f:5c:5a:5c:32:87:ca:8e:1a:5b:81:13:
6f:fb:fb:a0:70:5b:ce:06:6f:21:14:19:94:c3:50:e3:9e:05:
5e:93:f3:85:33:18:c6:d7:5e:1c:78:6d:67:4f:55:65:a7:a3:
04:47:f7:69:ef:fe:92:47:7b:e9:94:a3:81:39:b2:5c:c5:17:
3a:8e:ae:07:17:37:1f:5b:3d:b7:1b:4e:e4:35:5d:98:50:f8:
8c:1f:43:35:a0:85:b1:b0:ef:50:a4:13:78:0a:e9:47:ef:e3:
3a:79:e3:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUK8dE9piCMWEIzaIlH/3TXezExxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2VhNTMxNmRiZGFjMDFjZDA1ZDBlYWEwNWE4OWMwNGRh
M2U3Mzk4ZjAeFw0yNTA2MjQwMTQxMjBaFw0yNjA2MjMwMTQ2MjBaMDMxMTAvBgNV
BAMTKEI0NkU1MkI3NUJBNDIwNTE0NTJCMkIxNDM5QjMxRTVBQTY1MUVCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErFhvgDflkjjqKJCBHe5AYAmM
oVv0lH2e438TtmebTT70SRzQvmu4u8o/brg4u9W4tp/RURIgXQWiMs9RF5hDyvXz
oRIqjRbaCfbpU6kdLxTs6xgscoi5nGxJmBApjiPAAs9Jh+kR3wG4Eub6+6iUOvHF
PcqlCxUvI45HZfrYKfnvMWRJfc1nUbpYpXh6PDK8XfkssC1Pg73fa/HcWFqSwDRe
p61plqxGh2ROGmitax9lBP/B8P+ia6XlhVseo3UDzEnGdM4b1BUlMZj3v5d9PJDX
xv/i5YKRVzrsWLjfubWOmiefapfV3Aq04cvTjBeZCQBaMSd0ORp2MPfrgQtHAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUtG5St1ukIFFFKysUObMeWqZR62swHwYDVR0j
BBgwFoAUfqUxbb2sAc0F0OqgWonATaPnOY8wDgYDVR0PAQH/BAQDAgeAMHEGA1Ud
HwRqMGgwZqBkoGKGYHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5j
b20vcmVwby9GUkMtQ0EvNS83RUE1MzE2REJEQUMwMUNEMDVEMEVBQTA1QTg5QzA0
REEzRTczOThGLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5j
Oi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZnFVeGJiMnNBYzBG
ME9xZ1dvbkFUYVBuT1k4LmNlcjBbBggrBgEFBQcBCwRPME0wSwYIKwYBBQUHMAuG
P3JzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9GUkMt
Q0EvNS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsG
AQUFBwEHAQH/BFIwUDBOBAIAAjBIAwcAKg+UAGECAwcAKg+UAGEOAwcAKg+UAGFn
AwcBKg+UAGkKAwcAKg+UAGk+AwcAKg+UAHOGAwcAKg+UAHUKAwcAKg+UAIAgMA0G
CSqGSIb3DQEBCwUAA4IBAQCRICkk2Z+aZCOv8gia1462MamqbSTNGfOx6Vtd01th
tbMbp4+Wtlog3f+aQhA3y8ckjP9GqHHpeLk0Rl0AbFEja61zdLzAxvhBErvq52x+
eh3jGTptfZsznxMcvuKpk1QdCHB0gpCgXg9g7i2BnDE9F4FEZmiSS6OnC4ttscS0
6EEa35vyUtDDCxpFGRZReZctrVZmWJuPXFpcMofKjhpbgRNv+/ugcFvOBm8hFBmU
w1DjngVek/OFMxjG114ceG1nT1Vlp6MER/dp7/6SR3vplKOBObJcxRc6jq4HFzcf
Wz23G07kNV2YUPiMH0M1oIWxsO9QpBN4CulH7+M6eeMQ
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:41:30 2025 by rpki-client