Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
File: AS20473.roa (raw, json)
Hash identifier: yKT3Czy7rLaiez3Ycs24eY3+Ab6eDmSajO9fTJLlHiM=
Subject key identifier: 4A:FC:9F:D6:89:1A:14:C9:86:5F:D0:59:CD:82:42:66:EA:62:05:31
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 542B6463FE0BF6239D1E1D1E6EEC7D9F9EA31135
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
Signing time: Wed 08 Oct 2025 13:19:49 +0000
ROA not before: Wed 08 Oct 2025 13:14:49 +0000
ROA not after: Wed 07 Oct 2026 13:19:49 +0000
asID: 20473
IP address blocks: 2a0f:9400:610e::/48 maxlen: 48
2a0f:9400:6166::/48 maxlen: 48
2a0f:9400:6167::/48 maxlen: 48
2a0f:9400:690a::/48 maxlen: 48
2a0f:9400:690b::/48 maxlen: 48
2a0f:9400:693e::/48 maxlen: 48
2a0f:9400:750a::/48 maxlen: 48
2a0f:9400:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2b:64:63:fe:0b:f6:23:9d:1e:1d:1e:6e:ec:7d:9f:9e:a3:11:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Oct 8 13:14:49 2025 GMT
Not After : Oct 7 13:19:49 2026 GMT
Subject: CN=4AFC9FD6891A14C9865FD059CD824266EA620531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:46:13:31:73:eb:90:c9:d9:5c:a4:ee:34:
94:27:a4:23:cd:38:c2:c0:6e:36:f0:a3:13:1a:8b:
6f:51:de:7e:f3:8e:69:63:e5:cc:cd:6d:a3:29:df:
50:09:3e:cd:f6:1a:ec:9a:10:53:d4:01:b7:52:4c:
48:03:f9:55:0c:e8:d9:b2:0c:ec:49:8f:d9:19:4a:
8f:16:74:3c:b6:5d:3d:e6:d7:2a:28:aa:ca:40:cb:
9c:58:85:e6:53:57:2e:9a:e6:57:3b:a8:7e:22:1a:
e4:3a:8b:b7:cb:d5:05:a9:24:5e:51:87:a4:9b:9c:
a0:bd:fc:d5:74:ae:70:a0:ea:08:69:4a:6b:93:18:
0f:41:29:fd:9c:ba:74:b9:05:aa:dd:d7:ab:86:c8:
09:b0:c2:9c:2d:67:28:c5:e0:83:1a:56:0b:52:ba:
c2:6f:d0:58:49:63:cb:bb:fc:27:d6:8d:13:9f:38:
8e:69:3e:de:5b:8b:c8:65:ee:cf:ab:d7:e3:bb:6e:
81:ca:16:44:54:fb:07:4a:7d:e5:df:af:e0:0e:f5:
84:2a:aa:ea:3c:35:64:a0:67:05:a5:ed:f1:76:60:
48:c7:25:2b:1c:b3:07:73:b6:f7:44:82:ff:17:73:
07:be:d6:98:57:3f:e1:13:5a:35:a7:2c:1f:80:b9:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:9F:D6:89:1A:14:C9:86:5F:D0:59:CD:82:42:66:EA:62:05:31
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS20473.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:610e::/48
2a0f:9400:6166::/47
2a0f:9400:690a::/47
2a0f:9400:693e::/48
2a0f:9400:750a::/48
2a0f:9400:8020::/48
Signature Algorithm: sha256WithRSAEncryption
72:7c:93:bd:96:9f:a9:f1:6c:ca:18:3d:a2:b7:a5:a7:b9:ae:
c6:b0:6a:db:d8:86:2b:7e:91:61:b3:ab:bc:1e:56:bd:1b:8a:
fb:24:67:06:18:60:ed:f4:34:97:64:84:55:a9:08:b1:61:91:
de:21:9f:7a:89:91:06:11:14:9a:28:75:0d:71:df:01:71:ef:
da:7d:69:78:b6:c2:1d:0d:78:d5:5e:55:75:b0:3c:ae:53:4a:
34:a4:46:4d:aa:76:f6:7f:f9:55:5e:cd:b4:78:64:44:0b:a2:
39:6c:2b:a2:ae:a6:64:03:2b:52:ef:e1:3b:d9:d5:7b:8a:d7:
d4:1f:e3:65:bb:7f:95:bf:c2:42:1b:a3:78:93:3f:0b:04:5c:
d1:58:8a:fa:e2:30:46:82:c5:6e:01:d3:98:99:ef:ce:5e:71:
4a:7f:df:d3:4d:f5:dd:33:b0:e1:45:d1:74:da:ce:04:5b:ba:
a9:a5:b0:24:35:0e:7e:e7:bc:b4:89:d5:e8:22:10:e5:ab:04:
a4:92:43:89:28:53:94:95:7c:6c:12:65:a4:e5:2e:5c:a3:ae:
af:07:0f:f9:9d:9d:f6:eb:9a:fe:b1:f8:58:6b:37:95:46:33:
f7:d6:de:b5:4d:d7:95:e0:47:d6:61:a6:59:73:7a:c2:b8:3d:
0d:cf:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:36 2025 by rpki-client